Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33382e302f32342d3234203d3e20323731363939.roa
File:                     34352e3232382e33382e302f32342d3234203d3e20323731363939.roa (raw, json)
Hash identifier:          Hag9lGZqBhsAAq6RcGoBs1ECrnY5ekc+IP38wwvKcJg=
Subject key identifier:   58:9B:AF:F1:93:C4:41:8B:33:60:90:B5:25:C3:75:A0:C6:57:C7:C7
Certificate issuer:       /CN=1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904
Certificate serial:       46944B859054A50D51DA3364467ED331069B013C
Authority key identifier: 1C:96:AC:4B:FA:7D:CA:99:F0:77:B9:FC:C1:2E:E7:0E:72:C8:69:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33382e302f32342d3234203d3e20323731363939.roa
Signing time:             Tue 19 Nov 2024 18:31:21 +0000
ROA not before:           Tue 19 Nov 2024 18:26:21 +0000
ROA not after:            Tue 18 Nov 2025 18:31:21 +0000
asID:                     271699
IP address blocks:        45.228.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:94:4b:85:90:54:a5:0d:51:da:33:64:46:7e:d3:31:06:9b:01:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904
        Validity
            Not Before: Nov 19 18:26:21 2024 GMT
            Not After : Nov 18 18:31:21 2025 GMT
        Subject: CN=589BAFF193C4418B336090B525C375A0C657C7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:75:f5:16:99:1f:bf:1a:8d:43:2c:61:28:
                    17:f7:97:fe:d2:40:17:9d:98:72:c4:b4:45:2b:dd:
                    c3:8c:6f:1f:d2:c3:da:46:7d:b8:86:35:55:07:c4:
                    a1:f6:17:ca:a0:02:a7:c8:43:77:e1:96:dd:46:ec:
                    da:c2:10:af:bd:be:d3:2d:12:ee:17:e2:98:56:af:
                    d9:7a:de:66:8b:2a:ea:de:ab:0b:6e:19:f8:ab:e6:
                    e4:4a:2d:f6:ab:a9:a8:6e:4e:3b:f7:36:6d:d1:0b:
                    a5:8a:99:0a:42:90:96:ec:d3:3d:74:4e:b3:09:11:
                    4c:24:13:70:19:9a:98:7d:99:bd:06:fd:de:09:1e:
                    18:99:03:24:24:5e:6b:c8:36:8a:c2:f2:e4:99:34:
                    67:33:50:9b:36:62:ff:a8:a4:87:1a:56:9b:e8:85:
                    74:90:24:e3:e3:09:49:86:25:65:cc:9a:ce:c2:38:
                    cc:e4:b6:fc:ad:f8:d9:2e:52:e6:e5:b8:7f:e3:f1:
                    b9:d0:f8:1c:0a:e7:64:5c:ef:db:9d:11:b7:f0:e8:
                    13:ff:33:a2:c0:49:45:04:1c:7a:2d:cb:c4:15:b0:
                    82:c9:e9:8f:58:37:8c:17:fa:37:5d:fc:84:27:42:
                    2a:b6:04:0a:5c:dc:5a:ef:7c:45:90:63:15:27:6e:
                    f6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:AF:F1:93:C4:41:8B:33:60:90:B5:25:C3:75:A0:C6:57:C7:C7
            X509v3 Authority Key Identifier:
                keyid:1C:96:AC:4B:FA:7D:CA:99:F0:77:B9:FC:C1:2E:E7:0E:72:C8:69:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33382e302f32342d3234203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:9c:44:62:b7:49:7d:50:86:55:a0:9e:db:fe:0b:2a:c0:d6:
         69:ee:bb:16:3d:b7:65:12:38:c1:e5:4b:0d:c8:51:dd:34:bd:
         3d:69:e9:0f:6a:96:00:b7:23:da:a9:5a:f5:64:14:7e:04:a6:
         34:ab:93:db:eb:22:b4:37:f4:0e:2c:71:87:88:cf:f9:36:17:
         4b:61:3f:30:1d:99:33:19:db:68:b1:43:0a:85:c0:e7:e5:8f:
         b4:50:05:25:be:60:a9:06:0c:6f:de:1a:91:0f:4b:13:13:8a:
         3f:16:46:3a:ca:6d:23:30:d9:a9:7f:79:2d:65:9d:8a:2b:66:
         11:68:29:dc:e1:44:0b:97:d6:0e:91:7e:67:90:db:7f:ea:5a:
         56:d2:0c:ed:61:05:3d:1a:68:f7:33:4b:e3:cb:a2:1b:b2:ed:
         01:ae:08:20:2e:6a:72:ce:b3:7b:4b:78:69:56:1a:51:8b:d2:
         91:04:b7:5e:53:0b:40:24:2f:64:f5:2f:9e:83:d7:61:5e:1b:
         2e:db:3e:04:46:ed:b4:e8:0d:71:19:72:89:3d:dd:ef:3e:4a:
         09:58:45:a2:40:f9:cc:31:59:5e:b9:d6:13:37:a3:8c:1f:69:
         82:f6:df:e3:d8:71:d5:19:2c:3d:9b:11:75:88:0c:55:6c:b6:
         be:08:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:42 2024 by rpki-client on console-ams.rpki-client.org