Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa
File:                     34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa (raw, json)
Hash identifier:          ggmffQCobkiZIAXSgugdHZh4Nk9vJB/GWWz4tKIBqjM=
Subject key identifier:   A0:F1:63:05:72:B7:29:AE:C1:77:BB:77:A2:40:42:D2:D8:8D:46:B1
Certificate issuer:       /CN=4B222F2767D3CDE8BB77E315F1A601F7044E1E96
Certificate serial:       47036182C5CD840607476221DE54693F39BC21E5
Authority key identifier: 4B:22:2F:27:67:D3:CD:E8:BB:77:E3:15:F1:A6:01:F7:04:4E:1E:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa
Signing time:             Wed 13 Nov 2024 19:48:47 +0000
ROA not before:           Wed 13 Nov 2024 19:43:47 +0000
ROA not after:            Wed 12 Nov 2025 19:48:47 +0000
asID:                     269332
IP address blocks:        45.184.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.crl
                          rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:03:61:82:c5:cd:84:06:07:47:62:21:de:54:69:3f:39:bc:21:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B222F2767D3CDE8BB77E315F1A601F7044E1E96
        Validity
            Not Before: Nov 13 19:43:47 2024 GMT
            Not After : Nov 12 19:48:47 2025 GMT
        Subject: CN=A0F1630572B729AEC177BB77A24042D2D88D46B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:b0:8e:54:2a:5b:25:58:49:e3:00:19:9b:
                    65:9c:af:63:c4:ca:ef:0d:88:d3:50:49:df:f7:dc:
                    e6:fc:61:02:26:b3:52:4a:96:9e:96:82:34:4c:fe:
                    d9:db:d0:ab:5c:e9:d8:f9:21:ec:b9:b5:67:2a:7f:
                    00:0b:fb:59:cf:e0:70:d7:cc:cd:8a:c9:ab:43:64:
                    21:80:a7:10:d1:c6:20:35:3b:8f:a2:d3:df:0e:d8:
                    db:0f:72:a9:99:ed:24:57:f4:c3:d5:0d:ce:d3:13:
                    1a:62:20:df:0e:3e:78:3c:09:b3:0c:66:66:84:53:
                    ec:4b:1e:1b:c8:f1:47:f3:b5:e1:e9:29:01:61:2e:
                    95:76:3b:f6:0b:cb:16:06:59:35:a0:49:03:3f:37:
                    e6:6f:e5:87:e5:18:fe:3e:a4:56:06:70:86:e8:a7:
                    79:61:d7:3b:0d:88:f7:88:f0:09:fc:7c:c0:6c:57:
                    bf:05:e0:30:ec:ab:4a:26:46:a4:03:d7:7c:1f:d1:
                    41:06:00:97:af:58:67:44:7e:df:c4:ad:41:fd:95:
                    c9:50:2e:1a:cc:13:bb:c3:10:68:c0:e5:de:b8:a4:
                    6a:3a:66:92:4a:f5:30:32:4e:5e:14:00:85:fd:aa:
                    11:f2:ac:9e:7e:15:3c:7e:01:50:db:2f:94:b7:bb:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F1:63:05:72:B7:29:AE:C1:77:BB:77:A2:40:42:D2:D8:8D:46:B1
            X509v3 Authority Key Identifier:
                keyid:4B:22:2F:27:67:D3:CD:E8:BB:77:E3:15:F1:A6:01:F7:04:4E:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ad:5c:ae:8a:a3:71:cc:c3:7a:64:29:47:b0:c2:ce:08:2d:
         cd:c3:17:24:93:3b:31:5a:7f:8e:cc:22:87:2e:21:28:14:37:
         d2:0e:c8:b3:95:75:65:4a:28:e1:38:b6:9a:29:57:c5:db:7e:
         b2:ab:15:2d:50:82:4e:18:41:ca:8f:cb:7c:66:35:36:e2:b0:
         6b:9e:f8:89:33:aa:f9:21:3c:8d:2b:78:66:6f:f5:8f:9d:95:
         83:3b:96:dd:dd:ff:f2:be:79:b4:54:55:7b:d8:9f:35:8f:d5:
         b6:86:bb:e2:22:28:6a:05:f7:2d:48:96:65:05:7e:b5:d9:1b:
         c4:dc:f3:c1:c1:c8:b5:73:7f:38:a2:39:c5:7f:14:29:2d:cd:
         95:b5:7a:92:0c:07:82:11:27:32:de:ff:20:46:a0:c5:16:0b:
         bf:45:de:b4:65:3e:97:d4:32:d0:a0:5c:ca:2d:df:2f:b5:53:
         b5:06:51:4b:94:87:d7:de:1b:64:6b:0c:6c:0d:0b:2a:d7:e6:
         11:4d:ab:04:9c:fa:25:33:40:f9:5d:0c:f2:2b:01:77:ca:f0:
         c2:c8:a7:38:b8:af:18:c8:db:70:e7:48:49:47:92:c3:f3:23:
         0b:1e:c5:92:ea:36:8e:ee:00:8d:ad:ed:08:01:24:b2:bd:35:
         d0:e6:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:41 2024 by rpki-client on console-fra.rpki-client.org