Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32322d3232203d3e20323639333733.roa
File:                     34352e3138352e3131322e302f32322d3232203d3e20323639333733.roa (raw, json)
Hash identifier:          bw1JNnG4HocutBFvekUUOJopckh4a31+pCffZKITTJw=
Subject key identifier:   7C:C0:20:A3:63:B3:58:66:59:9D:06:67:F2:0C:F4:98:1B:16:6D:74
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       463AE281CAB01E684529FBD9647D222038D753DD
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32322d3232203d3e20323639333733.roa
Signing time:             Thu 04 Apr 2024 03:00:14 +0000
ROA not before:           Thu 04 Apr 2024 02:55:14 +0000
ROA not after:            Thu 03 Apr 2025 03:00:14 +0000
asID:                     269373
IP address blocks:        45.185.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3a:e2:81:ca:b0:1e:68:45:29:fb:d9:64:7d:22:20:38:d7:53:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Apr  4 02:55:14 2024 GMT
            Not After : Apr  3 03:00:14 2025 GMT
        Subject: CN=7CC020A363B35866599D0667F20CF4981B166D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:f9:bf:23:50:d7:93:f9:44:2a:35:b4:58:
                    1e:50:27:d6:97:e1:c3:f9:1d:92:6c:51:33:f7:bb:
                    3e:84:79:85:ef:ac:d1:6d:e8:28:9d:70:01:fc:ee:
                    d4:0b:44:c6:4b:06:82:3a:cb:8c:9d:86:6a:66:16:
                    e8:eb:86:e9:3c:fd:8e:e8:72:98:9c:84:1d:3d:9d:
                    48:e0:76:25:da:69:cf:15:55:7d:12:5d:c4:73:ec:
                    11:41:2d:dd:d1:2c:88:9e:67:8b:b0:32:20:24:55:
                    a5:54:d8:1b:be:22:99:6b:49:34:3b:5f:91:6d:60:
                    10:7d:cc:20:53:83:fe:4b:d0:54:78:f7:04:38:a2:
                    ad:7c:68:b9:a2:83:86:ad:1f:f7:33:dd:98:24:7d:
                    ba:cb:fe:ba:24:7c:b3:73:c3:62:9c:fb:c8:dd:87:
                    ec:62:54:8f:e7:b7:b0:f7:80:69:ec:47:4c:da:a9:
                    1a:5b:18:63:1b:97:b6:53:ea:4c:99:c4:7e:2c:c5:
                    91:e9:3f:49:8e:0e:b8:c1:2a:0c:1d:b2:f7:99:ea:
                    cb:9c:56:f7:d6:b9:65:6c:02:b4:40:77:1b:bc:22:
                    e8:ad:85:49:80:92:4a:b5:e0:d8:4a:29:29:08:8a:
                    63:a2:dd:ab:1c:c6:8f:e6:5e:81:4c:f1:ce:f2:0a:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C0:20:A3:63:B3:58:66:59:9D:06:67:F2:0C:F4:98:1B:16:6D:74
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32322d3232203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:d3:95:d0:9c:c9:be:fa:e8:4f:50:25:8c:51:9c:16:37:
         28:2c:df:9a:cf:57:bb:c3:70:62:b3:aa:9e:0b:f2:76:27:00:
         ec:b3:a3:1c:6e:98:1a:80:09:65:d7:b8:03:89:29:d1:27:e8:
         f1:c4:06:a5:84:b3:81:b9:51:c2:cd:c4:5f:a4:4f:ae:fa:9a:
         e8:74:13:54:46:0b:42:cc:f9:c6:a4:47:c8:9a:9f:78:34:87:
         34:29:fa:f8:ef:b5:83:c4:10:1b:66:73:96:f3:2c:a9:e7:c7:
         23:6b:9e:05:ff:35:86:28:09:19:81:05:4f:3b:2e:1e:91:d3:
         df:c8:c5:ad:8f:92:3e:56:cf:4c:87:54:d8:4f:a1:54:cb:8b:
         ae:41:b4:5b:c1:0a:c5:80:9f:1d:a1:cb:3c:68:6a:ae:e5:0d:
         b4:95:9f:12:0f:8a:ad:d5:38:60:6f:ac:2c:df:78:8a:ef:0e:
         dc:d3:16:eb:c8:1c:58:06:45:ae:dc:c9:19:71:eb:fc:76:05:
         77:ac:f8:f8:dc:9c:15:88:82:be:18:ea:b8:9f:22:e1:76:4f:
         ca:da:e0:88:3b:20:df:7e:43:57:5e:01:3f:52:d1:f5:48:0d:
         0b:11:66:83:dc:9d:5b:9f:fd:87:d1:8f:a3:62:d8:e8:35:3f:
         52:e1:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org