Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133322e302f32342d3234203d3e20323638303734.roa
File:                     34352e3136372e3133322e302f32342d3234203d3e20323638303734.roa (raw, json)
Hash identifier:          nAZcBmw5Y/h9Jr4KxndcZ+/JmAReN1fBKG1bNILoZ74=
Subject key identifier:   4D:F2:B2:82:01:36:1E:96:4F:CE:65:BC:B1:38:42:74:C9:00:2C:D1
Certificate issuer:       /CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
Certificate serial:       40CF73E3926C25AFD44C2F08F0514BAE0741078B
Authority key identifier: 3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133322e302f32342d3234203d3e20323638303734.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     268074
IP address blocks:        45.167.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl
                          rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cf:73:e3:92:6c:25:af:d4:4c:2f:08:f0:51:4b:ae:07:41:07:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fb:2d:8d:ab:26:08:ee:a1:e7:fb:02:4a:70:
                    88:64:78:ba:6d:60:75:c7:70:cf:1d:91:0d:cb:66:
                    7a:8c:36:07:07:83:3b:3b:bb:b6:0c:8b:42:1d:a0:
                    7d:b5:33:8d:f7:6d:eb:1e:55:35:29:aa:ad:15:46:
                    da:fc:4d:53:b6:58:78:b1:80:43:f5:e4:e9:24:27:
                    d4:b1:82:14:61:e8:51:24:31:f6:17:48:99:f9:50:
                    ef:39:44:10:53:55:3b:e3:69:27:d4:b6:5e:0d:98:
                    98:99:dc:92:33:50:72:b9:ea:b9:30:4e:7d:48:ab:
                    23:cb:28:9d:dd:76:91:04:ae:89:2d:41:9d:bc:c1:
                    ff:80:c7:bf:53:0c:8f:0c:46:56:33:d7:0c:21:1a:
                    3d:39:43:39:f0:a5:a2:29:4f:37:f2:0e:46:20:80:
                    67:e6:71:35:c3:58:3e:cd:2f:9a:ca:e6:36:98:77:
                    0b:8f:5a:73:30:45:07:93:c6:21:40:27:99:72:5d:
                    b6:b0:8f:ad:7d:cb:9e:d3:ae:fb:34:5b:92:6b:52:
                    a6:3a:81:8a:00:2e:00:21:12:83:36:b9:08:af:75:
                    d5:55:5c:76:ac:79:e5:5e:b5:d6:59:fb:ab:8e:e1:
                    d1:b5:8f:97:62:ba:a8:ea:96:36:c8:22:6c:7b:c8:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:B2:82:01:36:1E:96:4F:CE:65:BC:B1:38:42:74:C9:00:2C:D1
            X509v3 Authority Key Identifier:
                keyid:3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133322e302f32342d3234203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:cc:8d:c1:3a:ec:4a:10:0d:69:e2:5a:a5:5f:73:32:6b:
         36:0c:e6:a1:49:f2:2e:62:6c:2f:61:e0:3f:84:31:cd:5c:4d:
         cd:fe:21:20:6a:18:19:a2:66:59:01:84:d0:12:fc:e9:a3:c7:
         a5:26:4a:de:a2:b5:10:96:43:be:cd:b1:82:9f:d4:a9:2b:4e:
         ac:52:87:77:d2:c8:06:64:ce:3a:38:0b:79:9f:61:3e:30:5a:
         50:05:a0:a0:4a:67:d7:fb:35:2e:fb:d6:ba:52:dc:f2:7b:d6:
         23:94:46:16:cf:3a:d1:3d:c0:cd:7e:80:08:0f:8e:c9:a5:3f:
         b5:46:4c:50:3f:e9:1c:1e:8b:a3:a4:1e:ed:c2:a4:7e:5e:0e:
         dd:ec:28:e4:08:f3:97:cd:49:51:0a:9e:4d:7a:87:10:62:2c:
         c2:5c:a4:7e:cd:ea:de:ca:82:3b:34:cb:cf:2c:16:31:62:ae:
         d4:83:23:f3:93:f4:79:b2:b4:1c:ab:c7:d0:61:77:78:ae:3c:
         b8:dd:93:6f:e6:65:15:4d:02:46:da:76:d3:a7:aa:89:a9:34:
         a0:2b:19:cd:8e:11:c6:4d:70:fd:08:28:39:8f:cd:db:36:a1:
         cf:c5:a9:8d:22:ec:24:c4:48:d7:c5:2b:71:1e:dc:60:db:bc:
         6d:e9:7f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 10:51:46 2024 by rpki-client on console-fra.rpki-client.org