Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/34352e3232372e38302e302f32322d3234203d3e20323637303730.roa
File:                     34352e3232372e38302e302f32322d3234203d3e20323637303730.roa (raw, json)
Hash identifier:          0H1twonOkFgoUR0radlUcd501BfYHtu6y0yP0p6FBwI=
Subject key identifier:   D1:BE:CE:87:36:CC:D6:C3:2E:BE:6A:2D:31:3F:CC:C8:FE:D7:C7:50
Certificate issuer:       /CN=C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E
Certificate serial:       2EFDCBBFAA043B76AAD081D318F793CE0F088AEC
Authority key identifier: C9:DB:61:F5:2B:F7:A3:A7:8D:0E:8F:EC:C1:CC:92:2B:47:7A:F4:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/34352e3232372e38302e302f32322d3234203d3e20323637303730.roa
Signing time:             Wed 03 Apr 2024 20:19:04 +0000
ROA not before:           Wed 03 Apr 2024 20:14:04 +0000
ROA not after:            Wed 02 Apr 2025 20:19:04 +0000
asID:                     267070
IP address blocks:        45.227.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.crl
                          rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fd:cb:bf:aa:04:3b:76:aa:d0:81:d3:18:f7:93:ce:0f:08:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E
        Validity
            Not Before: Apr  3 20:14:04 2024 GMT
            Not After : Apr  2 20:19:04 2025 GMT
        Subject: CN=D1BECE8736CCD6C32EBE6A2D313FCCC8FED7C750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:34:7e:c1:54:62:60:2c:27:94:b3:fe:e4:
                    dd:8d:63:65:32:ef:0f:68:0f:08:95:7b:74:a1:66:
                    21:1e:15:cc:65:95:77:fc:f6:c2:28:51:da:12:24:
                    30:e0:6b:64:eb:56:27:5a:63:5a:d4:30:bb:83:d6:
                    3d:89:5a:53:ed:0f:47:ff:65:6b:c7:fb:4e:69:05:
                    6a:67:41:a6:ae:f2:4d:0f:41:66:e9:e5:84:6a:b3:
                    94:a7:07:36:ab:bb:cd:eb:8d:c5:9a:ab:75:5f:e9:
                    71:01:03:6c:e4:b0:21:98:34:14:de:c1:c7:16:6f:
                    0e:cb:7e:4d:ec:71:f7:cd:3a:c7:b1:27:53:79:aa:
                    f3:dc:45:84:c4:df:9c:4f:ae:3d:c4:16:77:d5:a9:
                    17:ab:7c:87:ec:69:ad:9f:b1:b4:2a:d6:c5:db:87:
                    4b:7e:86:22:58:21:15:5d:40:2a:a2:22:88:5d:1d:
                    4a:f6:bc:60:8b:f4:af:07:02:ce:67:7b:85:7c:c0:
                    65:bb:06:72:80:fa:e9:0e:f4:2d:62:d2:18:18:31:
                    dc:c4:c8:6d:aa:c9:8a:3d:a2:c8:30:15:94:53:7a:
                    c4:2b:b7:8c:55:9f:59:4f:b4:91:b7:ea:b8:da:ab:
                    f4:4b:72:fb:b9:4f:0f:bf:f6:e5:de:64:5e:07:ef:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BE:CE:87:36:CC:D6:C3:2E:BE:6A:2D:31:3F:CC:C8:FE:D7:C7:50
            X509v3 Authority Key Identifier:
                keyid:C9:DB:61:F5:2B:F7:A3:A7:8D:0E:8F:EC:C1:CC:92:2B:47:7A:F4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/34352e3232372e38302e302f32322d3234203d3e20323637303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:22:2d:1e:88:5b:9b:73:7f:bc:77:28:35:51:ac:59:3e:
         91:9d:9f:96:a4:6e:e1:83:5f:b1:ee:59:67:b9:03:14:a8:9e:
         1e:a0:be:77:e4:73:d5:a6:5e:64:fc:7f:b9:79:97:10:7b:82:
         28:bd:5a:e7:74:36:87:dd:57:40:76:8c:17:95:8f:2f:26:f9:
         4e:fa:1e:93:d5:41:63:79:37:d0:f9:ad:82:42:e5:48:e0:88:
         f6:c3:de:e4:4e:55:02:2e:ff:2b:38:5c:99:ad:46:ed:02:23:
         1c:77:95:72:b1:9e:80:d4:63:3d:0e:81:6b:46:b2:d3:44:e8:
         0c:63:4a:50:38:78:a0:a3:eb:75:79:79:76:d1:49:8a:2f:5d:
         93:97:c5:af:fb:f8:22:4e:65:58:07:d8:a1:52:70:80:73:32:
         28:16:13:f7:b2:5d:a4:f8:ac:f1:b9:f2:81:73:df:6f:7b:d2:
         12:6b:1c:e0:69:74:36:18:fc:36:c0:e1:fc:af:93:d3:b1:be:
         b3:56:dc:87:f3:c8:e7:a6:54:49:18:e2:9c:ff:89:54:8f:29:
         42:05:dc:cc:35:f1:60:17:e1:d9:70:6b:89:e7:42:8f:7b:f9:
         9d:cf:e9:6d:65:3e:30:a3:80:bf:58:d5:00:b9:7a:a5:da:f6:
         65:47:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org