Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
File:                     34352e3139312e3230342e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          pF1UD0ohRrUrA/uoF1MvhgOp3OOokkhl3tDCRmc9boU=
Subject key identifier:   A6:C6:47:10:A3:46:DB:7B:26:A9:2F:FC:FD:5E:DC:C3:85:4B:B0:EA
Certificate issuer:       /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial:       35FC181611ADC79F5547C090BFAF831DC918BB10
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
Signing time:             Thu 04 Apr 2024 23:12:28 +0000
ROA not before:           Thu 04 Apr 2024 23:07:28 +0000
ROA not after:            Thu 03 Apr 2025 23:12:28 +0000
asID:                     3356
IP address blocks:        45.191.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
                          rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fc:18:16:11:ad:c7:9f:55:47:c0:90:bf:af:83:1d:c9:18:bb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
        Validity
            Not Before: Apr  4 23:07:28 2024 GMT
            Not After : Apr  3 23:12:28 2025 GMT
        Subject: CN=A6C64710A346DB7B26A92FFCFD5EDCC3854BB0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:73:a6:21:80:83:67:e6:81:80:81:7f:9e:
                    3a:55:2f:d6:a5:b0:73:c7:25:7f:7c:ca:e2:94:d7:
                    e5:ce:93:ff:6a:53:71:30:32:1b:15:f4:19:90:a7:
                    79:62:54:a3:82:f4:0f:f9:91:0c:0f:9c:5d:c7:b8:
                    cb:c7:63:ca:3f:36:a0:ea:4e:51:9d:40:ac:c5:f8:
                    1f:ec:ee:46:e7:34:33:a1:fb:83:ea:a1:b1:1d:f0:
                    91:91:28:e0:8c:f0:0a:00:40:50:8e:4b:09:d9:45:
                    a2:a2:e1:9f:45:85:50:0f:d7:c3:a8:b7:a9:64:38:
                    69:96:21:83:21:b8:fc:79:45:2d:60:69:b5:48:ac:
                    e0:c5:a0:63:6a:fe:b3:97:69:98:12:20:c5:84:b3:
                    17:be:b8:d8:e1:a8:29:32:08:3d:9c:24:2f:30:79:
                    33:e1:df:20:98:7b:1d:78:35:29:28:d2:f0:ba:5e:
                    50:0e:4a:8f:1e:d9:7f:f2:a6:b8:9c:00:7b:16:8d:
                    e7:f1:f7:0c:65:4a:4f:ee:a9:7e:7c:80:c4:fe:a5:
                    32:80:56:3e:53:45:17:32:90:c4:6d:af:0f:59:5c:
                    a0:23:6c:54:0a:a2:fa:52:10:c5:35:d2:78:00:f5:
                    9b:d3:3f:9f:e7:2e:1a:4f:ac:d6:54:4d:68:71:16:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:47:10:A3:46:DB:7B:26:A9:2F:FC:FD:5E:DC:C3:85:4B:B0:EA
            X509v3 Authority Key Identifier:
                keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:fa:3a:84:3d:2c:f8:97:9d:eb:24:fb:d4:d1:f6:00:b6:
         c8:4f:1b:0a:26:b4:08:38:eb:78:55:48:04:7a:36:ef:ce:28:
         8f:1d:af:17:2e:a1:de:76:6f:b2:54:ce:f2:5a:b6:75:64:ad:
         63:3b:ab:70:21:12:4f:44:16:aa:02:5e:79:5b:1e:6a:41:0a:
         de:32:1f:e1:75:2e:58:5a:2d:66:ca:bc:c4:d1:59:0e:9f:8c:
         3a:f0:a8:e0:54:f5:24:4b:95:fd:08:cf:40:78:b9:0e:e1:3f:
         53:ec:e5:72:80:af:87:58:ca:de:59:82:20:05:3a:6b:89:98:
         ea:53:e3:65:33:ce:a8:82:81:4b:21:f0:da:fe:aa:3d:be:f5:
         c6:d0:da:fc:a7:b7:d5:d2:3f:6d:04:bf:64:a8:9f:3a:14:25:
         4b:19:a5:10:13:21:fc:17:f0:8e:c1:22:b8:6b:7d:98:aa:dd:
         5c:d2:76:f7:57:8b:7a:f2:18:86:f7:4a:7d:7b:c2:62:26:97:
         e8:c2:eb:db:07:ce:4f:6c:2a:99:08:8a:a1:62:92:c9:74:a7:
         47:84:70:3b:d9:28:62:c8:05:b7:4c:3d:99:5e:76:81:44:b4:
         a9:09:52:a2:d2:7c:9c:00:db:84:66:9b:2e:12:5a:c9:ce:0d:
         3f:c7:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:47 2024 by rpki-client on console-fra.rpki-client.org