Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323032.roa
File:                     34352e3139312e3230342e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          dmChxSPeq0RZCKndH6z9ALcY3I6SKPJrJ6VEoJz4Zao=
Subject key identifier:   3A:E9:E0:45:EC:C5:93:58:E0:4A:98:33:DC:F1:A6:E2:B0:FD:47:FA
Certificate issuer:       /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial:       1A238E015A476C09E2431881DA3B3B231C3DED5D
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323032.roa
Signing time:             Thu 04 Apr 2024 23:12:28 +0000
ROA not before:           Thu 04 Apr 2024 23:07:28 +0000
ROA not after:            Thu 03 Apr 2025 23:12:28 +0000
asID:                     202
IP address blocks:        45.191.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
                          rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:23:8e:01:5a:47:6c:09:e2:43:18:81:da:3b:3b:23:1c:3d:ed:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
        Validity
            Not Before: Apr  4 23:07:28 2024 GMT
            Not After : Apr  3 23:12:28 2025 GMT
        Subject: CN=3AE9E045ECC59358E04A9833DCF1A6E2B0FD47FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:f0:81:be:f4:d5:02:92:a6:0f:b1:94:1d:
                    77:b1:f8:7d:89:a4:67:f8:be:0d:38:e2:99:21:91:
                    49:32:98:f6:b8:0a:51:7d:fe:92:18:2a:32:f6:d1:
                    26:dd:d5:19:03:3e:85:1b:03:61:ec:49:d0:df:ee:
                    15:d6:05:d1:e6:96:3a:ff:a1:38:9b:18:c4:dd:cc:
                    bf:15:1f:09:76:2a:51:43:e9:d7:ed:66:f4:0e:14:
                    52:83:bb:fa:f3:f0:3a:83:e4:c2:b3:46:f8:5a:75:
                    91:63:0b:fe:2e:0b:20:a2:fc:fd:ab:31:5e:f8:7a:
                    40:2e:ce:d6:b5:20:92:21:f1:05:d5:74:f4:30:91:
                    56:26:09:90:2b:a8:8c:88:2e:12:ea:ce:68:eb:0c:
                    a8:eb:85:88:dd:ed:e7:f3:8e:ef:56:78:de:ab:e9:
                    9e:4c:e3:50:f7:35:1a:05:84:31:0a:f6:e4:bb:94:
                    9f:1e:a6:a0:89:1e:1f:f7:f2:5c:58:8d:36:05:de:
                    ab:e0:2a:1e:c7:03:1a:f5:b9:77:80:54:ac:f2:53:
                    8d:3f:0a:0a:6f:9f:a0:71:d3:19:95:13:cd:0e:23:
                    e7:22:03:81:79:7a:5b:f2:96:10:a9:32:d2:1e:a1:
                    db:57:32:72:c9:4c:31:86:a6:ec:92:96:a2:21:84:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E9:E0:45:EC:C5:93:58:E0:4A:98:33:DC:F1:A6:E2:B0:FD:47:FA
            X509v3 Authority Key Identifier:
                keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:96:82:16:aa:e7:cb:fb:4f:2f:f3:67:d3:5f:44:a7:ae:
         c8:8e:40:b3:d3:3f:3b:06:43:b9:5b:01:aa:c3:95:56:99:c7:
         0d:74:22:73:27:ad:29:d6:f8:f8:0c:c4:b7:84:79:7f:62:8a:
         89:9b:a7:ac:6b:86:85:5f:c0:c4:39:47:2e:0d:73:fd:9d:3c:
         9b:e2:3b:09:2b:42:6c:ee:49:5d:b7:3b:cc:54:46:4c:24:a8:
         83:91:00:79:d7:0a:63:4d:31:b0:34:9b:e1:65:fc:78:15:10:
         5c:fd:c9:3b:32:c1:0b:e8:dc:d7:96:ac:b0:1f:a0:9b:39:b6:
         87:75:04:96:55:de:33:47:f5:04:80:ec:76:dc:e3:03:8a:2d:
         f4:ee:f2:02:ee:2a:38:79:91:d3:5e:63:dd:d3:53:b7:a8:ac:
         fe:15:0c:34:e0:a7:a2:2d:f9:90:66:a7:90:cf:d2:eb:10:7f:
         8f:b3:46:ba:83:ec:ea:aa:0d:22:bd:d1:3c:86:1e:13:90:b3:
         73:21:21:3c:44:c7:57:54:c1:60:cb:0b:53:e4:96:80:a7:9a:
         ce:22:30:15:89:c2:ff:5a:58:ad:3f:d8:39:34:b1:5c:4f:e0:
         ae:65:c6:09:5e:01:8b:9e:2b:e0:ed:7e:2a:a4:dc:23:ec:65:
         c1:84:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:59 2024 by rpki-client on console-fra.rpki-client.org