Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/34352e3138372e35322e302f32322d3234203d3e20323639343536.roa
File:                     34352e3138372e35322e302f32322d3234203d3e20323639343536.roa (raw, json)
Hash identifier:          /ee347XqUFD0GNHUvZPxzsNiL6zYzNMIlsAmB77kz+Q=
Subject key identifier:   34:52:B3:12:2D:F1:92:DA:BD:B2:DB:EB:9A:70:A8:72:DD:97:76:72
Certificate issuer:       /CN=C95F48510E1D8365515A1BA5B1BFBB3A9B041584
Certificate serial:       348D3A217EFAF4AE027F92235BE3BC7C1DEE1BCF
Authority key identifier: C9:5F:48:51:0E:1D:83:65:51:5A:1B:A5:B1:BF:BB:3A:9B:04:15:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/34352e3138372e35322e302f32322d3234203d3e20323639343536.roa
Signing time:             Thu 04 Apr 2024 03:21:36 +0000
ROA not before:           Thu 04 Apr 2024 03:16:36 +0000
ROA not after:            Thu 03 Apr 2025 03:21:36 +0000
asID:                     269456
IP address blocks:        45.187.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.crl
                          rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8d:3a:21:7e:fa:f4:ae:02:7f:92:23:5b:e3:bc:7c:1d:ee:1b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C95F48510E1D8365515A1BA5B1BFBB3A9B041584
        Validity
            Not Before: Apr  4 03:16:36 2024 GMT
            Not After : Apr  3 03:21:36 2025 GMT
        Subject: CN=3452B3122DF192DABDB2DBEB9A70A872DD977672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:73:a1:14:39:a5:c0:8a:e0:0d:df:cb:4e:
                    b1:c8:1a:c4:c0:fa:3e:e6:e0:6f:71:83:59:ad:8f:
                    37:1a:e2:6e:e6:b1:6b:46:f4:8c:4d:cd:d6:86:14:
                    59:c0:62:d4:2f:8d:45:5d:3f:65:b4:5d:2d:89:7a:
                    2c:07:ad:3d:59:a6:67:42:66:e9:05:52:65:cf:c7:
                    14:81:2b:fc:15:f0:ac:89:78:d9:d0:0c:1b:ac:af:
                    da:79:13:e2:19:02:f1:f1:ee:81:14:5d:f5:38:66:
                    94:a2:38:62:05:2d:e7:9c:13:a1:2d:de:f2:5d:ba:
                    ce:37:8c:c1:e3:ce:ce:cf:83:41:79:07:8a:50:1c:
                    f3:21:64:91:7f:aa:b4:e4:21:b4:02:47:6c:6c:ea:
                    2b:90:07:6b:30:c6:ef:b9:73:f4:7b:85:9d:4e:b6:
                    cf:66:cb:fe:54:f4:14:25:98:b4:ef:71:94:d0:9b:
                    92:5b:92:9d:09:24:85:bc:6c:06:ed:f5:3e:0d:ab:
                    5d:90:f8:f7:b9:3b:a3:5a:8a:94:23:ef:75:30:82:
                    df:e2:a6:8c:e5:70:4e:6c:50:1c:e2:1d:59:7b:e5:
                    6c:28:d3:a0:e5:c7:62:d1:dc:ce:6c:50:0b:e9:71:
                    f3:19:da:51:4e:98:dd:9d:0b:b2:53:93:62:7e:89:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:B3:12:2D:F1:92:DA:BD:B2:DB:EB:9A:70:A8:72:DD:97:76:72
            X509v3 Authority Key Identifier:
                keyid:C9:5F:48:51:0E:1D:83:65:51:5A:1B:A5:B1:BF:BB:3A:9B:04:15:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/34352e3138372e35322e302f32322d3234203d3e20323639343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:52:0d:5a:9c:4c:21:bd:8f:c3:c9:04:cf:f0:da:51:2e:71:
         a9:e0:c2:ea:f3:f7:b7:5b:f9:29:91:4d:3c:03:7d:f3:90:cf:
         98:7d:e6:1e:da:f7:95:b5:ab:7c:31:da:52:e5:65:7a:a7:dd:
         bf:4b:0e:a2:2f:1c:ac:91:b4:bd:36:de:f1:c3:23:0f:da:d1:
         3b:17:36:d4:73:97:69:7c:a9:78:8b:9b:b6:45:88:b4:35:29:
         64:6e:1b:8e:3a:a0:fb:44:5b:62:f1:90:3a:06:61:65:e7:7e:
         f5:2f:2c:47:55:9a:cc:1f:51:6c:2c:0b:3e:0d:11:0b:ba:a9:
         c5:24:07:69:0c:43:3b:73:b3:2e:af:56:17:c2:b0:6b:5b:7d:
         2b:ea:dc:2d:f6:14:3c:66:15:c5:6a:34:6f:e8:e0:d8:4d:db:
         08:20:96:94:ca:05:22:a0:5c:67:8b:06:42:e3:3f:51:1a:a4:
         80:e5:52:6e:a0:f9:9e:d6:78:bd:3c:43:9d:46:39:b8:fd:4c:
         a8:43:34:8e:1b:57:bf:9e:9f:fb:19:a9:25:05:d0:2f:0d:d1:
         d8:02:bc:81:12:fa:32:ba:f3:d9:e4:72:02:c9:39:20:ff:af:
         1d:3d:dd:84:a0:dd:52:9f:5d:64:9a:2b:d9:83:e9:29:07:96:
         1a:0f:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:05 2024 by rpki-client on console-fra.rpki-client.org