Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa
File:                     34352e3138332e35362e302f32322d3234203d3e20323639323633.roa (raw, json)
Hash identifier:          YmjIFtYW3zp2cZRJAHiOq/QdfsMtkog386k5SOa22eg=
Subject key identifier:   0C:27:97:A3:CF:67:23:DA:71:0A:1F:68:A8:C2:33:54:5C:52:08:33
Certificate issuer:       /CN=9516E18FF1D878D34D72A62751C21DF82509593E
Certificate serial:       055358E0D5D9BD738A34B00266AC9F8F94799A66
Authority key identifier: 95:16:E1:8F:F1:D8:78:D3:4D:72:A6:27:51:C2:1D:F8:25:09:59:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa
Signing time:             Mon 05 Aug 2024 11:52:40 +0000
ROA not before:           Mon 05 Aug 2024 11:47:40 +0000
ROA not after:            Mon 04 Aug 2025 11:52:40 +0000
asID:                     269263
IP address blocks:        45.183.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.crl
                          rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:53:58:e0:d5:d9:bd:73:8a:34:b0:02:66:ac:9f:8f:94:79:9a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9516E18FF1D878D34D72A62751C21DF82509593E
        Validity
            Not Before: Aug  5 11:47:40 2024 GMT
            Not After : Aug  4 11:52:40 2025 GMT
        Subject: CN=0C2797A3CF6723DA710A1F68A8C233545C520833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:7b:ff:de:0f:11:0c:a3:a4:77:fb:d0:80:
                    c5:7c:c3:3f:30:6d:1b:cd:b4:16:61:25:a4:18:cd:
                    8f:be:b8:62:35:7a:16:87:dd:65:b2:84:ff:30:82:
                    3d:c8:8f:1a:4c:a4:ad:a7:80:60:d3:28:02:8d:e8:
                    7c:6a:47:43:4e:35:e9:09:fb:aa:92:dd:90:de:b1:
                    5b:0b:38:f4:53:64:5f:e9:42:fe:52:e5:7a:8e:f8:
                    5e:5a:09:81:c8:fe:7c:db:7c:92:43:4d:87:ca:2c:
                    f2:ae:b1:40:5c:15:f3:5e:b6:a5:7e:d4:b9:36:45:
                    11:99:84:27:56:05:45:3e:af:63:ac:74:06:93:67:
                    ac:39:5c:9a:9c:c1:c6:2f:ae:9f:85:e1:f6:72:c8:
                    b3:b5:0e:51:04:5c:04:29:ec:23:1a:6a:bc:fc:db:
                    41:1a:01:da:9d:7d:39:80:95:df:b6:43:0b:f3:c4:
                    97:72:b0:b6:8a:97:33:25:2b:df:3d:7e:91:08:d7:
                    28:02:95:01:ca:ac:05:fe:70:b2:56:9c:1c:75:d2:
                    50:db:f6:6d:79:9e:89:6e:7e:92:05:84:e4:cc:c6:
                    29:dd:fa:f4:b0:8d:5e:21:13:a5:d4:4d:41:71:2a:
                    62:c1:62:e8:c2:f1:72:8d:f9:41:bd:1e:c9:ea:e9:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:27:97:A3:CF:67:23:DA:71:0A:1F:68:A8:C2:33:54:5C:52:08:33
            X509v3 Authority Key Identifier:
                keyid:95:16:E1:8F:F1:D8:78:D3:4D:72:A6:27:51:C2:1D:F8:25:09:59:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:8a:f6:85:cc:12:3e:cd:c0:bb:ea:58:27:78:ff:5c:38:
         1d:f0:fc:15:d6:f4:4d:82:cd:61:3b:da:36:83:30:18:3c:8f:
         7c:b8:ef:00:32:fa:03:ab:49:bf:e2:f6:65:c4:3a:93:f0:f0:
         34:23:19:c6:0a:75:8a:ce:96:58:03:50:a7:ad:52:5d:56:6d:
         e2:12:9e:e4:69:d4:7a:a4:f5:dd:b7:fd:08:81:f0:62:14:ec:
         67:13:44:b9:eb:bc:54:e5:9b:d1:ae:38:29:3e:da:67:2f:37:
         a5:f0:db:1f:d3:da:a3:fe:fc:dd:e4:90:e8:31:20:76:41:2e:
         cb:f6:5b:d9:18:4b:74:f3:b8:78:68:17:03:40:18:1a:bc:0b:
         cc:0b:21:d4:5b:e2:f2:a4:73:2d:44:08:46:65:f4:34:32:a6:
         ed:fb:49:f0:84:eb:4f:05:65:67:d7:b9:41:39:9b:9d:27:bf:
         1b:86:e5:b0:16:c4:95:be:51:6d:cf:c3:39:dd:1f:26:92:44:
         6f:f2:f1:75:18:35:cb:24:e6:5d:23:02:08:13:46:be:d1:b7:
         e7:7b:a3:db:a9:36:99:7f:c8:15:6c:64:8c:19:e6:6c:e0:f5:
         ea:4f:1c:36:71:2e:d5:be:df:4e:95:59:d8:17:dd:1e:d8:68:
         de:79:67:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:54 2024 by rpki-client on console-fra.rpki-client.org