Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          YFZZtbIcqH98o8Pb3C9ZE9dcP+jRgPxb9KyuixT16s0=
Subject key identifier:   0C:D1:2C:A2:2B:32:37:D2:12:DF:97:A6:75:43:A9:70:DA:ED:E9:D1
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       1CD2ACCECF49DB81D7777DDB70A0D3883420BE59
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa
Signing time:             Wed 03 Apr 2024 18:32:13 +0000
ROA not before:           Wed 03 Apr 2024 18:27:13 +0000
ROA not after:            Wed 02 Apr 2025 18:32:13 +0000
asID:                     269195
IP address blocks:        45.179.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d2:ac:ce:cf:49:db:81:d7:77:7d:db:70:a0:d3:88:34:20:be:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Apr  3 18:27:13 2024 GMT
            Not After : Apr  2 18:32:13 2025 GMT
        Subject: CN=0CD12CA22B3237D212DF97A67543A970DAEDE9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:17:14:ed:b5:1e:14:b2:75:74:dc:41:50:
                    cb:eb:f9:c1:b8:6c:90:8e:d2:b2:ac:54:9c:b7:f8:
                    e7:64:aa:a6:32:d3:43:3c:4e:59:b3:ce:d1:e4:e7:
                    61:2c:e2:da:0e:d2:0e:11:da:2d:6a:0f:f6:a2:21:
                    c9:db:2c:48:27:97:ed:16:9a:23:df:5c:25:be:ba:
                    1b:46:90:67:49:b2:25:9e:42:36:89:e3:50:5b:87:
                    ed:e5:63:52:92:a5:70:71:14:2e:ad:a8:bb:d2:9e:
                    3a:37:e0:16:80:96:cd:00:2c:0b:ee:34:a9:75:6b:
                    e1:22:69:8b:37:bb:cb:db:a3:37:de:43:a3:bc:1d:
                    d5:5a:80:b4:1b:1f:9a:a4:51:46:30:ab:81:b6:8e:
                    54:ca:9a:91:13:ee:45:59:f9:d7:37:b3:92:44:43:
                    74:8c:5c:76:2b:b2:49:16:74:f3:12:48:53:9a:48:
                    0d:53:9e:9f:15:33:eb:73:2b:ee:6f:c9:fc:5c:d0:
                    a1:8f:36:87:62:9d:5a:82:6e:ce:11:77:71:ef:70:
                    4f:ff:6d:92:ed:07:00:cb:4f:32:1b:ab:45:5f:80:
                    28:4c:0d:13:4a:c4:ce:68:f3:50:aa:0b:6a:b8:45:
                    95:59:b7:f5:c0:73:75:a7:d3:94:74:ce:e5:e0:e9:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:2C:A2:2B:32:37:D2:12:DF:97:A6:75:43:A9:70:DA:ED:E9:D1
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:36:ac:5e:2d:8b:17:2e:fb:ee:36:8a:63:55:ab:28:a8:
         bb:33:96:ba:78:68:b6:c0:3d:63:27:88:1f:2f:b6:64:66:da:
         15:66:e4:d8:c4:ad:3d:a6:6f:75:90:db:4a:7a:49:61:aa:ce:
         da:9e:09:05:f2:97:b4:b5:60:d5:bc:72:46:2f:20:fe:69:29:
         3c:10:5f:52:3b:84:c5:48:8e:70:98:43:9c:e6:db:ba:5e:71:
         21:6c:64:d0:d7:71:56:38:66:c6:b6:76:55:2e:0f:ff:1d:b1:
         00:46:0d:18:20:45:08:77:2d:5e:8f:ed:80:29:90:e1:8b:31:
         8f:4c:18:10:72:be:76:41:1f:83:95:19:66:3f:bc:aa:4a:7f:
         a6:b1:f5:eb:51:d1:06:65:a7:7d:98:6c:3a:01:c7:8a:9c:2e:
         d9:46:59:11:d5:3d:8e:b8:9c:f9:9b:0c:aa:f8:b9:35:95:ef:
         59:ea:55:72:a0:07:91:b4:91:54:b8:26:07:63:46:ae:0e:73:
         84:ac:f5:d2:bc:25:13:a2:cb:de:df:5b:a5:bf:16:aa:5f:2d:
         c2:83:48:6a:21:39:1e:d4:4f:00:53:9b:da:91:a5:e9:9c:d6:
         59:3b:51:ae:e1:b6:18:a3:60:9a:73:94:45:49:e8:a5:a5:d5:
         e7:5d:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org