Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa
File:                     34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (raw, json)
Hash identifier:          koTdrHGlMz9rmStKY/iFIOQMOfDMd/F7zEeNRBx2GhY=
Subject key identifier:   4C:A9:0A:94:6D:5A:6B:F6:69:5E:2D:0E:E0:A4:C3:7E:8A:DC:BB:30
Certificate issuer:       /CN=C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D
Certificate serial:       0444B252EF25F8103262B7EA74EFEA99C7F2E1C3
Authority key identifier: C9:B2:EC:A5:8E:E7:8A:CB:4F:2E:6B:6E:1D:C2:A1:85:8E:60:FC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa
Signing time:             Fri 31 May 2024 14:47:38 +0000
ROA not before:           Fri 31 May 2024 14:42:38 +0000
ROA not after:            Fri 30 May 2025 14:47:38 +0000
asID:                     268016
IP address blocks:        45.167.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.crl
                          rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:44:b2:52:ef:25:f8:10:32:62:b7:ea:74:ef:ea:99:c7:f2:e1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D
        Validity
            Not Before: May 31 14:42:38 2024 GMT
            Not After : May 30 14:47:38 2025 GMT
        Subject: CN=4CA90A946D5A6BF6695E2D0EE0A4C37E8ADCBB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:ee:67:67:a4:be:98:55:49:bb:b8:e2:5a:
                    d5:c3:7c:60:89:cc:13:f0:6a:30:98:f3:99:13:00:
                    83:28:a3:c6:22:89:0c:5c:c8:99:d0:6c:5b:f4:da:
                    6f:40:7a:e0:c3:85:9c:27:69:6e:97:6f:19:a6:50:
                    3f:84:97:a6:bd:24:30:ce:43:88:d2:86:3a:35:51:
                    f5:e7:1d:67:08:3d:ee:06:53:e4:e2:27:b4:b0:51:
                    59:95:13:ae:57:cb:9c:c6:ac:37:a2:cd:ab:0a:5d:
                    cc:8b:a4:20:cb:3b:4b:01:fa:cd:f0:bc:2d:fc:24:
                    c5:fb:d9:ce:e7:17:46:9a:d2:cc:4d:cc:b3:42:a7:
                    83:28:41:77:7b:e4:37:36:d9:92:46:ad:fd:64:ed:
                    57:23:6d:f3:b3:ec:ed:b2:18:e1:64:6c:e3:d5:6c:
                    ff:ba:27:e9:96:b9:e2:3a:10:6c:b8:2e:38:3b:c7:
                    51:3b:03:01:78:37:51:d1:99:f3:a5:ad:e1:ee:2d:
                    72:1a:e7:10:05:3a:f9:3b:0e:41:fb:05:ab:92:d0:
                    9d:dc:b7:4d:38:21:8e:a0:f0:3e:7e:ff:4c:0d:b1:
                    4c:77:f3:85:99:3d:25:dd:65:08:e6:72:6d:08:85:
                    49:8b:db:59:7b:0a:fd:d2:ee:32:11:82:4d:77:07:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A9:0A:94:6D:5A:6B:F6:69:5E:2D:0E:E0:A4:C3:7E:8A:DC:BB:30
            X509v3 Authority Key Identifier:
                keyid:C9:B2:EC:A5:8E:E7:8A:CB:4F:2E:6B:6E:1D:C2:A1:85:8E:60:FC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:af:fc:27:ab:b4:ec:8b:75:c8:2f:37:37:4b:ff:6b:4d:a8:
         6a:e6:3f:79:dc:16:4c:ec:76:18:ae:0b:ec:eb:cb:5a:1c:b6:
         e0:08:76:cc:a2:21:c3:a0:8c:63:de:d8:89:45:1e:20:9c:5e:
         bf:bc:a6:ae:34:97:c1:67:03:09:1c:62:7a:91:f5:5b:d8:e0:
         fd:46:30:ca:4a:09:a8:9d:b3:13:28:d3:0f:0a:1f:16:14:78:
         ed:51:a9:df:14:f7:c2:8b:f7:7a:a2:ca:68:59:6e:53:c1:47:
         f6:b4:cb:01:6d:39:b3:54:ad:97:96:97:d3:ab:e6:c1:76:87:
         6e:04:01:e8:5b:5a:ff:36:28:0e:bb:99:6b:6e:a5:a7:2e:f3:
         41:47:e2:be:da:bd:5f:36:11:9f:6f:cb:4a:2d:15:16:a8:9f:
         44:57:bc:b2:1f:ce:a4:d5:7c:42:03:79:a6:85:61:a9:b1:5a:
         3a:8e:1f:b5:07:6b:26:70:4f:a9:f8:40:95:06:89:c3:66:9b:
         ac:3c:c4:bf:d6:de:6a:28:b8:e8:d8:e3:7d:30:43:d1:82:a4:
         29:30:ec:15:0e:b9:e8:6e:05:0f:15:f1:9e:36:c9:a3:ea:59:
         b9:32:ab:2a:98:f9:b5:00:db:ed:cd:b7:ca:0e:17:ee:b9:0f:
         39:14:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org