Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
File:                     34352e3136392e34342e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          L6SuJPDyGtT+SIYp2Gz+HH3QORGLBbe6Un3kfVEnCcI=
Subject key identifier:   9F:28:A7:CA:07:3A:0F:E7:B8:1F:83:AD:E3:0F:91:CB:C6:F8:A2:47
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       2C0CAEE0709A4614ACDDE43B302BAD8E4BFD9721
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
Signing time:             Thu 04 Apr 2024 09:40:14 +0000
ROA not before:           Thu 04 Apr 2024 09:35:14 +0000
ROA not after:            Thu 03 Apr 2025 09:40:14 +0000
asID:                     268097
IP address blocks:        45.169.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0c:ae:e0:70:9a:46:14:ac:dd:e4:3b:30:2b:ad:8e:4b:fd:97:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Apr  4 09:35:14 2024 GMT
            Not After : Apr  3 09:40:14 2025 GMT
        Subject: CN=9F28A7CA073A0FE7B81F83ADE30F91CBC6F8A247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:0b:4d:86:b1:e6:36:c0:4b:f8:1e:48:de:
                    19:6c:11:fb:f5:f9:03:ed:ab:e1:73:b9:42:18:16:
                    ba:33:22:e8:f5:2a:94:ad:5d:59:c6:c5:83:76:31:
                    eb:0c:04:bc:14:6f:61:9a:b2:03:75:d8:d7:92:2a:
                    a0:6a:9b:82:46:56:e7:80:f0:45:3d:b6:33:a6:f7:
                    51:3e:18:b9:34:7d:03:35:1d:97:ab:b1:4d:25:66:
                    7c:fc:5b:ed:d1:8e:f0:23:fa:4b:bc:01:19:9d:d7:
                    05:70:a9:b9:0a:9e:85:88:b0:0e:c9:d2:bf:d7:e7:
                    9c:43:60:d6:ab:06:69:c9:e5:83:fd:8c:70:ad:74:
                    35:a5:5c:c5:11:f1:2d:45:87:bf:58:3a:3a:45:1b:
                    19:d3:cb:ce:6a:62:46:ed:c8:98:8b:27:c3:ff:02:
                    e6:80:16:79:4a:b5:48:bf:52:fb:58:a7:06:65:ef:
                    29:ae:b1:0c:ce:7a:bd:cf:50:a4:49:3b:c3:33:3a:
                    7d:4e:ba:61:8d:50:55:f2:ef:ba:3d:aa:76:a3:81:
                    92:ee:21:14:85:52:1f:df:c5:35:50:27:e9:b1:8e:
                    e5:56:c0:90:f1:29:fa:e8:70:60:c8:79:e4:95:4f:
                    6a:dc:2b:6c:52:a7:0b:a9:d7:46:17:47:d2:fe:1a:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:28:A7:CA:07:3A:0F:E7:B8:1F:83:AD:E3:0F:91:CB:C6:F8:A2:47
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:4f:17:17:2e:d1:14:d3:f2:16:68:69:fb:cf:1a:5e:15:
         8b:cb:83:a9:a6:35:7e:8a:bf:66:7c:f1:7d:db:b8:89:f7:70:
         0f:40:d7:b5:c4:de:1b:49:bf:54:92:ff:6d:bd:49:e3:06:5c:
         17:b8:bc:40:53:39:bd:94:40:bf:50:8c:a8:b5:c3:2f:0a:78:
         84:a8:7d:dd:9a:d8:0b:da:0b:63:c2:e4:b9:7a:69:11:64:b1:
         51:27:b5:75:18:f3:fc:6d:21:cb:9f:3d:68:96:d2:45:88:85:
         fc:23:99:11:ed:b6:2e:77:11:de:c0:9c:84:ea:43:36:ba:05:
         62:22:c2:8f:9d:6f:4d:0c:31:35:07:2d:a7:15:90:a6:71:77:
         36:26:23:9a:1c:4e:32:1b:8e:98:7e:95:2d:15:d5:ac:33:80:
         d1:f2:a2:f3:33:5b:85:cd:65:ac:3d:41:a2:71:8c:7d:ac:8e:
         43:fe:fd:a2:39:8a:a1:f7:f9:5c:70:fd:cd:89:7a:47:20:d1:
         e8:42:81:f8:ed:3f:df:59:d4:95:35:87:ef:7e:8a:95:73:db:
         9a:aa:36:d1:c4:e0:8a:1f:aa:27:47:1a:91:3a:bf:62:c3:dd:
         8e:2e:17:8f:13:cd:a3:8a:5b:27:29:8c:33:b1:9b:79:b8:a3:
         6b:df:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:42 2024 by rpki-client on console-fra.rpki-client.org