Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32322d3234203d3e20323637393633.roa
File:                     34352e3136362e3134382e302f32322d3234203d3e20323637393633.roa (raw, json)
Hash identifier:          Bq3KWPb7FRZ/Ut6rMXhfDrCsRN45oo5vlisWRC2BCkk=
Subject key identifier:   42:54:88:C2:80:A8:41:29:29:74:FA:44:6D:73:45:CB:19:AF:85:90
Certificate issuer:       /CN=BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD
Certificate serial:       349B61873AB9786E2F4366C78883EFFA7FC5179F
Authority key identifier: BB:94:D2:AF:04:F8:72:8E:A2:60:8D:9E:D6:FB:6C:36:C2:9B:6A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32322d3234203d3e20323637393633.roa
Signing time:             Tue 05 Nov 2024 12:55:14 +0000
ROA not before:           Tue 05 Nov 2024 12:50:14 +0000
ROA not after:            Tue 04 Nov 2025 12:55:14 +0000
asID:                     267963
IP address blocks:        45.166.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9b:61:87:3a:b9:78:6e:2f:43:66:c7:88:83:ef:fa:7f:c5:17:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD
        Validity
            Not Before: Nov  5 12:50:14 2024 GMT
            Not After : Nov  4 12:55:14 2025 GMT
        Subject: CN=425488C280A841292974FA446D7345CB19AF8590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:5e:7a:7b:f7:f8:a4:60:0f:ad:1e:8e:02:
                    ac:b2:9b:89:13:ab:f5:1a:c6:4d:3d:15:31:ab:cf:
                    9f:b7:50:04:40:b3:13:00:4a:bf:3e:ad:f9:a2:76:
                    e6:01:49:3d:eb:93:80:d9:1e:4a:07:f0:3a:0b:ba:
                    61:8a:4e:14:f9:d7:59:ec:95:92:c3:41:02:86:d2:
                    36:3c:f6:31:30:7a:c9:04:68:48:a7:39:6f:2d:c8:
                    49:7f:d7:94:9b:da:98:f7:0f:82:c9:5e:3c:a1:d0:
                    7d:da:fe:24:00:90:72:14:97:3b:b2:2c:75:e5:33:
                    b5:67:c4:27:36:4b:ea:6a:ee:61:d9:c7:94:f3:d0:
                    3b:0b:e5:da:a7:4c:b9:23:87:25:35:8c:69:8b:e0:
                    e0:a2:80:97:61:86:07:f7:57:b7:86:cc:7e:5b:4b:
                    5b:1d:ae:48:ab:df:a1:d3:c8:d0:62:3e:17:f8:ef:
                    62:fa:6c:f6:24:93:63:aa:b5:52:5b:1f:c9:ca:01:
                    29:fe:4b:85:14:e3:00:1e:eb:7f:84:bf:17:9d:17:
                    bb:14:7b:58:04:18:7d:e9:87:7b:08:12:ba:d1:3b:
                    58:44:0e:7b:17:42:b0:b1:7a:02:15:55:c3:47:d3:
                    c7:91:f8:59:44:31:73:0b:b7:0a:bb:9f:6a:a2:23:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:54:88:C2:80:A8:41:29:29:74:FA:44:6D:73:45:CB:19:AF:85:90
            X509v3 Authority Key Identifier:
                keyid:BB:94:D2:AF:04:F8:72:8E:A2:60:8D:9E:D6:FB:6C:36:C2:9B:6A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32322d3234203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:eb:38:20:fb:21:4b:0a:6a:fc:38:84:ff:5a:fd:ad:ea:13:
         61:c6:02:a1:b5:76:62:6a:12:c8:67:96:d5:60:a4:95:d0:73:
         bf:80:be:3c:55:7e:01:75:12:77:9d:b8:e1:7f:fe:8c:c5:2e:
         c9:42:44:cf:ff:b4:10:70:21:75:7d:e2:37:9c:b5:4c:f9:e9:
         fa:99:2f:06:91:c6:f2:94:64:d7:03:b1:f2:06:07:03:1a:50:
         1c:76:46:22:db:1b:65:79:1e:07:99:c7:b8:2b:33:b4:12:5c:
         47:b8:78:12:28:10:61:db:f2:36:bf:96:16:4d:4f:77:22:0c:
         62:84:d2:8e:e5:12:b7:f0:aa:a7:ff:ce:a5:ff:81:06:1a:ec:
         62:6d:ab:dc:94:1f:1d:3e:68:6e:27:c3:11:cc:14:0d:da:39:
         60:27:ca:a9:52:8f:57:ca:4f:db:17:b7:27:3e:a3:30:7e:8b:
         2b:9f:d5:3a:4b:9c:e8:ec:43:11:c4:4f:ba:bf:49:4f:96:c0:
         91:59:ef:97:cd:69:ce:97:da:52:9a:71:e5:c3:e7:69:63:6e:
         72:86:b2:f7:9f:34:2e:fc:4d:e2:08:25:80:7f:55:38:5c:f6:
         ef:84:50:70:f9:d9:11:25:fb:72:e3:9e:93:a8:37:0a:1d:7d:
         b3:9e:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:04 2024 by rpki-client on console-fra.rpki-client.org