Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133322e302f32332d3233203d3e20323638303734.roa
File:                     34352e3136372e3133322e302f32332d3233203d3e20323638303734.roa (raw, json)
Hash identifier:          V0ALm2hl44ucS/iqM5g4u0SnhNR8UeK7mrB9AO0SJ+8=
Subject key identifier:   97:D6:9A:15:59:04:76:70:57:E5:32:AD:A0:3C:50:6C:6C:22:03:4F
Certificate issuer:       /CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
Certificate serial:       3C93A1A895A396A2A7029C00C9757F0DB7E01025
Authority key identifier: 3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133322e302f32332d3233203d3e20323638303734.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268074
IP address blocks:        45.167.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl
                          rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:93:a1:a8:95:a3:96:a2:a7:02:9c:00:c9:75:7f:0d:b7:e0:10:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100D59FDC7D7287DB933A9C9856E7C8DC46B82AFAABAB398351210683CF0D1D8514582F047ED3625FB08694C25D98FACC476A7710F8CA8FF9A80EE47C483DC674DCA30486407552378488026628B291E224019ADBC57202EB877505218A3C29F4EE16F521E144789A6CFE2A05BFCE43CAD3FB009354178EB71447ED5567879F011948671136AC08BD744B102AD4A45E5D8505F11E56B6DFAA902A07E173B2847338F81D0CDDB963E72E14C995B200F2701A2E3C921E3D345CC05AA65B89353F185FCA9B52AF176D6E3EF9D9602B3EE3A581DA89082F98294B77FBEB2B4085E2388F30B2917E74D5724EC47F8785DEAA531DC3066E959F19C1C9C61AB6E032A0DD910203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:dc:7d:72:87:db:93:3a:9c:98:56:e7:c8:
                    dc:46:b8:2a:fa:ab:ab:39:83:51:21:06:83:cf:0d:
                    1d:85:14:58:2f:04:7e:d3:62:5f:b0:86:94:c2:5d:
                    98:fa:cc:47:6a:77:10:f8:ca:8f:f9:a8:0e:e4:7c:
                    48:3d:c6:74:dc:a3:04:86:40:75:52:37:84:88:02:
                    66:28:b2:91:e2:24:01:9a:db:c5:72:02:eb:87:75:
                    05:21:8a:3c:29:f4:ee:16:f5:21:e1:44:78:9a:6c:
                    fe:2a:05:bf:ce:43:ca:d3:fb:00:93:54:17:8e:b7:
                    14:47:ed:55:67:87:9f:01:19:48:67:11:36:ac:08:
                    bd:74:4b:10:2a:d4:a4:5e:5d:85:05:f1:1e:56:b6:
                    df:aa:90:2a:07:e1:73:b2:84:73:38:f8:1d:0c:dd:
                    b9:63:e7:2e:14:c9:95:b2:00:f2:70:1a:2e:3c:92:
                    1e:3d:34:5c:c0:5a:a6:5b:89:35:3f:18:5f:ca:9b:
                    52:af:17:6d:6e:3e:f9:d9:60:2b:3e:e3:a5:81:da:
                    89:08:2f:98:29:4b:77:fb:eb:2b:40:85:e2:38:8f:
                    30:b2:91:7e:74:d5:72:4e:c4:7f:87:85:de:aa:53:
                    1d:c3:06:6e:95:9f:19:c1:c9:c6:1a:b6:e0:32:a0:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D6:9A:15:59:04:76:70:57:E5:32:AD:A0:3C:50:6C:6C:22:03:4F
            X509v3 Authority Key Identifier:
                keyid:3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133322e302f32332d3233203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:5f:23:a5:68:14:17:7e:25:4f:d4:48:3e:e8:10:88:b2:
         c5:03:1f:2f:3b:09:f2:b0:dc:4e:ed:46:d6:83:9c:37:ed:48:
         36:25:a2:6b:29:d9:c3:c0:51:c4:53:87:68:f5:20:11:7e:df:
         92:53:0c:f3:5f:1e:c6:ad:0d:78:7f:34:ec:77:47:bb:f4:ac:
         13:ec:11:30:57:37:c1:1a:9d:e2:84:41:73:e7:cd:01:cc:7b:
         0f:48:88:66:ac:25:76:de:5b:0b:6f:ca:a6:0f:7d:56:ee:5a:
         32:18:2e:1e:74:38:48:08:87:f2:1a:66:64:4d:df:ec:e5:76:
         6d:15:9a:c9:4e:86:b0:43:f9:4c:70:0a:6b:fa:ef:8c:51:69:
         84:cc:2e:07:4d:35:96:21:4f:11:59:86:12:43:7f:4d:af:27:
         7d:9f:93:bc:9e:f3:67:7d:06:ef:88:b6:21:e0:c9:15:6c:7b:
         c8:70:86:4d:83:8d:13:47:a4:54:06:2e:e0:49:93:b7:83:c3:
         8c:d6:43:37:b8:3b:ae:e0:a7:6e:ae:0d:45:48:ba:d3:4a:c2:
         6c:79:99:b5:29:0f:a0:ae:9c:75:67:30:ed:e3:28:fd:3b:ca:
         e5:58:19:78:8e:95:85:b1:3d:c9:6a:51:ad:fc:40:86:9c:15:
         a9:e1:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:02 2024 by rpki-client on console-ams.rpki-client.org