Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/34352e362e3234322e302f32332d3332203d3e20323733353237.roa
File:                     34352e362e3234322e302f32332d3332203d3e20323733353237.roa (raw, json)
Hash identifier:          ZXcGqU6pDmGsbscl/wuu0ngbgsCkIw+KknRNPr8nvik=
Subject key identifier:   33:23:3B:2B:8A:92:4B:05:8C:79:0B:5E:23:0B:A1:C9:CC:87:38:9C
Certificate issuer:       /CN=319A2EB3BED8FE75A1290CC392DA21B269F2DF8A
Certificate serial:       1BB344C7D41B324F746A1677B5E80A132DCF6EF8
Authority key identifier: 31:9A:2E:B3:BE:D8:FE:75:A1:29:0C:C3:92:DA:21:B2:69:F2:DF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/34352e362e3234322e302f32332d3332203d3e20323733353237.roa
Signing time:             Tue 27 Aug 2024 20:20:07 +0000
ROA not before:           Tue 27 Aug 2024 20:15:07 +0000
ROA not after:            Tue 26 Aug 2025 20:20:07 +0000
asID:                     273527
IP address blocks:        45.6.242.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.crl
                          rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b3:44:c7:d4:1b:32:4f:74:6a:16:77:b5:e8:0a:13:2d:cf:6e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319A2EB3BED8FE75A1290CC392DA21B269F2DF8A
        Validity
            Not Before: Aug 27 20:15:07 2024 GMT
            Not After : Aug 26 20:20:07 2025 GMT
        Subject: CN=33233B2B8A924B058C790B5E230BA1C9CC87389C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:f7:2e:11:70:09:9e:eb:bf:41:2e:3b:95:
                    87:27:21:e5:b0:89:2a:d5:b8:62:b6:03:f0:1d:8c:
                    9a:c8:ef:68:00:2b:3d:eb:ec:a4:0a:6f:e2:44:b2:
                    b7:8b:82:9e:4f:07:60:34:29:2c:c9:e8:9e:0d:17:
                    4c:88:bf:13:38:eb:93:28:1e:22:c3:77:c6:0d:e4:
                    60:00:b5:d7:f0:59:14:2d:be:d0:7f:27:fc:81:aa:
                    ab:bf:3d:af:e7:81:65:bd:ee:af:93:fd:b0:56:5d:
                    40:4d:c0:d9:8b:b7:bb:ef:0a:0f:3a:ff:73:82:db:
                    0f:7d:70:26:f9:7c:7e:ba:1e:7a:e0:6d:f6:c9:76:
                    26:1a:f4:2e:6e:99:fd:f7:16:9c:c2:c5:a7:04:77:
                    c2:24:10:b0:92:57:be:6e:35:98:f4:88:76:89:39:
                    1c:03:a2:0f:0c:a6:90:c3:8e:55:39:e6:fd:42:0b:
                    e0:20:dd:8f:d1:91:f2:4f:ee:18:ba:87:a8:e8:97:
                    4d:27:6c:62:2a:19:84:dc:10:95:17:0a:25:10:75:
                    b9:1a:db:30:42:8b:69:03:51:eb:fc:1b:18:bd:a1:
                    43:64:ed:22:c7:72:85:10:00:4e:ac:f3:0f:f5:71:
                    6c:55:cb:e3:fe:fc:a7:70:1d:e7:75:c3:aa:f4:a6:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:3B:2B:8A:92:4B:05:8C:79:0B:5E:23:0B:A1:C9:CC:87:38:9C
            X509v3 Authority Key Identifier:
                keyid:31:9A:2E:B3:BE:D8:FE:75:A1:29:0C:C3:92:DA:21:B2:69:F2:DF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/34352e362e3234322e302f32332d3332203d3e20323733353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:c8:d0:6e:fc:37:4c:9b:dd:b9:0f:9a:5b:6e:1e:da:4b:
         54:b1:d7:7b:ba:58:00:27:e3:94:63:85:5d:4f:9a:94:48:78:
         da:57:97:cf:00:0d:76:b9:75:17:3d:39:0f:f1:b0:13:2c:36:
         12:ef:cc:de:90:3b:e8:12:a6:93:ae:53:e2:72:ec:d6:da:a9:
         72:a8:5a:9d:33:54:48:b1:11:8c:30:bb:7e:7b:ca:f1:1d:7f:
         11:c0:6e:53:bd:59:33:df:e3:88:f4:ea:0a:7c:59:e8:8b:31:
         ab:d8:59:a7:ae:4c:d9:a1:aa:cf:7d:4b:fd:37:be:68:06:8b:
         04:09:95:91:9c:d9:61:2a:a3:d7:61:67:71:87:3d:4d:55:94:
         93:cb:54:e0:73:e3:13:80:d6:c6:9f:58:d3:86:22:df:ef:c3:
         3b:13:27:12:e5:92:cb:4d:12:0d:9a:1f:89:df:3d:2a:ca:58:
         22:c6:c9:84:5d:a3:f9:76:72:cf:0d:6c:58:c2:43:24:cc:32:
         81:c5:86:15:e3:c7:b5:70:66:1f:96:5d:15:94:af:63:9a:2b:
         33:45:48:94:47:10:99:8f:6c:bf:5b:c2:de:c4:01:3a:bf:2d:
         51:b4:75:ab:b7:03:a5:5e:12:6e:d0:04:dd:63:63:b2:0e:e6:
         37:a0:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:43:49 2024 by rpki-client on console-fra.rpki-client.org