Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/34352e342e35322e302f32322d3234203d3e20323636303430.roa
File:                     34352e342e35322e302f32322d3234203d3e20323636303430.roa (raw, json)
Hash identifier:          QzZU2iCA7T/JpJDvYDoB63bo7GzOTQV9aK+FlpzrFDI=
Subject key identifier:   99:7C:E6:40:35:50:F1:FA:C9:F3:E6:CA:D5:D0:C4:5A:8D:CE:58:3D
Certificate issuer:       /CN=D6816262B9EC51281AB7A20B7EE9D1462396264F
Certificate serial:       6B714A97AF179649B1E89D9B1E207A69D11C5EB1
Authority key identifier: D6:81:62:62:B9:EC:51:28:1A:B7:A2:0B:7E:E9:D1:46:23:96:26:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/34352e342e35322e302f32322d3234203d3e20323636303430.roa
Signing time:             Thu 04 Apr 2024 23:23:53 +0000
ROA not before:           Thu 04 Apr 2024 23:18:53 +0000
ROA not after:            Thu 03 Apr 2025 23:23:53 +0000
asID:                     266040
IP address blocks:        45.4.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.crl
                          rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:71:4a:97:af:17:96:49:b1:e8:9d:9b:1e:20:7a:69:d1:1c:5e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6816262B9EC51281AB7A20B7EE9D1462396264F
        Validity
            Not Before: Apr  4 23:18:53 2024 GMT
            Not After : Apr  3 23:23:53 2025 GMT
        Subject: CN=997CE6403550F1FAC9F3E6CAD5D0C45A8DCE583D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:1c:7d:42:45:ad:fa:1b:b3:81:df:d2:4c:
                    43:37:aa:f6:6d:3e:4a:81:e6:3a:04:3d:28:50:28:
                    03:eb:aa:38:55:5c:3b:54:ae:3d:2c:45:28:51:ff:
                    6a:be:9b:a7:c9:d7:4c:a7:38:5b:da:b5:3c:24:73:
                    36:bd:6d:41:d9:4e:3e:8c:9c:77:26:79:26:2e:89:
                    fe:5b:c8:ff:52:23:41:8f:c9:f8:71:30:16:ef:bb:
                    ca:2a:5d:cc:16:8a:7a:c9:0b:be:40:73:64:b3:ae:
                    78:53:5b:79:28:53:f3:9c:fb:7c:04:12:1d:01:86:
                    01:b3:78:67:7d:88:11:08:b8:93:6c:0b:b6:86:bb:
                    5b:a4:3c:9a:2d:a0:ad:3e:87:71:5a:44:10:ac:ea:
                    7d:ff:24:a5:cc:75:d7:86:1e:03:e8:45:7a:3a:4d:
                    fd:db:0e:6b:05:ca:a8:98:60:08:53:d0:1a:8a:fd:
                    29:b6:1c:a4:fa:da:7c:ca:e7:bc:1c:ee:90:f0:69:
                    27:e4:ce:9d:db:f8:d9:1d:06:7a:8b:2e:9e:e1:5e:
                    9f:f2:72:77:c6:09:08:2b:85:59:d1:45:39:40:42:
                    9a:a0:f9:52:9d:b1:9d:18:37:5c:0d:ab:db:bb:48:
                    84:5c:b2:79:e2:ac:78:31:17:38:00:de:52:8d:34:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7C:E6:40:35:50:F1:FA:C9:F3:E6:CA:D5:D0:C4:5A:8D:CE:58:3D
            X509v3 Authority Key Identifier:
                keyid:D6:81:62:62:B9:EC:51:28:1A:B7:A2:0B:7E:E9:D1:46:23:96:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/34352e342e35322e302f32322d3234203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:a9:f7:7e:78:42:24:bd:41:8b:20:19:c5:55:0c:a8:2f:
         99:5e:ea:f8:6b:1f:2f:6e:f3:59:ff:fe:4f:17:8a:6e:1a:ab:
         45:1a:f9:4a:40:32:4d:60:d3:ee:21:54:df:ea:39:ef:94:61:
         ed:c1:84:e1:fd:81:cf:7e:30:2f:e5:bf:99:b7:32:71:ea:4a:
         2d:35:6e:06:ce:3a:67:0b:28:a4:29:31:cb:4f:d5:c4:f5:f4:
         c5:3f:86:26:d9:02:83:00:8c:c8:1e:70:f9:c2:01:f8:2b:00:
         e7:8e:c4:0f:df:81:56:a0:f9:38:57:a1:0d:28:7a:aa:06:08:
         a5:ee:fc:0a:0c:71:b2:52:1c:2e:59:39:88:86:69:a1:94:9c:
         aa:dc:33:fe:e6:2d:e1:5c:12:c5:9b:52:9f:3e:17:14:98:d4:
         bb:c1:e4:fa:92:6f:ad:fb:91:9a:4b:a6:55:9b:4e:6e:6e:39:
         ef:15:f2:16:13:cf:7c:32:a2:e5:15:30:26:89:96:ca:ec:0d:
         d6:ee:a9:73:93:a5:4d:17:a2:0f:12:e9:b2:41:af:a0:19:f4:
         bd:23:b1:f0:4e:1d:03:25:b5:f4:de:16:5f:95:f4:37:94:61:
         39:f5:d0:a5:6c:87:98:4a:4e:13:9b:98:f7:06:13:78:ce:dc:
         34:f3:9b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org