Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa
File:                     34352e3137322e36342e302f32322d3234203d3e20323638373931.roa (raw, json)
Hash identifier:          fwP7sI2yQMtQDyAYVV4pXBDtQRgTZXYc6Hc9DIUPFx0=
Subject key identifier:   75:E7:6F:BA:62:B5:60:94:F1:5D:A5:8F:50:61:BD:E5:C1:3B:F8:33
Certificate issuer:       /CN=AC1072CCDEF9467DA0A709A02C47E32C059CFEC5
Certificate serial:       78F9C6522C77521DB511BB00A3E89FF4466F0146
Authority key identifier: AC:10:72:CC:DE:F9:46:7D:A0:A7:09:A0:2C:47:E3:2C:05:9C:FE:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268791
IP address blocks:        45.172.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.crl
                          rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f9:c6:52:2c:77:52:1d:b5:11:bb:00:a3:e8:9f:f4:46:6f:01:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1072CCDEF9467DA0A709A02C47E32C059CFEC5
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:77:6f:f2:b2:93:ba:05:ea:eb:07:7c:8f:13:
                    51:6a:8c:4c:d3:1b:f7:e1:05:1d:aa:be:d6:9c:ec:
                    06:c0:48:10:a8:30:f6:07:bb:a1:0c:52:b1:c1:c1:
                    51:32:c5:d6:1f:c0:2a:0e:4e:93:93:74:59:11:ff:
                    f7:a6:9a:70:46:3e:38:34:2a:d5:0c:b5:48:9c:59:
                    96:62:14:8b:37:bd:8d:d4:1d:bb:15:67:9d:20:bd:
                    20:50:52:b7:12:90:07:45:10:75:1a:51:e8:dd:fc:
                    b5:97:37:3b:29:ad:94:1d:85:c3:9b:a1:db:59:74:
                    36:2c:0b:c6:1d:8f:36:32:ce:d2:b4:68:13:2d:7b:
                    65:7e:36:36:c4:35:aa:78:60:68:48:33:14:c4:ff:
                    36:f0:e6:1b:0c:33:42:8b:ea:48:79:7e:b1:56:8a:
                    3b:05:5e:1f:30:38:27:4a:cc:6d:8e:d9:f8:2b:60:
                    01:92:b8:db:5c:06:11:98:0b:90:09:02:97:5d:49:
                    b8:fb:11:0c:1e:85:fd:09:3e:87:56:aa:48:46:cf:
                    b4:13:d2:de:92:76:1a:e3:5b:4c:33:07:01:d3:d0:
                    3a:92:ee:bb:2e:84:9c:5b:8b:6c:ae:2b:66:8a:b0:
                    fd:95:f6:b7:20:81:67:c0:54:e4:35:85:e6:96:a2:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E7:6F:BA:62:B5:60:94:F1:5D:A5:8F:50:61:BD:E5:C1:3B:F8:33
            X509v3 Authority Key Identifier:
                keyid:AC:10:72:CC:DE:F9:46:7D:A0:A7:09:A0:2C:47:E3:2C:05:9C:FE:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:50:cf:80:29:c8:2e:12:34:20:ed:5f:0c:ac:77:5d:de:67:
         32:df:7f:13:09:f6:69:e9:6d:55:bb:1a:78:96:98:f5:45:e8:
         c4:27:85:19:44:53:e6:b2:06:32:22:44:4b:cd:2c:d6:c7:2a:
         40:51:3e:ff:69:12:70:21:54:f1:99:11:6f:12:94:a7:18:fc:
         cf:88:9d:df:2f:e9:04:d3:e7:64:81:29:ee:03:a9:62:1a:94:
         73:56:c2:7d:40:f1:f0:d2:14:fd:8f:4c:38:f5:fa:fd:f8:bc:
         8c:f1:c1:50:3d:93:27:a9:3b:10:e7:e0:77:31:75:ef:bf:3f:
         2a:bc:00:ee:bf:d1:62:4a:77:dd:87:db:7c:f2:c7:db:34:5a:
         53:ff:ea:16:b3:d9:44:78:7f:c6:4b:d5:76:78:7d:80:35:26:
         70:68:2e:2d:a0:79:30:b0:03:92:86:2e:c6:a2:a3:59:f1:5f:
         b5:91:25:3a:ba:18:09:01:ef:f5:9b:a4:f4:b9:ef:d1:25:3e:
         37:5f:f9:49:34:84:ab:94:57:3e:69:90:25:a9:b7:57:fe:c4:
         4f:00:a8:34:1b:84:e2:1e:d2:55:3b:a4:c5:e4:03:5f:1a:3b:
         a0:6d:89:e0:c2:8d:50:e0:f4:67:04:8b:9d:04:42:72:07:21:
         ec:08:ff:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:01 2024 by rpki-client on console-fra.rpki-client.org