Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa
File:                     34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa (raw, json)
Hash identifier:          4mVjWqaaT4/GqCZNJ7t40C4M4BgIh8QZBcQEuHa3O9M=
Subject key identifier:   3B:E2:21:30:59:DA:A4:80:12:AD:99:D5:79:01:91:30:90:25:E4:F9
Certificate issuer:       /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial:       096D0B7BA5D0A550E9873D785241A78B458C8151
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa
Signing time:             Thu 04 Apr 2024 23:12:27 +0000
ROA not before:           Thu 04 Apr 2024 23:07:27 +0000
ROA not after:            Thu 03 Apr 2025 23:12:27 +0000
asID:                     266539
IP address blocks:        45.191.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
                          rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6d:0b:7b:a5:d0:a5:50:e9:87:3d:78:52:41:a7:8b:45:8c:81:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
        Validity
            Not Before: Apr  4 23:07:27 2024 GMT
            Not After : Apr  3 23:12:27 2025 GMT
        Subject: CN=3BE2213059DAA48012AD99D5790191309025E4F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:27:fc:37:dc:53:21:96:b2:76:10:48:56:
                    15:fe:1d:20:62:97:f2:a7:8e:9a:a0:a0:65:65:e6:
                    be:0d:8d:dd:68:e7:da:e7:12:02:35:7e:3e:20:1e:
                    a5:3b:c4:3f:21:ac:bd:c5:4d:a0:f9:c9:a0:40:c3:
                    10:ea:5e:e0:8a:60:aa:24:2d:da:65:7e:3c:11:04:
                    a5:aa:bb:5f:5d:43:90:67:98:9f:3b:06:45:bb:d0:
                    25:51:d7:1b:78:2f:c3:4e:e9:54:8d:9f:da:cf:cf:
                    71:60:0d:59:e1:74:78:cd:6f:ed:16:22:c3:71:2e:
                    d9:e5:86:a7:4b:a8:88:11:de:76:b1:87:62:b0:ea:
                    fb:d9:15:f0:60:41:3f:e7:49:1b:e8:10:06:dd:ff:
                    14:f9:97:3d:6e:16:77:21:8c:03:f8:c9:2e:73:f6:
                    d3:2a:66:1e:22:61:52:a8:40:cd:4c:94:3a:73:02:
                    fb:d5:f9:74:5a:7d:50:3d:2f:97:6d:b4:a8:16:04:
                    a6:1e:7d:39:79:e4:08:5d:a9:81:8c:ea:b7:89:59:
                    ee:ae:ab:dc:f2:8b:db:26:f8:49:ec:11:39:e8:7c:
                    61:f8:b4:4e:64:1e:84:b4:65:f0:c0:1c:3d:7f:8d:
                    42:2f:11:dd:9c:07:41:a5:87:83:65:a9:a4:de:a6:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E2:21:30:59:DA:A4:80:12:AD:99:D5:79:01:91:30:90:25:E4:F9
            X509v3 Authority Key Identifier:
                keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:53:1d:80:5f:73:f2:ae:1b:86:ac:c4:bd:9b:26:3c:d6:
         4b:fa:f1:67:73:3d:52:1b:ab:29:50:78:a0:ae:32:7e:27:c0:
         40:3c:84:0d:0f:73:1f:88:c9:d9:9d:7b:67:a5:c6:dd:17:c0:
         9f:ff:ee:9b:71:d3:00:77:22:06:e1:f0:1e:ce:a4:ea:6f:70:
         e1:26:14:81:71:b1:4c:48:ae:20:1b:96:39:b2:01:06:e4:c6:
         b3:0d:02:1f:8e:f5:57:d3:1e:4f:14:c2:20:73:1b:f4:82:e4:
         77:58:3c:78:cd:8a:ed:14:36:bd:bd:61:89:55:e9:7c:ae:42:
         69:45:07:4b:c2:8a:1e:49:87:d9:ef:10:bb:19:32:45:61:f8:
         31:6f:45:81:a5:44:24:a3:a5:d8:76:ae:6b:b1:e0:d8:c6:c9:
         cb:af:22:c9:87:cc:aa:65:1a:db:ab:bf:6e:f0:3c:72:88:eb:
         c5:55:96:59:c9:9e:e3:91:f1:5d:b5:51:fd:c2:25:c6:3e:f6:
         c8:43:3b:2e:d1:7c:05:28:24:a6:85:79:5a:64:1f:bf:d8:7b:
         cc:ca:5c:85:38:f9:3a:c5:e0:98:dd:8d:cd:c2:c9:53:73:92:
         09:a1:28:73:d7:61:ec:71:57:94:95:48:e3:b9:4b:82:2c:fe:
         44:b3:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:43 2024 by rpki-client on console-ams.rpki-client.org