Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231342e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          ZgrBXa3ofjXah/FYPFTSKV82bwvHdDkL7yvLCf5OLaQ=
Subject key identifier:   19:46:AD:1D:9F:DF:0D:59:89:63:0F:CA:98:F8:50:BB:27:48:3B:5B
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       0DD567E1D435CCF7BB553235F6AD9A1FB50EABDF
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61614
IP address blocks:        45.232.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d5:67:e1:d4:35:cc:f7:bb:55:32:35:f6:ad:9a:1f:b5:0e:ab:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:69:1e:46:04:db:72:31:40:a3:2a:ba:21:
                    a9:fd:3c:c4:86:cf:f9:4f:3c:dd:c3:48:63:c8:ce:
                    c6:85:8d:b7:c4:0e:e8:c5:7a:91:dd:53:59:7b:81:
                    f1:83:36:d9:69:a9:02:3a:81:c3:c0:2b:b1:f7:a0:
                    e5:c0:4a:1d:82:dc:b0:43:0b:f2:30:0c:ab:d4:5a:
                    b3:3b:43:24:4d:57:21:cd:7c:e1:03:f7:d8:59:43:
                    7b:5d:8a:d0:0a:38:42:ae:3c:93:50:03:8e:9b:87:
                    c7:a8:ad:34:17:12:09:4d:bc:d7:fa:0b:08:14:ad:
                    ea:39:9a:d9:56:2b:ce:64:bb:b1:6f:1d:00:b8:db:
                    9c:99:27:75:73:d9:47:fa:1c:56:39:b8:fd:60:c5:
                    92:ca:14:f5:00:f6:da:7a:5f:c6:37:b3:70:c5:ef:
                    17:80:ae:07:fc:85:f7:31:14:d4:d1:35:98:92:c1:
                    2c:c4:c7:da:d6:5a:b2:34:84:d1:d6:19:63:b3:60:
                    6c:62:04:55:34:80:a6:f7:10:84:07:85:e8:71:2a:
                    f0:8c:fa:24:7b:72:82:2a:d7:75:30:19:f0:09:bf:
                    31:fc:a9:71:a5:94:6a:b4:86:08:69:d8:1c:e1:44:
                    9c:25:72:7e:de:bd:eb:95:e3:23:69:34:7d:24:c0:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:46:AD:1D:9F:DF:0D:59:89:63:0F:CA:98:F8:50:BB:27:48:3B:5B
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:47:b7:fd:01:94:1f:27:86:4b:b9:30:e5:65:9b:a4:8e:
         96:cc:4f:1f:d8:1a:87:42:c4:43:a2:23:ce:a4:a5:bc:7c:ab:
         15:a7:36:41:f9:5e:3b:d2:00:f6:41:d3:2f:c4:79:77:7c:82:
         de:96:97:15:25:97:7d:08:96:99:6b:ce:50:6b:d6:14:07:b5:
         f5:f2:02:ed:02:26:4f:50:55:60:7f:e4:a5:f6:70:64:59:52:
         ca:d9:57:45:0c:38:f4:d8:3c:43:f9:0b:ca:e6:58:bf:46:e1:
         73:5d:34:a4:1b:dc:07:9a:c1:42:82:63:ea:3b:b2:de:7e:de:
         dc:26:7b:b0:3e:be:fe:68:a3:2d:90:b3:7a:f1:aa:92:c3:33:
         c8:fb:4c:dc:c5:8e:09:44:08:dd:b9:0a:8a:35:42:cc:05:e2:
         39:3c:68:9d:b5:0b:31:9f:9c:32:53:57:da:18:f0:3c:fb:97:
         6d:3b:b3:11:2f:5f:60:7a:9f:d2:91:11:42:07:99:1e:ac:2e:
         13:03:db:85:cc:69:41:b3:19:8b:78:d4:f5:8b:95:f0:3e:22:
         db:e4:b1:d4:13:80:2e:4d:28:0a:76:b2:4b:5c:ac:b7:49:ae:
         62:4b:5f:24:fc:04:86:bb:e5:08:f7:08:31:b5:92:61:23:37:
         ff:de:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org