Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/34352e3136392e3136322e302f32342d3234203d3e20323638313738.roa
File:                     34352e3136392e3136322e302f32342d3234203d3e20323638313738.roa (raw, json)
Hash identifier:          /ivhRdE7g0xxJJEH+nvKxqQH9eOAhPKRlTZjcYfa1OQ=
Subject key identifier:   D9:B6:E8:71:75:6F:19:0B:E8:9B:1C:CE:CB:16:4F:82:D4:76:C4:14
Certificate issuer:       /CN=DD03EB79FF5CF57286D6113E3E194B78A347552C
Certificate serial:       1931E6663A8BEA6165561B0E3DF80BEA230741ED
Authority key identifier: DD:03:EB:79:FF:5C:F5:72:86:D6:11:3E:3E:19:4B:78:A3:47:55:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD03EB79FF5CF57286D6113E3E194B78A347552C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/34352e3136392e3136322e302f32342d3234203d3e20323638313738.roa
Signing time:             Tue 10 Sep 2024 11:17:15 +0000
ROA not before:           Tue 10 Sep 2024 11:12:15 +0000
ROA not after:            Tue 09 Sep 2025 11:17:15 +0000
asID:                     268178
IP address blocks:        45.169.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/DD03EB79FF5CF57286D6113E3E194B78A347552C.crl
                          rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/DD03EB79FF5CF57286D6113E3E194B78A347552C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD03EB79FF5CF57286D6113E3E194B78A347552C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:31:e6:66:3a:8b:ea:61:65:56:1b:0e:3d:f8:0b:ea:23:07:41:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD03EB79FF5CF57286D6113E3E194B78A347552C
        Validity
            Not Before: Sep 10 11:12:15 2024 GMT
            Not After : Sep  9 11:17:15 2025 GMT
        Subject: CN=D9B6E871756F190BE89B1CCECB164F82D476C414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:0f:1b:b0:ae:4c:72:ad:d6:4f:b4:55:e5:
                    3d:d5:98:d6:f9:50:ad:ef:e9:e6:8e:63:10:b8:b3:
                    10:68:c7:89:eb:c7:15:6c:49:c0:44:ad:84:b3:80:
                    d4:e0:06:b4:57:28:b2:45:d5:2c:48:e9:bb:4e:fd:
                    72:8f:b8:0b:6c:92:c0:7c:95:82:b5:4d:1f:5f:4d:
                    70:93:ce:6a:6f:fb:9e:8c:62:f2:3e:e5:51:00:db:
                    00:15:94:bd:92:a9:f6:50:78:21:5f:da:76:01:9a:
                    2d:33:32:be:82:e0:eb:51:c2:76:e3:02:19:66:ff:
                    cb:f9:80:e9:d7:09:2e:9d:00:79:a1:9c:87:66:f6:
                    f0:52:29:21:81:ba:24:45:63:c5:19:fc:e1:dd:ac:
                    19:92:33:8c:43:f7:9c:12:05:31:80:ad:7a:54:bd:
                    bf:72:cb:d7:1e:6f:a6:59:e9:cc:ab:1b:d8:0a:fe:
                    7e:c8:01:d4:eb:6f:9e:f9:8f:4e:37:7c:6c:32:c4:
                    c9:22:1d:9b:34:6c:6e:88:db:9d:bf:aa:a9:4e:cc:
                    93:b8:0d:bd:76:d6:39:4a:45:29:02:79:bd:10:59:
                    52:b2:b1:ea:75:36:f4:5d:57:22:36:3d:78:e7:fc:
                    d4:47:71:88:a3:a0:7a:eb:36:da:de:03:fa:61:ac:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B6:E8:71:75:6F:19:0B:E8:9B:1C:CE:CB:16:4F:82:D4:76:C4:14
            X509v3 Authority Key Identifier:
                keyid:DD:03:EB:79:FF:5C:F5:72:86:D6:11:3E:3E:19:4B:78:A3:47:55:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/DD03EB79FF5CF57286D6113E3E194B78A347552C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD03EB79FF5CF57286D6113E3E194B78A347552C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/34352e3136392e3136322e302f32342d3234203d3e20323638313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:01:4f:d8:69:38:d6:44:16:e7:ec:ff:f2:dd:42:5f:db:9e:
         3a:9c:10:74:24:89:f7:ae:08:8c:ba:bc:c9:28:95:fd:99:a7:
         6c:c3:f7:fe:c8:c6:59:3b:10:71:3c:f1:0a:45:84:25:3a:c2:
         22:4a:bd:56:d7:88:8b:53:88:8a:de:70:12:3a:3a:63:44:83:
         14:4a:47:e6:35:2c:46:45:02:20:ad:c3:c0:56:4d:58:84:ec:
         bb:e1:7f:56:0f:e1:86:84:36:4d:57:b9:39:eb:27:47:9c:4c:
         2c:64:0f:2c:44:31:a1:72:02:60:55:c9:06:db:dc:a7:dd:c6:
         58:4c:3b:04:19:34:81:10:ab:9b:73:46:82:1b:73:4e:b8:cb:
         75:b7:bf:7e:85:a9:3d:49:09:9a:c6:21:a5:03:fd:03:d3:65:
         ce:3c:8e:74:83:3a:12:9e:4e:2d:b7:79:9b:04:12:83:82:04:
         35:18:27:9f:67:ce:6d:97:bd:33:a6:02:bd:87:9e:13:a0:e2:
         53:60:20:a1:f9:a2:ba:5b:13:62:90:d5:42:b8:e8:95:90:55:
         53:f3:3d:a0:6c:97:93:e6:40:34:cc:86:40:32:6c:b7:60:30:
         64:f4:3c:12:f1:63:10:dc:c9:18:7e:37:6e:17:b5:85:54:3d:
         af:c4:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:12 2024 by rpki-client on console-ams.rpki-client.org