Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa
File:                     34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa (raw, json)
Hash identifier:          AFyjyb+e6fnJ7Elh0VjXOc/5/W2vV6E74x8Sqqp/QoY=
Subject key identifier:   D2:B6:D2:1F:F3:3D:65:40:22:89:A1:06:39:4C:E8:43:7C:16:C9:30
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       0C3F80779710274289A5B238453F79C252EB71E9
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa
Signing time:             Sat 31 Aug 2024 19:36:58 +0000
ROA not before:           Sat 31 Aug 2024 19:31:58 +0000
ROA not after:            Sat 30 Aug 2025 19:36:58 +0000
asID:                     269626
IP address blocks:        45.190.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3f:80:77:97:10:27:42:89:a5:b2:38:45:3f:79:c2:52:eb:71:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug 31 19:31:58 2024 GMT
            Not After : Aug 30 19:36:58 2025 GMT
        Subject: CN=D2B6D21FF33D65402289A106394CE8437C16C930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:23:a3:d5:b9:bc:38:15:e6:a8:16:21:59:
                    15:49:0d:ec:34:2b:30:c6:1a:a8:34:fb:13:09:25:
                    2d:77:55:50:f8:8a:7c:cc:03:a1:3d:40:3c:ed:0c:
                    bf:3e:d5:2c:29:b6:0e:03:95:b8:ed:98:e1:64:50:
                    5d:b7:76:c8:c7:67:0a:de:ce:3d:fc:75:e9:f1:24:
                    ff:d3:91:41:74:f0:b9:cf:25:d7:88:f2:66:18:8b:
                    14:e2:d3:7f:ab:ce:07:2b:43:e5:a8:ef:41:38:3d:
                    13:3a:54:bc:f2:60:c3:de:c3:d4:81:2b:5f:03:03:
                    85:3f:69:03:a3:a2:f6:96:3b:cf:e4:1d:68:41:35:
                    02:04:df:cd:e7:e1:8b:41:2d:5e:34:c3:f6:97:46:
                    69:0e:1d:a5:69:0c:c4:2e:f7:e0:f5:d5:6a:65:9c:
                    bb:59:57:d5:5f:4d:19:0d:21:41:6f:15:46:2e:fe:
                    79:17:a4:18:d7:e2:ae:85:e3:8d:8c:79:7e:0d:2c:
                    d1:83:96:90:3c:c2:0a:b4:a5:eb:7c:ea:f3:5a:12:
                    41:4b:29:02:fc:77:f1:ef:c4:22:0a:7b:05:ff:12:
                    58:68:16:4f:d5:5b:f5:48:5b:64:64:37:d8:ce:2a:
                    95:0c:16:3f:53:c7:33:d1:37:fd:cf:17:9c:10:18:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B6:D2:1F:F3:3D:65:40:22:89:A1:06:39:4C:E8:43:7C:16:C9:30
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:3d:ff:d7:dd:63:21:06:50:cd:a4:5c:2f:16:37:0e:9a:4a:
         14:45:51:af:79:e3:9e:9d:1d:9e:8b:7d:75:ee:b3:0f:82:be:
         f4:6b:9c:7a:55:aa:e0:97:67:d5:41:b3:50:43:91:03:d6:1a:
         18:79:6e:1e:b6:46:cd:f4:7f:2c:ee:88:cc:40:ca:d2:a7:88:
         01:ed:5d:59:76:86:c6:03:22:2f:13:72:02:cc:89:06:c9:27:
         c3:4b:68:f5:bf:5c:04:1e:e6:73:32:55:27:d2:1f:e0:5a:3d:
         c2:3a:b3:a5:4a:be:cd:da:d0:e7:32:fb:3f:41:b7:3d:34:a1:
         86:0e:87:63:19:06:da:31:8f:eb:5f:25:0a:76:ba:c3:7a:5a:
         08:fd:f0:c2:1e:61:e4:14:31:d0:6b:14:16:20:8d:7e:69:46:
         07:43:94:2d:bb:2a:e1:72:e1:d9:5e:47:a1:f3:a5:f3:da:82:
         36:db:03:78:1d:47:b3:b4:58:58:96:0e:48:ce:05:ad:33:03:
         f5:c1:a4:35:e3:0c:ae:d0:44:2f:ae:60:8f:b9:25:07:ef:79:
         27:f3:c9:e6:d6:51:cb:36:d3:de:2d:14:66:87:02:91:06:b3:
         74:cd:2a:ca:f4:0f:21:00:52:e2:42:9a:38:80:10:ee:f7:4c:
         e3:50:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:34 2024 by rpki-client on console-ams.rpki-client.org