Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          QIVXAmQgCg/90OWcgnQzQHjdi5JjorfxFoQEb+PhnUo=
Subject key identifier:   0D:E2:76:C8:6E:15:4E:F2:09:2E:0F:71:D5:33:C3:12:5F:F0:E7:E5
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       1F5B0A0E60677D1130C126413A9FFF06F02372B1
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa
Signing time:             Wed 03 Apr 2024 18:32:12 +0000
ROA not before:           Wed 03 Apr 2024 18:27:12 +0000
ROA not after:            Wed 02 Apr 2025 18:32:12 +0000
asID:                     269195
IP address blocks:        45.179.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5b:0a:0e:60:67:7d:11:30:c1:26:41:3a:9f:ff:06:f0:23:72:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Apr  3 18:27:12 2024 GMT
            Not After : Apr  2 18:32:12 2025 GMT
        Subject: CN=0DE276C86E154EF2092E0F71D533C3125FF0E7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:64:fa:62:fc:b8:07:47:c8:a2:ba:05:8e:
                    70:75:02:3d:b1:08:69:8a:99:6d:c0:10:41:48:77:
                    bb:47:99:b4:8c:19:66:c5:9a:c5:ac:93:18:16:6d:
                    5d:a5:dd:fa:b4:c9:d0:69:90:ec:ad:47:95:c4:54:
                    df:11:32:93:7c:87:98:e2:01:f3:25:5d:db:4a:55:
                    cd:d5:b4:d7:e3:54:5d:77:bd:4f:7d:d2:bf:37:3c:
                    18:94:3e:85:f0:a8:cf:ed:6a:d6:f0:b9:3e:fa:05:
                    23:27:23:22:a3:4b:50:83:4c:7b:ac:5c:16:21:45:
                    26:51:62:17:9c:38:70:1d:43:b3:89:31:11:4f:1d:
                    24:11:cb:f9:64:3c:b6:98:6a:fa:fc:52:cc:16:3a:
                    db:6b:11:82:f5:7b:c2:f3:a5:6f:00:59:d1:03:95:
                    7c:9d:a9:cd:a0:d6:0a:45:c8:bf:6c:92:9d:93:e6:
                    34:bb:1e:9c:53:3c:03:9c:8a:56:9e:80:ff:47:aa:
                    95:c1:bc:b5:61:d1:89:65:b2:22:91:a5:dc:42:f2:
                    01:c1:aa:a5:6e:f1:25:bf:cd:7e:95:9c:3e:d0:01:
                    10:b2:c8:f3:14:f3:13:1c:ba:d7:f3:92:52:b5:2a:
                    29:ea:fb:19:ce:2f:1f:90:38:b7:8f:88:dc:89:a5:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E2:76:C8:6E:15:4E:F2:09:2E:0F:71:D5:33:C3:12:5F:F0:E7:E5
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:97:e7:11:3e:18:7e:63:ad:5d:2f:50:b8:f1:a0:58:b6:11:
         65:95:5f:e2:c1:25:cf:15:b9:1d:db:ff:00:8d:04:98:a1:15:
         60:e2:5d:a5:75:19:c7:8b:75:5e:3f:00:b9:99:53:c0:80:ab:
         9e:3a:33:13:f5:d6:db:de:2e:a2:66:c0:8e:87:50:f0:0c:a1:
         b4:78:16:c6:02:02:65:95:af:65:5e:4c:8f:db:5c:1d:ab:3f:
         5d:0e:6d:14:48:c3:42:bf:10:e2:bc:03:78:fb:99:57:ce:76:
         f4:74:ef:ea:48:25:10:4f:6f:3d:32:95:a6:60:e8:2a:de:18:
         b4:1b:f2:55:43:3d:d2:67:70:70:e9:9e:12:c6:80:41:a1:68:
         ea:6f:c9:c5:b1:5a:1d:a6:7a:db:98:0a:7c:39:94:e9:52:3a:
         7c:35:cb:d9:cb:41:ee:ed:fd:48:8c:90:59:5f:3e:42:64:28:
         cb:38:99:a9:3b:95:ff:4f:d5:1a:df:af:04:e7:5e:ae:da:ae:
         3f:cb:30:7a:a5:1f:0b:02:05:48:07:7e:04:a0:ee:1c:08:ef:
         c0:a2:1c:28:4c:55:fe:c3:42:fa:f4:d8:a6:9e:f3:b3:a1:9d:
         5f:46:57:41:cc:61:ed:c6:75:25:a8:aa:d4:18:f5:c8:3c:96:
         9c:a1:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org