Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa
File:                     34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa (raw, json)
Hash identifier:          SAky1VWNr2UCtf3FeLygZxRkgi9D1QSpDQX0Rj5TXxE=
Subject key identifier:   A2:E0:9C:A0:C5:C0:1A:8A:42:8F:12:E2:67:74:A6:4E:CD:2D:B0:0C
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       7DB0D20BAE50AA7CB7F20D2E110C75CA4A8AD793
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa
Signing time:             Sat 31 Aug 2024 19:37:03 +0000
ROA not before:           Sat 31 Aug 2024 19:32:03 +0000
ROA not after:            Sat 30 Aug 2025 19:37:03 +0000
asID:                     269626
IP address blocks:        45.190.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b0:d2:0b:ae:50:aa:7c:b7:f2:0d:2e:11:0c:75:ca:4a:8a:d7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug 31 19:32:03 2024 GMT
            Not After : Aug 30 19:37:03 2025 GMT
        Subject: CN=A2E09CA0C5C01A8A428F12E26774A64ECD2DB00C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:de:d4:ef:42:ec:ad:d8:97:a9:a5:28:82:9d:
                    b6:83:1b:bd:e3:d2:a1:0a:35:e3:b0:78:bc:9b:49:
                    61:2d:6b:e1:ce:80:e1:0d:de:30:ce:50:b4:9a:3c:
                    d8:e8:0c:bc:24:a3:9a:ab:26:37:1a:13:05:8d:56:
                    67:a2:30:e7:0f:c2:86:3e:75:a1:50:61:cc:ef:4d:
                    e5:23:64:f6:4a:77:a0:e9:db:ed:d1:d5:3f:3c:74:
                    3b:98:f9:6d:df:dc:a8:93:59:37:81:ae:43:6f:c5:
                    0f:f5:dc:b6:39:cc:d9:1e:dc:a3:77:46:6d:96:e6:
                    a1:93:34:33:bb:89:17:4e:fd:13:4d:a9:d4:10:e3:
                    02:13:a1:bc:17:a2:20:95:87:5c:3e:5a:94:d4:8c:
                    fe:f3:a1:d2:ce:24:48:80:a7:1a:80:f8:5c:1d:92:
                    63:2f:9a:03:1b:68:b1:eb:5c:ed:fe:6b:dd:36:c6:
                    63:36:e1:50:9d:60:9d:c8:0a:82:fb:93:35:7d:bb:
                    7f:d4:dd:98:2c:9d:fd:35:ff:1b:7a:9d:2b:d4:80:
                    fb:25:06:f4:5f:51:81:d3:7e:f4:6e:ed:43:4b:82:
                    63:70:ff:ce:75:ea:4c:4a:30:cb:13:86:cf:76:59:
                    29:bf:84:5b:fd:59:d0:5c:a2:41:be:70:24:18:78:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:9C:A0:C5:C0:1A:8A:42:8F:12:E2:67:74:A6:4E:CD:2D:B0:0C
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:28:60:4a:f6:fd:e6:b1:5b:cf:ce:e0:08:ad:ce:0b:29:c3:
         67:96:48:4b:c7:a5:7b:09:7e:e7:3c:ec:b1:e5:03:3f:74:63:
         23:d6:0c:75:e8:1c:29:46:dc:a3:cc:60:eb:4e:08:fe:13:4a:
         12:51:4e:3a:51:dc:a2:27:9a:b8:c3:c6:1d:fa:f3:88:1e:3a:
         e8:85:7f:25:e7:a1:f4:5d:99:39:9a:e6:01:4b:8e:1b:62:66:
         fd:c8:d1:97:fe:58:40:a2:60:5f:ff:f3:d5:94:88:9c:19:c1:
         2e:fb:78:60:6c:3a:24:87:0e:4f:f7:a4:bf:2e:f1:5b:4f:1d:
         b0:2c:b3:4d:d4:ed:e3:f0:23:f8:58:de:d4:24:f9:44:ee:92:
         01:28:a6:1e:87:e3:e3:7d:38:b9:61:ed:88:02:a5:e9:6a:e3:
         8a:18:6e:d3:8f:97:5c:84:f4:81:ff:16:41:39:91:28:4d:64:
         10:cd:32:17:2d:62:92:6c:a2:15:60:f8:aa:55:2d:be:b7:96:
         79:0a:eb:77:20:2e:36:3f:db:6c:ee:a0:7a:2a:a8:4f:c7:d0:
         90:6d:60:cc:bb:b4:25:df:39:f8:0a:dd:e0:22:bc:e8:d2:c6:
         86:a6:c9:e3:c8:1e:4a:fa:b3:fb:1d:f7:a4:8b:5d:be:ab:4a:
         cc:3e:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:34 2024 by rpki-client on console-ams.rpki-client.org