Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33392e302f32342d3234203d3e20323731363939.roa
File:                     34352e3232382e33392e302f32342d3234203d3e20323731363939.roa (raw, json)
Hash identifier:          yGt6Gylfe+dzFRTHWurEM3I0C4Q1rTNpm32qVXLa+vI=
Subject key identifier:   CB:99:7E:82:B3:92:2E:83:1E:FC:9C:D7:26:25:AD:CA:28:3A:24:05
Certificate issuer:       /CN=1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904
Certificate serial:       179ABDA2171A7360E917A6EDF23C12A03D028B08
Authority key identifier: 1C:96:AC:4B:FA:7D:CA:99:F0:77:B9:FC:C1:2E:E7:0E:72:C8:69:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33392e302f32342d3234203d3e20323731363939.roa
Signing time:             Thu 21 Nov 2024 18:35:47 +0000
ROA not before:           Thu 21 Nov 2024 18:30:47 +0000
ROA not after:            Thu 20 Nov 2025 18:35:47 +0000
asID:                     271699
IP address blocks:        45.228.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:bd:a2:17:1a:73:60:e9:17:a6:ed:f2:3c:12:a0:3d:02:8b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904
        Validity
            Not Before: Nov 21 18:30:47 2024 GMT
            Not After : Nov 20 18:35:47 2025 GMT
        Subject: CN=CB997E82B3922E831EFC9CD72625ADCA283A2405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:20:e0:e1:1c:52:59:58:3f:74:f8:55:ee:
                    c1:5d:7e:97:db:2f:5f:21:0d:3e:fa:86:8d:e9:06:
                    90:9e:36:18:99:7f:ed:78:48:3c:b7:2b:c3:0b:50:
                    56:66:67:de:6b:fb:33:60:a4:d3:77:81:bd:93:c1:
                    13:01:0e:95:ef:7d:5d:b3:b8:fa:3e:95:2a:bd:a8:
                    70:c1:31:55:30:c3:de:55:d4:5f:a9:19:8c:2e:39:
                    1c:1b:51:45:09:3b:50:2b:e9:e5:99:ef:e5:ac:9b:
                    fe:52:03:02:5a:b8:15:07:29:4c:3b:94:20:23:25:
                    45:eb:e8:ec:08:86:49:6d:ea:e2:d6:c8:de:1f:55:
                    bf:3a:61:02:4e:04:2a:aa:69:30:3c:51:ec:49:a6:
                    3d:9d:67:ae:d0:58:e4:41:a9:84:03:a0:3c:05:af:
                    a9:53:37:2f:d8:ef:72:4c:b3:b6:1d:b0:ed:94:55:
                    6f:27:2d:a6:36:93:f0:64:6f:0a:67:b9:13:f5:80:
                    eb:f4:9f:17:6a:eb:79:4b:25:e1:15:82:3c:d0:b5:
                    62:54:7c:d1:2b:c0:23:ec:3d:06:98:00:70:d2:f3:
                    60:80:79:cb:3d:9f:27:f8:3e:ff:dd:b0:65:de:80:
                    cc:f8:0a:76:b6:d2:11:41:0e:ab:68:72:2e:09:8e:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:7E:82:B3:92:2E:83:1E:FC:9C:D7:26:25:AD:CA:28:3A:24:05
            X509v3 Authority Key Identifier:
                keyid:1C:96:AC:4B:FA:7D:CA:99:F0:77:B9:FC:C1:2E:E7:0E:72:C8:69:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33392e302f32342d3234203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f1:49:df:7e:e0:ee:48:a5:57:93:ad:63:51:d2:ab:d8:c5:
         70:d6:10:c0:58:b9:37:3a:1d:13:fb:4e:3f:8b:4c:3d:2a:ba:
         12:15:9b:03:38:57:92:e0:24:d3:d9:60:2d:cf:84:e3:1e:f5:
         2e:e6:e0:2f:7a:2e:c8:10:de:ca:d8:34:63:54:7b:8c:9a:fc:
         f0:f9:67:ba:e0:64:02:28:45:6a:ec:68:0d:f2:c9:63:76:e1:
         1d:d5:b8:4c:2f:3f:c2:c4:19:ec:14:d3:53:c3:40:31:97:e9:
         0d:72:d0:82:f3:8b:96:dc:44:1a:45:77:2c:62:da:54:48:0a:
         30:95:f8:96:ad:8d:ff:31:15:9d:66:f8:4f:f6:ca:a4:e8:ab:
         92:72:98:08:c3:79:f6:68:3a:40:40:77:a9:97:87:38:dc:e7:
         18:5d:dd:95:c2:12:30:d7:80:66:a1:99:71:0d:dd:46:20:3a:
         2c:d8:8f:2a:ac:4b:88:0e:f9:24:65:e7:9f:26:ec:07:22:1a:
         f5:67:6a:90:69:d1:2f:b2:1f:82:13:d2:80:36:d4:7a:5b:de:
         c0:81:c6:cb:00:db:e0:61:9e:8d:1b:df:98:2e:b9:ff:b6:88:
         15:ec:bf:35:96:75:76:e2:13:33:73:32:9c:03:16:d0:3c:d6:
         2b:ae:1e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:04 2024 by rpki-client on console-fra.rpki-client.org