Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
File:                     34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (raw, json)
Hash identifier:          AOEiMjPwvGQ2WWh1fjR8HS6XgJ2/wZLeqE4cnWeszyo=
Subject key identifier:   72:79:89:FC:12:8C:15:4C:80:91:ED:49:76:D5:C9:1A:F2:1B:13:DE
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       56B41610D03A334A726AE7817149A2921A706AB6
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
Signing time:             Fri 31 May 2024 13:48:13 +0000
ROA not before:           Fri 31 May 2024 13:43:13 +0000
ROA not after:            Fri 30 May 2025 13:48:13 +0000
asID:                     268628
IP address blocks:        45.164.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b4:16:10:d0:3a:33:4a:72:6a:e7:81:71:49:a2:92:1a:70:6a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: May 31 13:43:13 2024 GMT
            Not After : May 30 13:48:13 2025 GMT
        Subject: CN=727989FC128C154C8091ED4976D5C91AF21B13DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:3a:9a:19:d6:7e:5a:4e:86:88:22:35:a8:
                    e9:54:ae:18:11:7a:fe:cb:75:6b:08:68:f9:d6:a6:
                    23:04:74:68:59:7b:b6:3a:88:94:a7:c8:7c:80:03:
                    3f:cf:3b:4c:de:32:b7:1e:27:99:7f:43:4a:47:41:
                    d0:04:44:36:82:38:20:9d:19:bb:b3:78:01:2e:1c:
                    d8:ce:10:a1:b2:42:32:b5:c3:f5:a0:c2:c9:5e:75:
                    f6:3b:79:f3:45:00:1c:5d:84:6e:4b:c5:5c:93:cf:
                    a1:da:da:3b:55:3f:02:1a:ce:60:a4:1d:34:d1:f1:
                    3d:53:05:27:4d:98:a8:85:ee:04:c8:7b:c1:f5:4c:
                    4c:79:64:d0:7d:75:5d:d9:28:06:30:60:75:8e:41:
                    48:ad:fd:7c:57:80:80:ef:c4:95:27:13:56:a3:bb:
                    98:08:f8:b2:d2:4a:44:a5:e9:a0:d2:e2:a9:81:e1:
                    1b:f0:c6:d9:bd:b2:90:13:43:bb:70:71:c9:13:f2:
                    15:1b:3f:6e:53:5a:2f:f1:a4:f2:5d:0c:4d:24:d4:
                    eb:72:ab:e8:dc:c9:0f:be:49:9e:81:95:9d:a1:26:
                    14:4c:11:47:0c:2c:9d:af:17:08:e6:e0:a9:79:fe:
                    32:bb:8c:7d:63:86:72:55:d5:59:39:e8:92:d1:48:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:79:89:FC:12:8C:15:4C:80:91:ED:49:76:D5:C9:1A:F2:1B:13:DE
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:ba:3f:74:a5:fa:5d:81:c1:ca:a5:2c:09:db:cd:2b:a4:
         6c:7b:b8:15:06:4c:c6:f3:40:1a:9b:ca:fe:99:4e:49:bf:78:
         07:5d:87:c9:0d:97:65:16:fb:12:4d:02:54:af:f4:a2:a4:a2:
         6c:f6:b3:fe:52:ab:18:0e:6a:16:28:9d:dd:e0:ca:9d:f4:c8:
         73:34:bc:8c:d1:68:70:ce:d5:fc:fd:fd:6a:f7:b8:95:27:43:
         ae:fa:6a:ea:ac:07:8f:c0:88:93:ed:b4:55:4b:63:90:79:88:
         aa:82:1e:be:1a:b8:b2:aa:55:88:b1:5a:ee:d6:bc:f0:9f:60:
         86:b3:52:de:30:cc:c7:5d:ad:ae:d2:b0:f1:c2:b1:2f:06:f0:
         e6:49:9c:de:bc:11:2d:82:7e:5d:99:78:26:3c:00:1b:99:4f:
         a9:ce:7b:3a:d9:61:8a:53:da:23:61:d5:a7:8d:27:56:2f:ad:
         f9:b9:4d:96:c9:55:eb:d9:c4:d5:86:f5:11:71:88:d0:88:31:
         89:f4:02:70:7f:33:07:2a:db:a1:a1:ed:f7:5d:59:86:66:f6:
         f6:d6:e1:24:d1:1e:20:94:cd:e1:ae:ac:ad:ed:d6:b2:33:06:
         f8:af:2a:d4:74:47:02:91:1a:95:ec:64:e1:3c:6b:18:72:c0:
         2b:f2:e6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org