Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
File:                     34352e3136352e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          C5AwftG5UIdM9w7DkVssbpeb1srHOIT6DStCAUng2Kk=
Subject key identifier:   CA:05:22:5A:9C:23:76:2E:D1:72:AF:C6:E9:CE:FD:44:E4:F3:6E:8F
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       63CC8B177A1D554FC3D5A73976341B37C061E593
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
Signing time:             Thu 07 Nov 2024 20:54:50 +0000
ROA not before:           Thu 07 Nov 2024 20:49:50 +0000
ROA not after:            Thu 06 Nov 2025 20:54:50 +0000
asID:                     263665
IP address blocks:        45.165.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cc:8b:17:7a:1d:55:4f:c3:d5:a7:39:76:34:1b:37:c0:61:e5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Nov  7 20:49:50 2024 GMT
            Not After : Nov  6 20:54:50 2025 GMT
        Subject: CN=CA05225A9C23762ED172AFC6E9CEFD44E4F36E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:b1:40:f6:f0:5d:a6:d9:dc:46:76:d3:82:
                    43:bc:d7:f6:75:b5:5d:17:a6:0c:be:95:a3:b4:8c:
                    0c:b0:12:2c:56:8a:3d:36:17:08:f3:7b:df:68:02:
                    ac:29:3e:45:07:5f:98:14:95:8b:5c:72:f3:aa:e4:
                    f1:b8:20:bf:24:39:22:49:37:dd:f1:36:c9:a1:8e:
                    55:0b:9e:6b:d1:2d:f5:a2:1c:b2:75:e9:dc:0d:b6:
                    05:b7:0f:44:6b:54:82:21:93:a6:ff:ae:d4:e2:23:
                    57:3d:89:ab:68:97:4c:4c:c5:5d:a7:cd:ae:b6:b8:
                    e7:89:fb:59:77:ec:25:11:bc:63:96:25:e5:4e:3f:
                    ac:99:56:29:4d:42:17:bc:0b:3d:d8:62:06:34:67:
                    59:85:68:e0:27:37:d0:fd:2f:4c:12:a4:cd:85:fa:
                    b0:8d:60:ed:71:ae:b4:40:9b:f4:76:b9:ea:76:ee:
                    56:f9:10:c7:7e:35:63:ec:c6:28:4c:b6:d5:9b:78:
                    d1:b3:e4:27:da:5e:16:2b:61:66:56:ce:ab:d3:10:
                    db:38:9b:9e:f0:c0:64:36:2e:d3:17:70:10:58:a4:
                    c6:fd:02:1f:c3:fe:b1:07:14:1b:c2:15:65:3b:14:
                    b2:fd:5a:70:c2:1c:2b:fb:ca:60:81:a7:8d:6a:3b:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:05:22:5A:9C:23:76:2E:D1:72:AF:C6:E9:CE:FD:44:E4:F3:6E:8F
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:4e:52:31:d3:12:a3:fa:6e:0d:9a:50:64:98:c5:a1:00:42:
         97:53:53:51:ef:d9:30:50:c4:8d:f8:23:a2:58:80:5a:8c:03:
         4c:5d:76:99:e6:c4:a8:a5:73:4a:cb:d9:e0:ab:59:c9:eb:5f:
         2a:6c:aa:3a:9e:0e:33:15:0d:11:33:17:c2:84:96:92:91:23:
         2c:6b:2c:bc:f2:00:d1:ae:a0:0b:d1:e1:23:2a:bb:b9:e5:ec:
         00:32:17:9e:7c:99:07:14:43:79:f5:40:fd:01:16:f0:a8:9a:
         1d:61:4c:de:f5:94:a3:1b:c3:93:e8:a0:5b:5f:d1:76:5c:ff:
         e0:6c:f9:51:38:97:b0:43:b4:e6:0f:5d:f8:93:aa:f8:a1:ee:
         27:44:20:ee:12:22:68:04:38:a0:81:7e:50:e1:d6:52:60:22:
         76:da:22:3f:0b:c9:24:c8:8d:90:9a:61:92:fd:3a:2c:40:fd:
         1a:e5:a8:bb:4d:8b:10:16:19:80:07:f3:50:bc:c4:ff:17:00:
         c0:84:6d:b1:d7:24:3d:79:b6:22:dd:b0:bc:29:e4:b6:53:9e:
         99:c1:2b:5c:30:de:2c:f8:76:1b:72:2c:32:f1:9f:98:66:06:
         4c:00:38:4b:81:bf:1a:a1:36:5b:f6:7e:7b:7b:20:d5:7e:3f:
         02:0e:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org