Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa
File:                     34352e3136352e32302e302f32322d3232203d3e20323638363532.roa (raw, json)
Hash identifier:          I8pzMJfW0fDY3qoj5pOIkQ0sNEPHaO5mt9ty2zXzBLM=
Subject key identifier:   64:49:EF:56:9C:B6:0D:89:0B:B1:35:92:0C:54:44:5D:06:6A:CE:BF
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       05AD9C8C342811BBDDD55264B46DD69AF63CD0
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa
Signing time:             Thu 07 Nov 2024 20:54:50 +0000
ROA not before:           Thu 07 Nov 2024 20:49:50 +0000
ROA not after:            Thu 06 Nov 2025 20:54:50 +0000
asID:                     268652
IP address blocks:        45.165.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ad:9c:8c:34:28:11:bb:dd:d5:52:64:b4:6d:d6:9a:f6:3c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Nov  7 20:49:50 2024 GMT
            Not After : Nov  6 20:54:50 2025 GMT
        Subject: CN=6449EF569CB60D890BB135920C54445D066ACEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:11:89:12:91:f5:cf:38:23:38:51:eb:89:
                    37:f7:8d:b4:6c:d1:a4:6e:d6:4e:8f:e8:51:d8:7b:
                    72:79:09:7e:eb:9c:53:77:ad:e8:c7:5f:60:fc:ed:
                    de:f1:6f:1b:dc:5e:6c:a6:4f:3d:46:f2:b0:9b:b2:
                    c2:24:52:47:e4:3b:c7:5e:d7:9b:9b:da:74:a5:af:
                    d9:35:37:d3:3c:10:93:52:1e:f1:60:a1:0c:d2:04:
                    eb:34:70:b8:08:0a:3a:92:90:42:6d:d4:45:a5:de:
                    d9:e6:dd:c2:8f:14:10:c4:bc:54:fd:58:b7:c4:d5:
                    3f:57:fc:19:c7:af:3e:ee:46:e9:49:b6:63:c4:b5:
                    bc:35:c4:c5:a0:74:b3:87:27:c6:1d:79:bd:9f:a7:
                    89:67:9e:3e:e9:29:bd:b9:83:77:ed:98:a3:2b:8f:
                    e0:f5:62:10:34:71:f7:fe:b9:55:1a:5e:eb:5f:fb:
                    a8:6e:12:48:84:5b:2c:3b:15:05:ff:a1:cd:09:01:
                    b8:ae:74:1b:34:e6:4d:1b:32:37:bd:87:39:eb:1a:
                    23:8e:d3:85:26:1b:4b:22:28:86:2b:98:ad:63:bd:
                    bb:5d:35:c5:dc:52:60:c6:6b:98:3d:7f:1f:13:5d:
                    a1:ad:61:2c:4a:18:5a:f4:5d:d3:a2:21:dd:40:d6:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:49:EF:56:9C:B6:0D:89:0B:B1:35:92:0C:54:44:5D:06:6A:CE:BF
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:2d:af:f3:57:b7:5d:3e:69:e8:cc:9c:ab:a9:85:e6:b9:f6:
         b9:84:9f:f8:ee:20:e9:85:6a:7c:c1:98:8c:1c:13:a1:a8:51:
         4a:15:91:42:08:0b:ba:c5:b3:60:0b:64:3a:01:a6:c3:34:56:
         f3:cb:35:5d:79:5a:d1:52:ea:71:94:12:d3:b4:2f:a2:d3:04:
         84:8d:90:4e:71:3c:e2:1c:49:e1:79:37:88:fa:06:4b:36:b9:
         f7:e0:ec:7b:08:c3:cf:8b:61:be:1b:bc:cd:70:4b:37:ef:39:
         83:15:2b:b0:a9:ff:07:62:8f:c4:ec:d2:14:53:62:e4:51:c0:
         7c:22:e4:d3:aa:eb:da:ee:91:13:0a:e8:80:8a:27:f5:11:e4:
         a1:93:02:c3:15:28:9b:3d:87:b5:73:6b:4c:3b:97:2a:69:39:
         6c:e9:11:49:5d:46:27:e8:d8:22:59:1b:43:aa:50:9d:fe:7c:
         c1:8d:6d:8b:5d:e3:26:a2:1f:8b:60:49:00:a4:1f:5e:55:6b:
         8b:53:8a:b6:1f:e1:fc:69:49:3a:4d:bd:b0:ec:c2:c9:0d:0f:
         6c:47:c6:76:4e:b3:ff:4f:79:37:00:14:e1:58:1c:ce:d1:f1:
         bb:63:6a:d1:3c:8d:55:c8:d6:b5:e0:37:3c:2f:16:69:cd:33:
         f3:2b:64:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:35 2024 by rpki-client on console-ams.rpki-client.org