Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa
File:                     34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa (raw, json)
Hash identifier:          NueK32Mh9mHgvJLLlEVo2gQjzNpaf4GLp96NIuAOgsw=
Subject key identifier:   C2:20:1B:40:97:1D:AA:97:A3:A4:C8:5E:67:E5:DB:90:6F:0D:B2:B5
Certificate issuer:       /CN=6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE
Certificate serial:       5D2B88FD1E793EA80208663A1B29682B43A0671C
Authority key identifier: 6E:4B:B7:F0:B7:10:1A:40:8E:EA:A0:2B:18:DF:90:4F:30:D4:AB:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa
Signing time:             Mon 16 Sep 2024 18:43:40 +0000
ROA not before:           Mon 16 Sep 2024 18:38:40 +0000
ROA not after:            Mon 15 Sep 2025 18:43:40 +0000
asID:                     269329
IP address blocks:        45.184.128.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.crl
                          rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2b:88:fd:1e:79:3e:a8:02:08:66:3a:1b:29:68:2b:43:a0:67:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE
        Validity
            Not Before: Sep 16 18:38:40 2024 GMT
            Not After : Sep 15 18:43:40 2025 GMT
        Subject: CN=C2201B40971DAA97A3A4C85E67E5DB906F0DB2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:2f:c2:1b:56:7c:28:79:65:df:c4:93:ff:
                    b7:63:f7:86:d3:1d:1b:47:33:83:f7:b9:5a:c2:d1:
                    18:5d:13:20:0f:11:6e:53:50:6f:63:42:64:84:36:
                    9a:b8:f0:f5:fe:98:8b:47:84:3e:ad:b7:9d:d6:04:
                    a2:2e:2f:7a:cf:45:1b:e5:65:0a:2a:8c:2b:0a:94:
                    9b:dd:f5:2c:2b:88:62:50:11:c1:c4:e0:16:86:1f:
                    4d:fc:51:c8:e3:92:c5:ca:ca:e0:85:8b:75:17:fa:
                    ca:56:70:f8:a0:e7:eb:4d:e3:7e:b0:bd:b4:34:f5:
                    46:3d:92:05:fc:f0:89:d3:ca:a6:b4:fc:5e:db:71:
                    f5:a6:78:fe:31:d2:80:da:63:8a:b6:ad:26:91:b2:
                    bc:1d:e5:31:95:ba:07:7f:66:60:19:c6:c6:1a:c0:
                    52:1f:b2:51:39:f3:58:1a:29:90:b3:56:b2:30:74:
                    6f:29:85:fc:c4:2b:b6:3d:2e:96:bb:71:88:bd:b5:
                    a2:40:47:9d:46:86:df:31:bb:b2:84:3c:52:64:43:
                    66:ee:d0:b6:fd:b2:19:be:e5:8d:c3:a4:9c:49:64:
                    74:8d:05:b4:3d:68:aa:36:b2:24:91:ef:42:51:11:
                    9a:02:e0:90:ed:63:9c:5c:5b:d8:21:40:9e:cb:26:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:20:1B:40:97:1D:AA:97:A3:A4:C8:5E:67:E5:DB:90:6F:0D:B2:B5
            X509v3 Authority Key Identifier:
                keyid:6E:4B:B7:F0:B7:10:1A:40:8E:EA:A0:2B:18:DF:90:4F:30:D4:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:7f:cf:70:f1:a0:74:cd:0f:37:24:c0:34:0c:9a:98:e5:
         4a:78:2d:4a:89:ff:3b:db:99:c9:93:61:7d:67:47:0c:f2:39:
         ce:4d:00:47:d4:76:0e:43:bb:7c:fd:de:3c:f5:69:26:98:1e:
         53:69:47:1e:4e:5b:51:6d:1b:c6:c3:47:6f:4c:14:0b:18:20:
         9f:23:39:07:4f:36:cf:f7:40:30:2c:32:27:69:96:ab:11:87:
         30:7b:95:af:8f:6e:55:f3:14:21:d1:8b:e9:f9:fb:a0:ad:95:
         d5:a1:6b:fb:20:e1:13:c3:f7:c0:52:60:38:e7:41:51:c0:4b:
         54:7d:c9:5f:0f:ec:85:02:ce:63:b5:f5:dc:10:55:64:9a:62:
         1f:27:52:ee:1a:1f:78:e7:d1:62:5b:72:22:3b:08:1e:f1:ae:
         4f:21:fb:92:db:32:80:d1:68:e4:5a:3d:bf:53:f0:2d:db:9d:
         e5:b1:b6:35:0b:05:3f:f5:96:d1:31:d2:9f:c8:3a:91:a9:7d:
         bb:5b:c6:f6:00:d4:53:31:7b:fa:f4:ec:b0:59:ee:ba:4e:f5:
         45:b7:c8:05:66:c8:1c:ce:b2:a0:88:cd:72:63:18:ef:f8:92:
         f9:13:9d:a2:fd:9b:af:7f:cb:c8:a4:bf:04:e0:2b:cd:37:f2:
         95:23:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:07 2024 by rpki-client on console-fra.rpki-client.org