Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa
File:                     34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa (raw, json)
Hash identifier:          rYqvnjm9W4l+3MRK9xePKhddcpFpn55WfKdeiIGNhN4=
Subject key identifier:   AA:85:69:0D:98:19:54:34:AD:13:B7:5D:36:E8:41:9B:9D:71:14:CA
Certificate issuer:       /CN=0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6
Certificate serial:       20D738E52C017D2245D78CEB1BA90E0D2A93C016
Authority key identifier: 0C:97:1C:51:E8:3D:2A:1D:AD:7F:20:CB:F7:08:84:CA:50:8D:AA:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa
Signing time:             Tue 09 Jul 2024 21:39:51 +0000
ROA not before:           Tue 09 Jul 2024 21:34:51 +0000
ROA not after:            Tue 08 Jul 2025 21:39:51 +0000
asID:                     268909
IP address blocks:        45.175.200.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.crl
                          rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d7:38:e5:2c:01:7d:22:45:d7:8c:eb:1b:a9:0e:0d:2a:93:c0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6
        Validity
            Not Before: Jul  9 21:34:51 2024 GMT
            Not After : Jul  8 21:39:51 2025 GMT
        Subject: CN=AA85690D98195434AD13B75D36E8419B9D7114CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:14:05:ef:d3:5d:f8:08:48:90:53:ad:a1:
                    60:a6:21:a9:bf:3b:58:79:d6:86:c9:59:96:44:c8:
                    27:00:86:a7:e7:13:26:cf:61:3d:33:86:4d:4c:6b:
                    9d:a6:9f:25:ee:c7:63:7c:0b:5b:57:32:86:21:a9:
                    ef:93:9a:2e:3a:c7:7a:6c:20:e3:c9:1b:41:6d:cf:
                    70:d6:91:3a:de:71:0c:68:af:d4:f2:a5:b8:26:ee:
                    ba:65:6f:e3:73:31:43:b8:05:10:02:29:50:a9:33:
                    99:bc:18:b5:59:51:ae:5e:a9:b0:8e:86:e6:81:54:
                    cf:6a:b4:7a:68:a8:ab:70:ab:56:0d:d7:48:6d:e5:
                    3b:2c:3b:17:42:db:44:b1:a8:22:2b:3c:0f:fb:cc:
                    19:11:0d:ce:9e:c5:ed:75:a6:9b:68:6b:f7:14:e9:
                    32:ed:5c:a1:91:4f:c5:35:3c:9b:26:6f:26:22:50:
                    d0:95:85:8d:0e:74:f6:b0:76:83:0f:e7:22:d3:7f:
                    cc:63:9a:0c:29:e2:32:e6:5d:0f:4d:56:98:d9:4f:
                    7c:cd:56:78:4a:67:89:e3:d7:33:13:d2:d5:78:cf:
                    ec:22:08:b8:87:74:e5:87:90:ef:67:38:f6:02:7c:
                    6a:bd:26:f6:c5:ea:ad:bd:18:3e:9c:45:6b:a8:a3:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:85:69:0D:98:19:54:34:AD:13:B7:5D:36:E8:41:9B:9D:71:14:CA
            X509v3 Authority Key Identifier:
                keyid:0C:97:1C:51:E8:3D:2A:1D:AD:7F:20:CB:F7:08:84:CA:50:8D:AA:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:be:78:46:b4:94:e9:7d:de:67:d4:7e:32:ad:e2:f9:4b:53:
         08:a0:79:a1:36:a4:0c:40:d7:3c:07:00:b1:d3:8e:77:c7:5b:
         c0:98:7b:87:82:40:52:fa:cc:e9:a7:57:cc:4f:15:7a:45:ea:
         66:ac:3e:e3:db:60:b8:c9:43:0b:cf:68:77:eb:f0:92:82:ab:
         30:03:fa:05:b9:c3:09:89:3a:7f:56:04:69:2b:5b:70:40:30:
         61:b2:07:97:a8:38:1e:31:81:9a:2f:fd:63:29:d5:ec:bd:9f:
         53:80:27:1c:44:f8:80:d0:65:86:c6:11:a9:b3:45:1f:cb:c5:
         4c:16:a6:dc:06:f4:3a:75:32:ee:00:a3:e0:e1:e7:ff:37:43:
         66:52:5c:f1:12:ec:58:30:cb:4d:19:bb:64:f4:27:46:5d:16:
         52:2f:b9:6e:71:3e:19:ec:70:12:4b:18:f2:3c:16:33:d6:75:
         42:8f:10:76:e5:3e:5f:59:96:01:6b:15:f9:36:9a:d6:85:ff:
         48:9f:ba:d7:ff:ea:50:5a:31:6a:4c:2b:f0:86:e2:54:8b:cd:
         5a:2b:5f:31:83:d3:32:42:6b:e1:db:b9:64:97:66:62:e7:4d:
         83:bc:35:8d:9c:8c:ce:96:df:17:8b:ed:7e:6c:66:1a:12:44:
         68:50:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org