Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3232203d3e20323636323638.roa
File:                     34352e36352e3230382e302f32322d3232203d3e20323636323638.roa (raw, json)
Hash identifier:          Drsjnz9G1edOwwmfQCnLfl3I7bZroWhc/fIitzj+8sE=
Subject key identifier:   79:F1:96:64:72:A1:DE:B0:D6:55:30:CA:5C:A1:C4:E6:67:70:8D:5C
Certificate issuer:       /CN=C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D
Certificate serial:       4B903B330C0FBC3513B635CE636B34444F17A4C9
Authority key identifier: C2:BD:84:A4:FC:DD:5A:DA:BE:29:3A:26:CC:9C:E9:BA:27:D4:63:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3232203d3e20323636323638.roa
Signing time:             Wed 20 Nov 2024 12:51:46 +0000
ROA not before:           Wed 20 Nov 2024 12:46:46 +0000
ROA not after:            Wed 19 Nov 2025 12:51:46 +0000
asID:                     266268
IP address blocks:        45.65.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:90:3b:33:0c:0f:bc:35:13:b6:35:ce:63:6b:34:44:4f:17:a4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D
        Validity
            Not Before: Nov 20 12:46:46 2024 GMT
            Not After : Nov 19 12:51:46 2025 GMT
        Subject: CN=79F1966472A1DEB0D65530CA5CA1C4E667708D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:39:62:7f:64:ea:6d:89:d1:7c:e5:65:18:
                    05:61:d0:7f:51:ed:93:43:4d:b0:97:05:34:f4:15:
                    70:ee:bd:c6:8a:66:e8:76:4b:91:e4:12:c3:f4:0d:
                    3f:76:cb:bc:b4:20:b8:84:82:c1:c8:95:85:55:e6:
                    e9:ca:64:90:5a:41:41:85:e1:fe:10:c5:08:34:d2:
                    2c:49:1d:eb:df:97:4c:9a:6d:48:94:e6:53:c0:d2:
                    28:c9:81:76:ba:cf:0e:5a:d6:09:4a:7a:97:06:8f:
                    85:2d:02:67:8b:0d:56:83:18:37:2d:30:40:80:fc:
                    a4:3d:d0:cd:f3:32:66:10:92:93:cf:f3:ca:08:43:
                    c2:7e:54:9b:cb:65:67:ed:78:16:64:f8:88:1f:70:
                    a4:5b:48:49:72:ba:54:5c:6e:3a:e8:fb:e2:ef:99:
                    c3:06:2b:cc:c9:72:48:b4:e4:e1:d3:38:7c:26:5c:
                    05:e8:00:ce:10:e5:43:ca:8b:36:12:ca:a6:73:c4:
                    f1:b0:94:77:15:4f:9a:d2:70:ba:26:d7:18:f1:fc:
                    b0:ab:d6:7a:29:22:c1:17:14:f6:c6:e7:ae:c1:3d:
                    da:db:ec:8a:f3:32:61:aa:69:3a:50:af:53:96:09:
                    44:73:d7:86:22:66:f5:7a:5d:e0:b4:ed:e0:2f:0c:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:96:64:72:A1:DE:B0:D6:55:30:CA:5C:A1:C4:E6:67:70:8D:5C
            X509v3 Authority Key Identifier:
                keyid:C2:BD:84:A4:FC:DD:5A:DA:BE:29:3A:26:CC:9C:E9:BA:27:D4:63:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3232203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:cb:c7:d0:73:36:74:d3:01:9f:46:d3:4b:9a:bd:84:4c:
         a8:76:f0:eb:f7:d0:45:e3:02:bd:93:ad:53:1f:94:5c:36:57:
         a4:d8:d4:58:15:c1:84:2e:62:c8:2c:7d:dd:c3:55:9c:9e:d5:
         15:e2:33:26:54:84:ba:fd:31:62:55:dd:52:ec:2a:26:ad:90:
         1f:8b:24:39:27:c2:e6:56:0a:d9:30:8b:20:b0:cc:b6:fb:d1:
         58:e9:ae:2b:38:03:03:3a:96:30:4d:cb:ad:20:a2:58:5e:8c:
         84:71:39:dc:fa:5f:33:48:09:0f:4e:5b:17:01:fa:e1:7f:67:
         6f:b3:c4:f5:cf:35:17:09:54:9d:51:9f:ef:e4:39:2d:13:17:
         39:88:1a:21:04:86:69:5d:ab:69:63:aa:58:e2:24:be:f4:eb:
         79:aa:2e:b2:20:ca:71:7a:2a:3c:0a:e4:7b:e1:f7:fe:91:c2:
         79:44:76:65:b9:88:ce:48:1d:81:a8:9d:a4:1a:c8:73:b8:a8:
         5c:0e:a2:f7:b1:6c:ea:d5:81:43:a9:54:23:f2:89:83:3d:de:
         2b:1d:54:c4:00:06:5b:17:74:b0:f9:9c:14:1a:b8:b2:c5:2d:
         42:2c:0b:a4:a4:ce:d0:aa:e4:67:cd:a5:f2:3f:03:3f:16:5c:
         4e:36:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:46 2024 by rpki-client on console-fra.rpki-client.org