Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34352e302f32342d3234203d3e20323635333738.roa
File:                     3136382e3139342e34352e302f32342d3234203d3e20323635333738.roa (raw, json)
Hash identifier:          BLJUZXn7oFeRwLQTGEJ6T/5qXr2dtiatnvdpZecUKV4=
Subject key identifier:   44:9B:60:F1:D9:A4:CE:2D:8F:84:B7:C4:AE:C5:F5:A3:B4:DC:C4:6B
Certificate issuer:       /CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
Certificate serial:       58A8961DF13D826826A24AEEE42AF861C469511C
Authority key identifier: AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34352e302f32342d3234203d3e20323635333738.roa
Signing time:             Thu 04 Apr 2024 05:43:12 +0000
ROA not before:           Thu 04 Apr 2024 05:38:12 +0000
ROA not after:            Thu 03 Apr 2025 05:43:12 +0000
asID:                     265378
IP address blocks:        168.194.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl
                          rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 20:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a8:96:1d:f1:3d:82:68:26:a2:4a:ee:e4:2a:f8:61:c4:69:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
        Validity
            Not Before: Apr  4 05:38:12 2024 GMT
            Not After : Apr  3 05:43:12 2025 GMT
        Subject: CN=449B60F1D9A4CE2D8F84B7C4AEC5F5A3B4DCC46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:8c:a3:d7:cc:11:bb:bf:3f:e2:52:b4:7b:
                    37:aa:fa:bb:c2:66:0d:6a:61:d3:eb:95:aa:0a:82:
                    92:18:4b:52:b0:ee:be:8f:f4:53:ce:3a:0d:dc:f6:
                    92:8c:bd:44:12:14:e8:20:0a:d7:b4:48:fa:7a:cc:
                    d4:da:3e:af:a8:6c:16:c0:3a:9a:14:7b:89:3a:f8:
                    35:67:9e:c0:2f:ba:a9:6a:d3:cb:2e:d8:9f:9f:76:
                    02:35:ea:f9:7b:b3:43:55:4d:b3:bd:42:bf:30:2b:
                    34:8b:66:a5:de:0c:86:af:9c:4a:cd:2f:23:da:3d:
                    fb:fe:24:fa:dd:de:e2:26:0a:34:2e:53:7d:c6:85:
                    56:fe:81:38:b1:66:d5:bd:e0:0c:fd:d2:bb:97:08:
                    d2:31:55:85:76:d5:45:d8:91:b2:9c:64:6a:55:fc:
                    0f:8b:41:51:41:35:8b:89:11:b7:62:7d:c3:ac:0b:
                    2b:3b:b2:d2:a1:70:76:86:1d:3d:9d:a9:3b:ff:20:
                    bb:51:c0:e7:6a:88:fa:ed:9b:40:b7:3b:76:11:be:
                    8e:15:5f:f9:0e:a2:0e:bf:26:86:8a:c1:7a:da:a5:
                    e8:a0:0b:c5:7c:39:62:08:9a:d9:21:a7:9c:99:c4:
                    f7:dc:4c:e4:96:c2:fb:b6:b1:56:c6:29:b7:60:48:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9B:60:F1:D9:A4:CE:2D:8F:84:B7:C4:AE:C5:F5:A3:B4:DC:C4:6B
            X509v3 Authority Key Identifier:
                keyid:AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34352e302f32342d3234203d3e20323635333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:40:da:dc:4c:b6:27:e3:a4:de:5d:f2:99:f1:4c:0f:41:cc:
         51:eb:b5:f2:0b:bc:4a:3d:38:96:e0:4c:52:b3:81:46:57:b7:
         74:0b:96:f1:7d:6c:e9:50:d7:1a:30:e7:38:a4:48:ff:d2:48:
         7d:7e:9a:82:28:8e:31:51:3e:6e:98:5a:3f:e1:3d:26:c8:ee:
         b7:3c:ee:de:83:6a:87:54:1d:ae:fd:13:ac:f0:ee:04:79:20:
         fd:30:06:74:3a:e7:66:92:ff:d2:eb:52:75:60:b2:1b:ea:bf:
         c3:6c:5e:76:87:26:7f:63:ef:7f:15:7b:a1:39:66:60:d8:08:
         4c:28:31:25:3d:54:99:d8:35:53:4c:00:5e:48:79:97:86:57:
         87:c9:1e:a4:d5:c2:be:33:35:85:14:65:02:42:22:36:a3:54:
         ef:c0:26:63:1d:6c:36:a4:07:df:ba:96:d9:9f:8a:3f:a9:30:
         81:75:e6:6e:9f:5a:9d:7e:53:94:b3:7f:13:76:13:5a:65:ff:
         6a:1c:a9:c5:16:20:6d:e1:2e:2d:ca:40:65:42:f5:0f:a4:bb:
         89:6d:8f:b3:79:35:cb:a5:3c:32:f2:7a:ff:16:1e:48:05:08:
         31:77:98:32:8f:76:95:31:c3:0c:86:f0:08:a5:b3:1a:51:90:
         59:ba:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:26:47 2024 by rpki-client on console-fra.rpki-client.org