Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
File:                     34352e362e3136342e302f32322d3332203d3e20323636313430.roa (raw, json)
Hash identifier:          X1IOTOCgKFHUpOpgjA3wU+vEk+Z1uQC+safj9KDFty4=
Subject key identifier:   54:60:FB:99:F4:52:C7:95:0D:86:FE:A8:CB:28:2B:79:42:CC:32:E7
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       327F1CEAF3C94B914AD0FA6B24B1AFC84C8ED96C
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
Signing time:             Thu 04 Apr 2024 22:52:38 +0000
ROA not before:           Thu 04 Apr 2024 22:47:38 +0000
ROA not after:            Thu 03 Apr 2025 22:52:38 +0000
asID:                     266140
IP address blocks:        45.6.164.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
                          rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7f:1c:ea:f3:c9:4b:91:4a:d0:fa:6b:24:b1:af:c8:4c:8e:d9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Apr  4 22:47:38 2024 GMT
            Not After : Apr  3 22:52:38 2025 GMT
        Subject: CN=5460FB99F452C7950D86FEA8CB282B7942CC32E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:ec:9e:97:3f:4c:eb:42:b1:5d:97:81:8e:
                    d7:dc:e9:cb:e8:0a:db:6e:05:9a:98:75:bd:68:b0:
                    c3:19:a4:c9:49:3b:8d:39:ec:92:fe:96:ff:ca:2c:
                    b4:7f:a0:d1:6f:36:9e:74:8a:7c:e3:23:0c:75:76:
                    01:f9:64:dc:67:5b:69:2a:d0:e2:a4:25:f4:4c:85:
                    1f:ee:de:75:40:9b:f2:64:f6:ad:8e:62:14:81:ec:
                    32:13:72:3e:e8:38:9d:ae:ee:1b:59:16:c7:11:0c:
                    b2:5f:09:48:95:91:44:58:ae:e2:77:23:b0:95:cc:
                    84:8c:61:34:ec:51:ad:79:db:a5:b5:2a:d9:73:a1:
                    dc:e9:53:76:cd:a4:7d:8b:fe:61:ef:43:87:a1:80:
                    f2:bf:5b:1e:da:95:99:5b:ec:b1:94:bb:b1:c2:bb:
                    a2:8b:2d:cf:27:6c:c1:5b:a4:aa:94:a7:e6:4c:29:
                    ce:db:bf:55:c4:e9:9b:2f:d9:7e:23:24:c2:80:0c:
                    76:1e:bf:37:ba:80:06:1a:d4:d7:b4:c3:83:2e:bc:
                    a0:cb:bf:5f:54:1a:3b:66:6f:96:e2:89:ea:a0:40:
                    2f:31:dd:85:d4:4f:6a:66:78:de:4f:e7:66:e4:7a:
                    b1:42:e9:41:7a:fd:8e:d0:df:7e:e3:24:fe:07:d1:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:60:FB:99:F4:52:C7:95:0D:86:FE:A8:CB:28:2B:79:42:CC:32:E7
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:d9:61:24:89:7f:51:da:b2:e1:72:f3:f6:fa:cf:64:c9:b6:
         08:b9:26:55:fc:ca:39:ac:ac:00:5a:ca:10:6c:3a:5b:fe:2f:
         93:17:66:8e:2e:cd:8b:18:f1:78:49:24:b5:b1:ed:89:f1:4b:
         f8:db:77:41:71:9e:c7:18:41:de:c9:76:cf:9c:3e:87:e8:62:
         ab:6e:b1:6e:e4:52:c4:db:26:99:5e:6c:98:5f:20:4d:ac:ee:
         1c:dc:f3:48:1f:7e:bf:14:9a:fa:b2:d0:07:8c:6f:38:1a:41:
         a7:fe:16:f5:5c:18:29:2a:55:16:0d:82:8d:95:f4:53:08:87:
         c0:24:14:56:a4:92:1c:4e:12:e6:c9:59:cd:fd:b5:55:f9:4c:
         d9:4e:7e:14:d8:85:5b:96:89:6d:3b:ca:bd:09:91:48:19:ec:
         0c:57:74:fe:0b:4e:07:9b:d2:82:34:5b:b2:1b:67:3e:0f:30:
         f4:50:0d:13:31:7e:89:91:aa:29:29:39:15:23:0a:fd:c2:b5:
         74:1e:41:be:e2:19:e9:35:97:b6:51:dc:aa:7d:aa:2d:ca:ad:
         4b:fe:99:57:19:76:a3:83:c7:e3:2d:e0:c1:2f:5c:a6:5f:12:
         92:e9:65:92:39:c7:7d:dd:14:08:4a:a1:a8:ba:0e:c0:82:af:
         49:4c:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:32 2024 by rpki-client on console-fra.rpki-client.org