Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa
File:                     34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa (raw, json)
Hash identifier:          J3iTCXHw0Nj3qCilVLHmd2nQ4bOW9n8+T9my51EA870=
Subject key identifier:   DC:9A:A1:DA:74:4B:62:42:C1:52:4B:16:7A:3A:32:E4:50:39:27:21
Certificate issuer:       /CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
Certificate serial:       7955D142A3F1192A6C54301099EC86DD91A100D2
Authority key identifier: 51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa
Signing time:             Thu 04 Apr 2024 03:53:06 +0000
ROA not before:           Thu 04 Apr 2024 03:48:06 +0000
ROA not after:            Thu 03 Apr 2025 03:53:06 +0000
asID:                     268870
IP address blocks:        45.174.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.crl
                          rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:55:d1:42:a3:f1:19:2a:6c:54:30:10:99:ec:86:dd:91:a1:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
        Validity
            Not Before: Apr  4 03:48:06 2024 GMT
            Not After : Apr  3 03:53:06 2025 GMT
        Subject: CN=DC9AA1DA744B6242C1524B167A3A32E450392721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:86:c4:7d:20:ce:94:70:1a:c0:52:b2:ed:
                    c8:13:29:01:73:fe:84:d4:65:26:51:58:8b:29:09:
                    a8:11:6f:c8:2e:4e:8f:5b:1e:3d:c6:c9:37:c2:54:
                    82:70:4b:5d:16:6d:4e:d3:d6:10:a6:ba:66:9a:af:
                    29:f9:cb:0f:87:2c:9d:e5:05:7d:c1:5b:13:86:ef:
                    71:06:fb:8c:85:ee:3d:7e:51:f4:55:ef:8d:a9:a8:
                    0a:53:08:15:6c:e7:f3:10:d9:5a:07:b2:ab:2e:7e:
                    fc:c6:e6:fd:b8:14:fc:39:82:e1:36:ac:c1:23:1c:
                    be:8e:6f:c1:6e:90:b8:71:62:af:db:26:e1:8e:5e:
                    52:0c:50:3b:69:74:d7:78:38:c3:ed:71:2e:e5:28:
                    09:98:12:5f:43:c5:e7:1f:ff:de:69:1a:cd:60:5e:
                    a6:47:ab:ec:02:33:62:8c:40:03:a6:c3:98:97:d4:
                    73:31:dc:4f:5c:e0:7b:d5:0b:ab:75:58:a9:74:18:
                    bf:a3:c6:96:8d:f2:00:0b:ec:76:7f:13:0a:04:1c:
                    c5:7e:e8:e7:9f:6d:42:86:ac:21:b3:8d:aa:62:99:
                    c0:d4:0b:13:09:78:f0:a6:3a:7f:38:b6:c6:21:a6:
                    0c:dc:ec:7d:10:99:a9:0d:01:e1:6f:80:36:9f:36:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9A:A1:DA:74:4B:62:42:C1:52:4B:16:7A:3A:32:E4:50:39:27:21
            X509v3 Authority Key Identifier:
                keyid:51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:6c:64:f5:55:dd:f4:51:1b:07:3c:63:1f:12:d1:f1:68:
         d4:1d:d6:a3:7a:28:d8:09:78:a4:8e:73:50:82:78:29:2c:2b:
         5c:8b:47:39:6c:86:aa:33:41:df:7f:14:d3:5b:1a:39:c6:28:
         c9:d2:b0:fd:db:a6:30:62:25:16:40:25:48:82:40:1d:5a:dc:
         eb:f5:7a:1c:46:8c:ce:ac:0c:5b:d5:e5:db:b7:6c:87:c6:f9:
         9d:8d:72:74:9d:29:14:cf:0d:39:d1:59:b8:c5:95:43:91:bc:
         fa:54:3a:c5:26:82:5b:38:25:2d:73:2b:3c:24:92:c2:67:1e:
         e6:9c:ae:2f:5f:05:c6:27:a5:96:3b:5d:6b:2d:8d:9a:d8:dc:
         dd:a8:ce:45:c0:03:fe:69:b8:84:59:5a:d3:65:51:83:29:4d:
         6d:01:85:48:18:e6:e2:d8:28:e6:02:eb:8c:3c:1b:be:fb:65:
         b3:30:7e:af:f3:8c:50:26:1a:cb:3e:a1:4b:f7:e4:14:15:2a:
         81:b7:61:da:98:f2:fc:75:41:af:87:e0:30:d4:5f:71:e4:d1:
         38:c1:4b:87:b6:e2:48:18:1c:0b:86:e6:69:b2:8a:a5:39:14:
         3b:37:55:62:9f:c9:94:99:8c:cc:0d:ee:08:21:ac:84:c4:13:
         60:b4:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org