Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133332e302f32342d3234203d3e20323638303734.roa
File:                     34352e3136372e3133332e302f32342d3234203d3e20323638303734.roa (raw, json)
Hash identifier:          76sjtCzqDUOdIg+yrUgkuBS4NrN+l3yDj6pDKjVt0ks=
Subject key identifier:   25:D6:44:0C:14:64:8A:9B:C0:C2:B6:53:05:0A:20:72:15:F3:A8:46
Certificate issuer:       /CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
Certificate serial:       6FF06911C6551B9144202E6BAE985857DD740444
Authority key identifier: 3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133332e302f32342d3234203d3e20323638303734.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     268074
IP address blocks:        45.167.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl
                          rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f0:69:11:c6:55:1b:91:44:20:2e:6b:ae:98:58:57:dd:74:04:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:eb:3b:07:ad:f9:11:64:e5:6c:5a:f3:20:
                    96:70:10:20:46:1f:05:44:bf:6e:fe:21:7e:b5:07:
                    33:b7:e8:e6:68:23:95:fc:1d:f6:f7:42:00:28:ec:
                    a9:df:18:81:46:bd:99:d6:7e:24:a9:70:08:10:79:
                    d6:47:75:05:e6:18:82:46:5f:0d:6b:e2:cb:08:81:
                    2d:26:e5:bf:90:bb:1d:27:2a:c3:5a:ee:67:31:bd:
                    87:4b:75:87:53:9e:09:f6:a3:30:0d:c9:f3:10:1f:
                    9e:59:b2:c8:a4:5d:d1:4b:ee:a8:0a:b8:76:6d:a0:
                    88:f4:77:3c:f1:78:70:67:39:6b:c8:f6:d0:b5:f1:
                    7d:26:a2:79:34:4a:31:6e:eb:68:a5:fe:06:05:a1:
                    2f:2b:e2:47:dc:68:b0:fe:9d:c4:e5:ee:80:64:cf:
                    28:f7:f0:24:15:d5:fd:97:88:a9:0e:15:3a:5d:f1:
                    e3:44:24:04:c3:3b:0e:fc:47:24:2f:88:bb:70:77:
                    ec:e8:b7:82:42:71:7c:46:96:39:9c:bf:d5:07:b4:
                    9a:c7:57:60:e3:c7:91:e0:b3:00:6e:a4:21:68:3d:
                    18:fe:9a:12:e2:61:19:bf:a7:08:e3:77:4e:c3:84:
                    af:c8:8d:78:cd:3c:c2:e0:e6:f0:11:e7:67:5a:d1:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D6:44:0C:14:64:8A:9B:C0:C2:B6:53:05:0A:20:72:15:F3:A8:46
            X509v3 Authority Key Identifier:
                keyid:3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/34352e3136372e3133332e302f32342d3234203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:21:3f:c9:d0:ec:88:b5:66:c1:8e:47:eb:89:d5:f8:ef:
         f8:85:33:c0:05:49:2c:aa:24:12:b1:45:e4:81:fa:16:be:87:
         fb:07:5a:b4:13:af:9e:63:92:ab:45:1c:7c:bb:1c:9e:33:ee:
         9c:73:97:6e:ca:93:c8:3b:8b:63:b5:7b:ab:dd:60:76:f8:10:
         18:8e:4f:ac:3a:ef:1f:2a:b6:7e:c4:f8:bb:77:8b:cf:13:45:
         b2:8d:df:01:78:f3:73:44:ed:a1:18:51:3d:3f:5c:04:d4:86:
         63:6c:af:ef:46:06:85:21:5b:06:58:ad:a8:7d:74:85:39:a7:
         c2:4e:7b:5e:66:eb:33:8a:15:75:71:1b:92:2c:a9:b5:7c:98:
         c8:c8:4f:b3:30:5b:05:c6:cd:49:27:90:8b:11:84:ac:e2:48:
         85:d1:21:19:03:eb:49:f1:16:11:54:b2:e3:3f:76:aa:3c:68:
         c4:5c:68:6e:ed:ff:6b:6c:5e:b7:24:23:fc:8a:61:4d:92:97:
         cb:4f:a2:a9:60:42:b5:86:cf:44:3e:c6:ff:e9:12:b1:64:65:
         d8:97:8e:52:b3:99:b8:56:82:25:a0:10:71:29:8e:50:58:5e:
         64:48:80:15:6c:2f:aa:6a:ea:ae:18:2c:2d:44:ff:0a:99:f1:
         ae:19:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:01 2024 by rpki-client on console-ams.rpki-client.org