Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32332d3233203d3e203631363134.roa
File:                     34352e3233322e3231342e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          S2c1BHVK+RVKlxnzQu6uLgG2bazZFl+QuZYrkcQxCJE=
Subject key identifier:   38:21:DE:5B:9E:6B:67:12:9A:BC:8E:BA:B5:E7:2B:ED:25:44:3D:0E
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       77BBFAE574D2EF6DF078045DF7307E590BFE66BF
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32332d3233203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        45.232.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bb:fa:e5:74:d2:ef:6d:f0:78:04:5d:f7:30:7e:59:0b:fe:66:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=3082010A0282010100C93B9B94321D08437DA9EF7D45DF3B542DC7AA24C3E5EB834C79F83A6643365EF95A0DABD16EC9023DE44BC1A683FD166A8F789D5E02CA679A6F3E95494760AABEFAB362EABD46F01A643EE54EA11053B586582A4394E8EDF1ACB7184EEEEAE94A60AA45BC3DA4DB40C941801A7BA495022B888A5181D21409C67AA3968D6C2EB926C1FB1E4E8272C0908E196F304471C5125A1A671CFB73FC75DF5CFAA865893148D691106907161DCE45F245630F8B6F0129844F346B2D01C4EA3D07D164D09118492699B30754ED2D64C8C1ECFECBC06E864AEB41E8C96F5CD2F374DEDF12001DF5248D87635D4081C316FB6F5D120B1ED19AC97F1BF529F51C05C71B42D30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:9b:94:32:1d:08:43:7d:a9:ef:7d:45:df:
                    3b:54:2d:c7:aa:24:c3:e5:eb:83:4c:79:f8:3a:66:
                    43:36:5e:f9:5a:0d:ab:d1:6e:c9:02:3d:e4:4b:c1:
                    a6:83:fd:16:6a:8f:78:9d:5e:02:ca:67:9a:6f:3e:
                    95:49:47:60:aa:be:fa:b3:62:ea:bd:46:f0:1a:64:
                    3e:e5:4e:a1:10:53:b5:86:58:2a:43:94:e8:ed:f1:
                    ac:b7:18:4e:ee:ea:e9:4a:60:aa:45:bc:3d:a4:db:
                    40:c9:41:80:1a:7b:a4:95:02:2b:88:8a:51:81:d2:
                    14:09:c6:7a:a3:96:8d:6c:2e:b9:26:c1:fb:1e:4e:
                    82:72:c0:90:8e:19:6f:30:44:71:c5:12:5a:1a:67:
                    1c:fb:73:fc:75:df:5c:fa:a8:65:89:31:48:d6:91:
                    10:69:07:16:1d:ce:45:f2:45:63:0f:8b:6f:01:29:
                    84:4f:34:6b:2d:01:c4:ea:3d:07:d1:64:d0:91:18:
                    49:26:99:b3:07:54:ed:2d:64:c8:c1:ec:fe:cb:c0:
                    6e:86:4a:eb:41:e8:c9:6f:5c:d2:f3:74:de:df:12:
                    00:1d:f5:24:8d:87:63:5d:40:81:c3:16:fb:6f:5d:
                    12:0b:1e:d1:9a:c9:7f:1b:f5:29:f5:1c:05:c7:1b:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:21:DE:5B:9E:6B:67:12:9A:BC:8E:BA:B5:E7:2B:ED:25:44:3D:0E
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:19:0b:9c:64:c7:ea:41:82:68:d8:77:02:0b:05:0a:f6:83:
         b3:87:a0:fa:c9:47:de:3b:21:02:69:fc:cd:0c:6d:12:51:5d:
         2b:3e:43:96:ca:69:fc:c4:c9:31:da:9f:1b:e6:8c:76:a1:45:
         cc:7a:95:34:89:83:95:b9:46:a3:c2:54:54:4f:66:aa:4b:49:
         de:b5:f1:42:3d:a4:48:49:77:eb:af:ba:52:b7:bc:98:a2:b6:
         33:db:56:5f:e1:44:5a:32:1b:f7:74:84:12:33:e1:2e:c3:68:
         ad:98:56:36:4e:8d:b5:e9:b3:74:7d:72:85:68:db:0a:ba:bd:
         33:42:98:49:7a:fb:84:ec:dd:71:e1:98:37:ab:b1:4b:d2:e5:
         3a:f2:11:ac:7a:7a:f7:44:d0:e0:b5:d8:2b:98:c8:e1:6d:5b:
         c4:b0:16:2b:2a:c2:19:e5:68:72:7a:33:b5:ee:1e:c1:95:3c:
         e1:e0:43:cb:5f:4e:c5:49:20:0c:e9:84:0b:e4:3b:2d:77:37:
         01:9f:94:c9:4e:dc:18:6f:ec:7d:76:f8:a8:92:a8:0f:6c:f2:
         a5:4d:79:36:d4:34:24:fe:65:e4:81:08:c8:86:83:49:72:8a:
         d4:89:24:64:4c:5c:00:65:23:01:c3:8d:bc:c6:b4:aa:15:8c:
         2a:22:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:31 2024 by rpki-client on console-fra.rpki-client.org