Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa
File:                     34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (raw, json)
Hash identifier:          bTuU09t8y/Q3zrgT8MZMcjtYUSg3XQnDH1OkOrXrZ40=
Subject key identifier:   DC:60:D8:7C:EF:35:06:4E:CE:8A:CF:80:FD:B3:9A:87:4F:CA:37:B3
Certificate issuer:       /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Certificate serial:       2087FD52CB74F7274CDE32C4D91827D4AFE0427F
Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa
Signing time:             Wed 03 Apr 2024 20:01:13 +0000
ROA not before:           Wed 03 Apr 2024 19:56:13 +0000
ROA not after:            Wed 02 Apr 2025 20:01:13 +0000
asID:                     268824
IP address blocks:        45.172.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
                          rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:87:fd:52:cb:74:f7:27:4c:de:32:c4:d9:18:27:d4:af:e0:42:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
        Validity
            Not Before: Apr  3 19:56:13 2024 GMT
            Not After : Apr  2 20:01:13 2025 GMT
        Subject: CN=DC60D87CEF35064ECE8ACF80FDB39A874FCA37B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:11:5a:e2:a8:06:a3:b4:85:e3:f0:59:af:
                    5b:ce:ee:5f:c9:b4:75:fd:a9:b7:e9:9d:cd:5d:c1:
                    2a:3e:ec:23:bf:bd:83:76:47:55:58:4a:61:62:8c:
                    bd:83:52:1b:e3:65:35:fc:cb:aa:58:af:a2:42:2c:
                    1f:1b:00:79:9b:7a:a2:ca:f1:ae:c5:13:f0:79:d6:
                    65:29:06:57:65:f2:6c:71:a5:e7:35:9b:17:43:32:
                    45:53:df:3d:ab:f4:7c:aa:c6:3a:d7:cd:3d:db:ab:
                    1b:02:6c:22:f8:c4:7c:e5:ad:f3:14:40:f6:5d:fb:
                    1b:0b:f4:ac:6d:0e:4c:05:04:3c:be:09:c4:83:86:
                    57:5e:ad:7c:47:44:4e:36:2f:91:2a:f9:17:bf:25:
                    8f:58:6e:7e:9d:52:72:75:88:83:21:1e:dc:61:01:
                    09:58:6b:ce:28:8c:5c:26:8c:4b:b2:d7:9f:11:d0:
                    54:0d:23:3c:c5:7d:40:10:60:73:80:05:11:f4:0c:
                    b9:e5:2d:8a:5a:03:35:0d:3b:5d:38:a5:1b:9a:5a:
                    79:65:d0:52:ba:9a:01:c9:e2:29:4e:e1:e1:67:69:
                    bc:0d:71:10:c7:9b:24:87:23:e2:aa:86:ea:82:d2:
                    a0:cb:99:93:91:d7:d3:21:ef:eb:2c:40:37:89:79:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:60:D8:7C:EF:35:06:4E:CE:8A:CF:80:FD:B3:9A:87:4F:CA:37:B3
            X509v3 Authority Key Identifier:
                keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:76:c9:43:f1:45:b6:15:8f:ca:63:4f:2d:42:ca:82:25:
         1a:22:73:5b:70:e4:b2:4d:6d:ae:31:c6:94:3b:ac:2f:47:e3:
         de:e1:9b:43:0b:66:71:98:ca:fb:c2:93:33:8e:8b:0b:6e:a4:
         d7:2c:ed:8a:43:fe:ca:f8:7c:e8:3e:78:a1:30:02:15:05:c9:
         2a:8a:24:a8:74:f1:97:d0:d3:c4:56:50:a2:b7:c2:39:ee:ec:
         d8:59:d6:d5:04:6c:83:32:07:52:6d:30:a3:d8:bb:04:16:27:
         b3:8e:dd:8a:d5:61:17:bc:55:85:50:af:3f:9e:45:a3:e9:40:
         80:0b:e0:f8:e7:f8:bf:f2:c2:88:0f:fa:71:aa:b2:f4:5a:39:
         ac:f9:37:4d:72:e7:08:e8:2f:f7:e8:6c:48:d3:ab:44:f1:3b:
         f6:c2:87:84:c4:0e:3c:ce:9f:11:41:ba:d0:fb:4a:bc:7e:c7:
         bf:92:c3:32:cf:18:8d:d0:40:f4:10:94:fb:74:71:5f:c9:3e:
         11:ac:b5:3e:01:65:1c:85:92:15:ca:00:68:42:43:8d:eb:a2:
         ff:1b:d7:b1:6c:5e:12:bd:00:da:7a:bd:62:fa:e6:4d:c7:8a:
         92:28:9f:84:06:8c:fe:78:4d:30:a4:77:95:7b:3e:95:b1:67:
         27:52:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:34 2024 by rpki-client on console-ams.rpki-client.org