Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32332d3233203d3e20323638353835.roa
File:                     34352e3136342e382e302f32332d3233203d3e20323638353835.roa (raw, json)
Hash identifier:          gQYrSyja+MVsPDjsNBY3GPK0Xy0c8SWQuPhiH+YNeLc=
Subject key identifier:   97:93:34:38:42:EA:F6:EF:82:FD:65:8B:B3:10:97:8B:63:64:84:3D
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       212BDE6AC9C5EE8AD4C3F627BF88761C9ACCD744
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32332d3233203d3e20323638353835.roa
Signing time:             Thu 04 Apr 2024 21:54:18 +0000
ROA not before:           Thu 04 Apr 2024 21:49:18 +0000
ROA not after:            Thu 03 Apr 2025 21:54:18 +0000
asID:                     268585
IP address blocks:        45.164.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2b:de:6a:c9:c5:ee:8a:d4:c3:f6:27:bf:88:76:1c:9a:cc:d7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Apr  4 21:49:18 2024 GMT
            Not After : Apr  3 21:54:18 2025 GMT
        Subject: CN=9793343842EAF6EF82FD658BB310978B6364843D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:85:b7:30:99:39:bf:9e:68:23:49:50:5d:
                    f2:d3:ff:c6:d8:67:56:78:19:b2:49:75:0c:8a:39:
                    28:69:32:c8:41:30:38:be:a6:76:e7:f4:87:44:56:
                    6b:0a:2a:06:f6:94:0e:dc:b4:a5:48:7e:90:75:9b:
                    16:8a:22:3c:8b:40:f4:73:83:b6:f0:ed:7b:0f:d3:
                    5f:64:8f:4b:c4:44:ca:16:9b:3a:71:33:ab:26:af:
                    fa:46:e9:2d:08:5b:0b:0d:59:b9:c9:af:41:28:68:
                    0d:f2:52:d6:67:14:21:bb:1c:ec:af:bc:5a:81:2f:
                    ec:5b:3c:19:64:cd:84:03:a6:f1:30:39:51:32:eb:
                    10:ca:87:bd:d2:7d:24:df:bd:d6:c8:7e:72:97:6d:
                    8f:1c:72:b9:da:07:a2:e9:a4:33:f9:e0:f1:ce:b4:
                    68:e6:c8:ab:9e:be:e1:f9:26:7f:89:81:e5:23:22:
                    cc:a2:42:9a:46:a5:b2:11:47:fc:c8:c5:3f:88:0f:
                    59:9a:81:2c:f6:01:3f:07:9d:1d:01:38:14:f8:b9:
                    ec:a2:81:19:28:7b:df:50:15:90:a0:3a:4d:97:20:
                    6c:4c:f0:26:57:ac:ec:8e:e9:58:53:75:2f:8f:ad:
                    e8:e6:4c:6d:50:45:0c:ef:86:f7:31:b3:31:cf:4a:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:93:34:38:42:EA:F6:EF:82:FD:65:8B:B3:10:97:8B:63:64:84:3D
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32332d3233203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:81:4c:46:8b:f3:1a:50:f6:92:02:de:f7:a7:35:4f:7b:94:
         68:b7:e1:76:5f:be:44:96:a4:3e:1b:2a:cc:86:c6:1b:b9:16:
         48:30:e7:68:5d:d1:81:a2:05:6d:aa:f4:ae:03:8e:69:68:b9:
         dc:94:2c:9a:2b:bc:2a:89:53:e5:f3:59:9f:95:1d:ec:94:f4:
         e8:8f:c5:40:38:4a:8c:f7:11:ba:1f:a9:a1:4d:c3:8e:c6:5b:
         ab:b9:6e:87:b0:e7:7f:c5:05:b6:e1:f3:ec:49:02:00:e2:f1:
         52:78:9a:c0:e8:6e:b8:e9:2a:43:fd:7d:6e:aa:77:45:39:13:
         e0:32:8f:62:63:77:af:c4:8d:95:f8:8f:30:cd:f8:ad:8a:0e:
         60:2a:2e:51:82:50:59:9f:c2:b6:a3:d5:e0:24:ce:dd:e2:67:
         db:fd:b5:12:23:c2:d2:9a:40:da:37:ec:33:a0:04:28:2f:dc:
         9e:c6:ba:6f:6e:86:cc:e6:f7:e5:08:ad:35:d3:79:98:30:2e:
         f2:4a:2b:d2:1f:6d:fa:70:da:08:ee:2c:78:dc:fe:a1:0e:14:
         e0:54:ad:92:7c:b3:00:3e:32:0e:73:0b:45:cd:0b:93:48:c7:
         03:e4:75:2b:ba:52:f5:72:c6:29:3e:3a:07:f6:ac:8b:48:83:
         30:f4:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org