Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231332e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          FTPDXrj7cgLschXk731DGAO+lDlS0rdHcTZBdOXBf1U=
Subject key identifier:   B0:CD:0A:DE:F5:69:61:AE:49:B1:99:D3:C2:46:27:91:28:F1:A4:C6
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       058E69E42D7DCC940226EFE844B8CC37BBB4D0F1
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        45.232.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:69:e4:2d:7d:cc:94:02:26:ef:e8:44:b8:cc:37:bb:b4:d0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:7c:70:ae:9a:81:a0:25:16:30:13:82:91:
                    bf:71:2d:a0:f5:df:fe:12:bc:84:a1:6d:55:f5:1a:
                    4f:4b:33:be:39:1d:89:a9:a4:65:4b:9a:0e:51:73:
                    8b:4c:25:14:38:a6:23:d7:8a:10:a8:66:8d:fa:1a:
                    51:8c:ac:e6:b6:f2:5f:69:11:1a:df:89:87:32:5f:
                    75:6b:46:ff:f2:fa:dc:55:ec:0c:a7:7f:90:1b:19:
                    13:15:b4:55:67:c7:9e:1c:2b:b7:fd:90:94:b0:45:
                    84:68:db:c6:78:3d:36:4f:b9:17:9a:0a:05:b1:94:
                    0f:79:8b:75:1c:47:99:9f:fe:52:70:a7:bb:40:0e:
                    16:92:3a:ca:a9:25:15:cc:56:51:dc:69:22:b5:2c:
                    28:44:80:78:c9:93:c2:60:bf:5b:1f:2d:48:b4:cf:
                    b9:61:13:66:84:74:96:0c:63:ea:12:08:9b:7a:b5:
                    56:3e:03:e4:11:51:03:fe:be:38:db:7b:77:bf:44:
                    ba:88:79:9f:28:64:1f:f2:42:83:7f:46:13:19:e9:
                    27:78:30:e6:f1:d1:6d:cd:94:f3:02:40:8b:cb:29:
                    81:ee:e9:b9:94:9b:a6:3b:8c:c6:7d:3e:f4:15:08:
                    7e:f8:5f:f5:4a:9e:07:b4:b5:af:44:b0:a8:c2:3c:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:0A:DE:F5:69:61:AE:49:B1:99:D3:C2:46:27:91:28:F1:A4:C6
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:47:c4:ab:34:ae:25:12:69:d0:47:2f:ee:30:76:9c:2f:
         77:58:89:0f:59:6e:cf:fe:53:26:7e:ae:c1:9a:8e:28:7a:08:
         66:10:ad:d2:45:7d:49:14:52:36:de:f6:c2:09:35:25:fa:5c:
         0f:2b:a4:8b:f0:67:e6:4b:68:ac:a8:69:57:66:68:6c:7c:33:
         e1:23:5f:08:6a:66:89:4b:77:60:7a:34:24:bf:4b:d5:09:39:
         7c:d3:f2:24:af:07:c4:3a:7f:68:c1:70:78:2c:a7:68:87:3e:
         37:d5:df:59:ca:08:30:dd:44:49:99:06:5a:ab:89:16:0c:a3:
         8f:8f:01:ec:36:80:3e:37:8d:12:51:50:00:fd:ef:10:5b:18:
         20:83:db:b8:5c:35:df:71:b6:65:de:8e:bc:fd:52:42:0e:ae:
         26:91:23:73:f4:71:32:bf:3f:18:5b:55:af:ec:30:e5:52:a7:
         fc:ae:66:62:ea:b6:30:42:83:8a:87:9b:20:0b:71:6a:1c:d9:
         f5:a9:f8:da:8b:32:06:d2:25:0a:a1:d4:0a:fa:c8:67:5d:6d:
         d0:06:cd:76:44:ae:5b:03:f8:e5:de:fd:3f:1c:93:60:05:15:
         33:60:22:61:19:6d:25:05:71:ae:03:d4:e8:df:55:22:e0:51:
         c5:5f:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org