Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa
File:                     34352e3233322e3231322e302f32322d3232203d3e203631363134.roa (raw, json)
Hash identifier:          Js/oHXHbXuRkQObQyFnG9/uyHkUb68HO4xwm/HuI1zY=
Subject key identifier:   CB:6C:0B:1A:10:37:43:99:29:CC:8B:3E:98:BD:46:46:65:99:AB:0B
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       60253A3A0CEEE3D9E10DF5B97F66322038A4B8D0
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61614
IP address blocks:        45.232.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:25:3a:3a:0c:ee:e3:d9:e1:0d:f5:b9:7f:66:32:20:38:a4:b8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject: CN=3082010A0282010100E762302A40A0D1FA6D1ADEF510E1BB9843519B22DFA63CABB843BD40DDE705227976701EF2CB772F753C96212033E9FE1CE3C721108AC22A7369124DD4CB332F057552E0EA006F3E5760987BB9C35688654B34C360F09B524BD1B6408F9BC99F0B33F59963FF62A1BD83C2FE5BA70499F170AA08558DF0C418439E5EE54074CA8E014194FADB0D822B79A634E5C6B387D6D6802B46D760546338C07833FBCC3DA5324CFBFFB8FDF68B3B65EDA1639440F233891005CB5DD116DE419353D6002F514B52CDE9813207255D59590DF82B6F64BF912C847B7E090F568F93CCDCA9807EEEC2EA4656B21C185484D64BC76B20706E6AD7C8802B891A2F29D7081C01190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:62:30:2a:40:a0:d1:fa:6d:1a:de:f5:10:e1:
                    bb:98:43:51:9b:22:df:a6:3c:ab:b8:43:bd:40:dd:
                    e7:05:22:79:76:70:1e:f2:cb:77:2f:75:3c:96:21:
                    20:33:e9:fe:1c:e3:c7:21:10:8a:c2:2a:73:69:12:
                    4d:d4:cb:33:2f:05:75:52:e0:ea:00:6f:3e:57:60:
                    98:7b:b9:c3:56:88:65:4b:34:c3:60:f0:9b:52:4b:
                    d1:b6:40:8f:9b:c9:9f:0b:33:f5:99:63:ff:62:a1:
                    bd:83:c2:fe:5b:a7:04:99:f1:70:aa:08:55:8d:f0:
                    c4:18:43:9e:5e:e5:40:74:ca:8e:01:41:94:fa:db:
                    0d:82:2b:79:a6:34:e5:c6:b3:87:d6:d6:80:2b:46:
                    d7:60:54:63:38:c0:78:33:fb:cc:3d:a5:32:4c:fb:
                    ff:b8:fd:f6:8b:3b:65:ed:a1:63:94:40:f2:33:89:
                    10:05:cb:5d:d1:16:de:41:93:53:d6:00:2f:51:4b:
                    52:cd:e9:81:32:07:25:5d:59:59:0d:f8:2b:6f:64:
                    bf:91:2c:84:7b:7e:09:0f:56:8f:93:cc:dc:a9:80:
                    7e:ee:c2:ea:46:56:b2:1c:18:54:84:d6:4b:c7:6b:
                    20:70:6e:6a:d7:c8:80:2b:89:1a:2f:29:d7:08:1c:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:0B:1A:10:37:43:99:29:CC:8B:3E:98:BD:46:46:65:99:AB:0B
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:3a:9b:a5:ee:37:cf:85:ab:81:f0:20:4b:a8:6f:7b:1a:3d:
         e5:c7:31:09:d1:b6:14:d1:de:05:96:7a:8e:34:28:c6:03:ac:
         43:20:5d:d3:57:7c:c5:08:20:a7:a9:2c:48:4f:8d:3e:1a:3c:
         e7:15:a9:74:09:ff:ce:35:19:d7:62:8c:0b:0d:16:3c:a2:ed:
         85:15:63:78:00:c8:1f:04:b0:4e:50:96:75:cd:de:69:16:2f:
         5c:00:83:3b:5b:d5:06:3c:76:f7:f2:54:52:eb:6c:62:02:78:
         6d:a7:96:fc:54:43:60:02:21:23:2f:d5:dc:70:9c:8e:b2:02:
         dd:bd:67:89:fa:bf:f9:1e:c3:63:60:ab:c7:b5:09:2c:bd:2e:
         12:66:d9:3c:de:96:2f:32:43:00:a4:97:80:93:9e:f2:13:a4:
         d0:ad:57:6a:7d:3f:d9:33:dc:46:20:61:12:47:7a:45:9e:29:
         70:9e:ed:c3:88:f7:64:8f:96:97:3a:9d:72:13:91:77:9a:08:
         0f:9c:2d:35:8c:24:fb:ba:c0:54:fa:71:2a:c8:ce:a2:bd:98:
         fd:44:13:fc:b7:8e:55:ce:84:7d:a3:8e:01:a0:29:3a:06:2b:
         ae:d6:37:d0:84:5d:1f:2a:da:9f:eb:2a:57:b3:d3:03:6a:7f:
         5f:28:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:31 2024 by rpki-client on console-fra.rpki-client.org