Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/1/34352e3137342e33362e302f32322d3234203d3e20323638383338.roa
File:                     34352e3137342e33362e302f32322d3234203d3e20323638383338.roa (raw, json)
Hash identifier:          cd+hBmztAHVW4b4Qn/d5FxEHg1GDBAt2fBhHCqcqa7c=
Subject key identifier:   B7:2F:57:68:F2:AF:1D:49:DA:BB:F6:C9:09:3A:89:14:32:2C:A1:08
Certificate issuer:       /CN=1DBE485D1E6FA6881A3AC2391B3FC71BDF9F99B1
Certificate serial:       4466B9672C742F3B597C770D08C8961B6DCF952C
Authority key identifier: 1D:BE:48:5D:1E:6F:A6:88:1A:3A:C2:39:1B:3F:C7:1B:DF:9F:99:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DBE485D1E6FA6881A3AC2391B3FC71BDF9F99B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/1/34352e3137342e33362e302f32322d3234203d3e20323638383338.roa
Signing time:             Thu 04 Apr 2024 21:07:00 +0000
ROA not before:           Thu 04 Apr 2024 21:02:00 +0000
ROA not after:            Thu 03 Apr 2025 21:07:00 +0000
asID:                     268838
IP address blocks:        45.174.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/1/1DBE485D1E6FA6881A3AC2391B3FC71BDF9F99B1.crl
                          rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/1/1DBE485D1E6FA6881A3AC2391B3FC71BDF9F99B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DBE485D1E6FA6881A3AC2391B3FC71BDF9F99B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:66:b9:67:2c:74:2f:3b:59:7c:77:0d:08:c8:96:1b:6d:cf:95:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DBE485D1E6FA6881A3AC2391B3FC71BDF9F99B1
        Validity
            Not Before: Apr  4 21:02:00 2024 GMT
            Not After : Apr  3 21:07:00 2025 GMT
        Subject: CN=B72F5768F2AF1D49DABBF6C9093A8914322CA108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:bd:0d:ed:f4:f3:bf:f1:72:7e:9a:d9:12:
                    bb:19:30:29:f9:64:4d:3d:4e:a5:5f:9b:5a:3c:44:
                    9b:ee:42:62:7f:7c:7c:de:d9:2f:48:6f:63:cb:12:
                    49:89:b6:b7:47:a3:b1:93:25:4c:0e:84:9e:d5:a8:
                    65:cb:1d:68:27:a2:ba:ef:b5:33:7c:9e:75:d0:c7:
                    7c:06:98:57:2e:c6:30:bc:a3:53:08:e0:05:c7:04:
                    a4:78:b5:14:71:79:64:b4:af:53:07:44:08:1f:7b:
                    7e:45:0f:2f:22:00:d3:6d:a0:b3:ce:11:14:6a:4d:
                    f1:0e:97:61:d0:2c:e6:07:81:df:ef:ab:bd:91:19:
                    21:c0:43:8c:2a:f3:3d:20:a0:83:ce:9a:a2:db:0e:
                    ff:4c:88:77:b1:ac:f1:24:0c:48:22:2a:f3:9a:10:
                    e6:09:3f:73:61:f3:64:23:ac:24:98:1b:80:2f:bd:
                    0d:2f:79:63:79:76:ae:ea:7f:07:a6:29:df:b7:14:
                    00:95:4a:25:6a:21:00:48:44:7f:f1:b0:d0:be:d6:
                    98:58:cb:fe:f3:eb:8c:59:69:5d:07:91:60:d3:97:
                    f1:f6:34:85:30:0b:d4:fd:ee:de:c7:53:da:25:d9:
                    20:b1:84:17:13:d0:7d:d1:0e:56:c7:0b:a7:a4:74:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2F:57:68:F2:AF:1D:49:DA:BB:F6:C9:09:3A:89:14:32:2C:A1:08
            X509v3 Authority Key Identifier:
                keyid:1D:BE:48:5D:1E:6F:A6:88:1A:3A:C2:39:1B:3F:C7:1B:DF:9F:99:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/1/1DBE485D1E6FA6881A3AC2391B3FC71BDF9F99B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DBE485D1E6FA6881A3AC2391B3FC71BDF9F99B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/1/34352e3137342e33362e302f32322d3234203d3e20323638383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:47:7c:7b:9e:a2:9b:e8:45:64:eb:f0:5e:aa:52:f2:a2:0f:
         5c:5b:d4:57:aa:ac:26:41:c7:46:28:85:85:43:69:cd:3c:56:
         57:ee:64:4f:37:03:9f:02:e3:7e:57:48:40:4c:c8:4e:12:f5:
         26:6e:64:88:81:ab:5c:d8:05:78:bd:b4:e7:89:4e:e2:89:9d:
         a6:d4:e4:46:5d:88:ea:8c:bd:8e:4c:b6:c4:9c:58:b7:15:4b:
         1a:b7:bc:93:93:0d:dd:b9:dd:a2:d8:5e:a9:b3:47:9f:f4:a1:
         d4:c0:dc:de:23:d8:a1:52:dd:d6:80:52:24:79:1e:98:77:c5:
         94:db:00:f3:6d:a1:8d:03:1f:fc:ac:02:96:63:1f:fc:fb:da:
         95:aa:dc:7a:b8:db:8f:3d:bc:bc:ec:c5:ef:af:ea:54:09:68:
         97:0c:34:b7:86:38:cf:10:9f:ac:24:27:4e:70:5f:0a:8c:54:
         ad:77:40:c5:d8:d6:62:a2:a4:33:17:dd:ff:6e:0e:25:54:aa:
         e9:32:f1:5a:01:bb:d3:89:3b:1d:cd:d4:f5:61:d8:60:8d:93:
         2f:a4:21:18:4c:4b:cc:e7:3c:50:d0:50:02:04:16:79:2d:49:
         8a:c4:e9:44:83:24:89:5e:ae:8f:14:2d:a0:b7:5d:b8:a2:b6:
         63:38:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:47 2024 by rpki-client on console-fra.rpki-client.org