Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa
File:                     34352e362e39342e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          To/Po4vurxJWuqBIhcK4Qzzd3rsHSJv9yvn0rc5QjOY=
Subject key identifier:   08:BC:A6:C8:2A:75:2B:28:86:7D:36:F3:22:3B:52:4C:C5:31:CD:8E
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       2941F33194247C0805EA5123960C95FF41A85906
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa
Signing time:             Wed 03 Apr 2024 18:32:20 +0000
ROA not before:           Wed 03 Apr 2024 18:27:20 +0000
ROA not after:            Wed 02 Apr 2025 18:32:20 +0000
asID:                     266129
IP address blocks:        45.6.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:41:f3:31:94:24:7c:08:05:ea:51:23:96:0c:95:ff:41:a8:59:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Apr  3 18:27:20 2024 GMT
            Not After : Apr  2 18:32:20 2025 GMT
        Subject: CN=08BCA6C82A752B28867D36F3223B524CC531CD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:09:8b:eb:b3:ee:3a:95:72:89:5c:d6:eb:bb:
                    f7:f2:1f:00:b9:60:1a:25:d8:60:b7:f0:f5:21:e6:
                    46:6f:13:f3:da:1d:df:b8:da:aa:90:ff:62:87:fc:
                    41:c8:5a:ee:d1:56:62:11:dd:94:7d:79:8e:94:20:
                    5b:cb:87:a4:00:bf:9b:17:f3:e6:4a:76:c5:62:4a:
                    f7:3e:01:f0:fd:50:fb:0c:d6:53:e1:9f:51:1e:47:
                    67:47:e9:28:25:05:f3:e1:6b:ba:46:69:ed:34:95:
                    76:40:9e:30:c0:1a:53:47:c7:7a:63:6f:4a:29:00:
                    1e:80:00:f3:b1:6b:95:b8:65:7f:4c:5d:b2:4b:f7:
                    e5:f4:92:b4:73:8b:86:62:ef:bd:eb:12:1d:ec:a6:
                    e3:65:6c:c6:f5:2d:ce:94:bb:24:f5:99:3f:19:77:
                    a5:ff:97:33:fd:33:94:17:3a:da:50:bc:97:88:1d:
                    56:e5:58:7a:7a:0d:0d:13:df:00:55:56:26:db:d1:
                    d5:c2:35:f6:15:0b:fc:fa:b3:14:77:67:30:d5:23:
                    ce:fd:48:1d:7e:16:3a:25:8f:fa:34:7b:05:6e:9d:
                    a1:b0:e6:ea:15:a2:d3:b6:a4:de:0b:35:73:07:6b:
                    96:1e:3f:13:ed:1a:fa:cf:27:b5:41:e1:c7:82:e5:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BC:A6:C8:2A:75:2B:28:86:7D:36:F3:22:3B:52:4C:C5:31:CD:8E
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:67:37:f9:31:6e:3e:60:a4:0d:55:71:98:4b:a7:a2:ce:e3:
         e9:9e:ec:73:16:03:50:2f:03:24:bd:d0:37:6c:ca:03:8c:14:
         f6:84:5a:a1:60:a5:bf:84:03:2d:2f:06:03:0f:cb:ba:16:70:
         33:ec:33:e3:9b:bb:21:08:c9:89:1a:9e:db:26:fa:f0:58:d6:
         ac:e5:c9:46:cc:ad:28:9f:b2:89:94:b5:06:d5:51:c9:46:4d:
         cd:c6:84:16:fd:19:ce:39:bf:78:93:c2:5a:4e:ca:cf:32:f4:
         7a:ba:3f:95:04:ce:cb:8b:38:3a:b3:04:b6:fe:75:78:12:60:
         69:50:a8:a5:14:c4:3b:97:33:18:cf:6e:de:5d:8c:76:9c:88:
         b6:91:65:02:4f:54:45:6d:d9:ca:74:0d:98:bc:1c:10:d3:22:
         97:4f:0f:7f:1a:d9:18:30:d5:4d:4c:44:83:28:c6:ad:49:32:
         3f:9f:bb:1b:67:76:93:75:65:ec:c2:7c:5e:60:cf:d2:be:c5:
         01:ad:35:5e:be:da:f6:f7:b9:51:5c:19:41:d9:cd:51:78:9f:
         5f:ce:b5:98:4d:28:64:70:71:1a:42:c5:ff:85:a6:26:26:49:
         27:62:ad:78:21:b7:b3:64:0d:9d:a0:61:b2:df:a0:ce:3b:09:
         01:97:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:08 2024 by rpki-client on console-ams.rpki-client.org