Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32332d3233203d3e20323634353235.roa
File:                     34352e37312e38302e302f32332d3233203d3e20323634353235.roa (raw, json)
Hash identifier:          Xh66bktAXWEImDmVfOwpDLxFw7RaZLAYcrH1gvqzWec=
Subject key identifier:   D4:1A:CE:56:BF:B3:98:B9:68:84:0B:78:28:AF:E0:F2:8A:B5:35:17
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       47B298CE8CCE97FDCB0BDAFA179919A40612F4CD
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32332d3233203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 20:58:26 +0000
ROA not before:           Tue 30 Apr 2024 20:53:26 +0000
ROA not after:            Tue 29 Apr 2025 20:58:26 +0000
asID:                     264525
IP address blocks:        45.71.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b2:98:ce:8c:ce:97:fd:cb:0b:da:fa:17:99:19:a4:06:12:f4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 20:53:26 2024 GMT
            Not After : Apr 29 20:58:26 2025 GMT
        Subject: CN=D41ACE56BFB398B968840B7828AFE0F28AB53517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:98:08:20:12:fb:74:0e:84:1e:0a:fe:66:
                    27:ac:d6:ec:ac:ca:e2:2b:9d:75:0e:bb:1b:36:c4:
                    f6:7f:ed:0b:a8:dd:70:ec:78:73:9e:71:22:20:63:
                    d5:fa:02:36:76:ce:95:58:86:a5:b4:6f:dd:1b:ca:
                    9a:38:81:ae:ae:09:2b:a5:e4:3d:76:99:5d:14:a0:
                    b3:7d:c3:ab:1d:bc:19:a4:6f:6f:d9:8a:71:cd:6a:
                    ed:31:57:9c:27:79:85:cb:15:a8:db:75:ab:ba:6a:
                    b3:11:e2:c8:35:b0:e1:ae:ea:f3:05:aa:a3:e6:f7:
                    98:19:f8:a5:cf:6f:24:ea:66:3b:7e:2a:cc:15:ca:
                    ea:6e:e5:b5:ba:3d:40:8b:e6:4f:9d:8d:03:46:3b:
                    41:c3:3c:06:03:61:12:ba:d4:85:74:cb:7a:c2:a6:
                    b7:bd:9e:1c:5d:05:9d:d9:9f:17:0f:f7:16:43:63:
                    cf:75:19:1a:09:85:a3:f0:9a:6f:47:04:fe:e8:0b:
                    fb:9d:9e:ca:02:4f:d3:b8:14:ca:af:21:55:58:fd:
                    a1:d5:98:ca:84:87:f0:d4:5d:50:3e:f6:71:ce:a2:
                    2c:2e:44:df:c8:9e:4a:92:dd:0d:ef:f2:f8:b0:78:
                    fe:1b:29:f9:b6:e9:f4:24:27:d7:9c:3c:e2:27:92:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1A:CE:56:BF:B3:98:B9:68:84:0B:78:28:AF:E0:F2:8A:B5:35:17
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32332d3233203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:fc:e3:ec:f8:4c:09:c9:23:88:21:97:46:c9:4e:f7:fc:
         de:37:12:c3:3d:06:72:88:89:a4:f6:a8:28:42:63:33:de:5f:
         19:4c:04:81:ed:37:b8:ed:d4:7b:12:b7:5f:77:82:a9:86:f1:
         e3:be:08:d4:49:39:e2:1a:17:88:a5:8c:39:83:52:8f:31:e2:
         d9:64:14:fd:a7:2c:47:76:ad:93:f2:e8:9a:83:be:32:6d:f3:
         93:48:62:9f:46:5f:88:ce:5b:d0:b5:1b:0e:77:d4:05:7f:4d:
         af:4f:45:95:ba:fc:a5:a9:2f:7d:40:c6:f4:50:38:ef:1c:0a:
         7b:be:f0:7a:20:1c:63:37:4e:51:db:c2:df:bc:86:f7:f0:ff:
         0e:83:a7:76:a2:7b:aa:27:19:cb:53:7f:62:3b:fe:d8:7a:5a:
         d6:ec:18:33:d1:1d:e6:3c:f9:05:da:e4:a6:7f:1b:cc:23:c2:
         7b:e0:9d:6f:21:3d:e7:da:3c:aa:83:90:e0:66:4a:c5:09:1e:
         e3:84:d9:cd:d6:d2:64:50:4c:ea:09:7e:0f:6a:12:d7:79:ac:
         09:b9:3b:0d:91:70:5f:13:c9:a7:ef:b4:fa:53:f7:53:4e:02:
         3d:0a:d7:85:ea:5b:5d:8b:9b:ba:c1:bf:f1:c6:7f:ab:fc:ce:
         db:85:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org