Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
File:                     34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (raw, json)
Hash identifier:          iLlF1ninPEmkNcjwElnerdmDN5HhpAeMQXWSgLfB1xs=
Subject key identifier:   6A:1B:25:D6:15:DE:71:BB:F6:A6:01:A1:BB:4E:D9:E3:BC:1C:C4:BD
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       3FA9C136374668EFF935D9E2F336C0EF8F54BF47
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
Signing time:             Sat 31 Aug 2024 19:36:50 +0000
ROA not before:           Sat 31 Aug 2024 19:31:50 +0000
ROA not after:            Sat 30 Aug 2025 19:36:50 +0000
asID:                     269626
IP address blocks:        45.190.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a9:c1:36:37:46:68:ef:f9:35:d9:e2:f3:36:c0:ef:8f:54:bf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug 31 19:31:50 2024 GMT
            Not After : Aug 30 19:36:50 2025 GMT
        Subject: CN=6A1B25D615DE71BBF6A601A1BB4ED9E3BC1CC4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:7d:d1:7b:dc:a1:d6:26:e6:54:a0:3b:44:
                    a8:ef:af:9c:04:53:6b:a3:4a:23:ca:5f:f9:08:12:
                    39:6d:22:0b:c9:18:f5:45:35:7e:ea:01:63:78:ba:
                    4a:cf:a1:cd:0b:18:1a:4e:f7:ce:da:1f:fc:8f:93:
                    cc:aa:c6:0d:68:09:1c:ea:2b:d8:cd:b0:82:10:14:
                    e4:ba:63:c0:c5:9b:75:8b:40:0c:96:a3:95:c6:62:
                    28:fb:41:34:f6:68:a2:f6:17:bf:1c:cd:24:02:c1:
                    28:e3:cf:e0:9d:84:81:b5:a9:b0:51:5d:fd:95:d1:
                    92:fd:fb:64:21:e9:c6:51:79:ef:ef:91:c9:fe:58:
                    4c:ef:ad:2f:c1:95:81:a7:ae:12:1c:d1:8c:f2:d3:
                    74:81:e7:90:bb:4f:90:88:c3:23:20:76:01:df:7f:
                    a5:7e:84:28:c4:85:c0:70:01:56:0f:7b:e8:29:a1:
                    5d:f0:a4:48:28:5d:12:6a:88:0e:91:e9:bd:c8:fd:
                    09:e7:cb:62:97:83:34:61:d7:a6:00:01:3c:fe:09:
                    98:ae:d1:b0:9f:42:c6:1c:ba:06:8f:47:83:65:f5:
                    58:63:55:d0:72:ce:84:15:8f:38:de:52:8e:c5:4e:
                    ee:db:19:df:8b:b9:d0:7c:52:4f:fc:96:1b:cf:c3:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1B:25:D6:15:DE:71:BB:F6:A6:01:A1:BB:4E:D9:E3:BC:1C:C4:BD
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:76:86:55:8c:da:37:07:50:e5:9d:cb:98:d1:e8:43:be:ab:
         44:4f:d1:63:70:2f:cd:44:2d:32:85:ca:cb:bb:0c:e6:f4:21:
         cb:cd:7c:7c:52:3d:7e:92:8f:63:98:a5:b8:4c:fe:3c:5c:ea:
         94:14:d8:6e:ff:f6:76:60:5b:c3:c3:a1:da:e8:0d:9c:a4:4e:
         68:c0:bb:d5:2f:a5:b1:bc:ec:4d:f6:ef:48:b3:ab:a1:e9:e2:
         66:3c:07:54:d6:cf:83:63:7a:05:da:4a:25:70:3b:12:e7:9c:
         20:13:62:15:b5:7f:7a:82:15:b8:98:63:77:98:45:1e:7e:82:
         a4:3b:da:b6:1a:b2:c2:e8:fd:39:b1:4c:aa:c8:40:0d:e1:24:
         0e:5d:1c:69:72:95:b2:3c:26:91:89:6d:c3:c0:c7:c2:d6:29:
         b6:59:88:b8:f0:82:2a:ed:8a:cb:7c:b7:ed:15:db:c3:cc:df:
         b2:f3:14:71:97:b7:f4:24:61:16:16:d4:23:ae:a9:a6:59:3b:
         ef:9e:be:7e:3d:2e:dd:66:0a:db:31:6a:6d:b3:fd:df:ba:e6:
         aa:45:6d:a0:03:a5:b9:c6:2a:f7:b2:88:c5:00:8a:8d:5e:a2:
         ca:a7:1d:4c:a7:58:3e:9f:3c:f9:d3:19:47:64:cd:e7:b4:6d:
         cc:ec:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:34 2024 by rpki-client on console-ams.rpki-client.org