Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32342d3234203d3e20323636353833.roa
File:                     34352e3232382e31322e302f32342d3234203d3e20323636353833.roa (raw, json)
Hash identifier:          YYIdbl6Z05l9EiNTUr8oYpUjAQ2YtAoSv0zgROdQw5Y=
Subject key identifier:   6D:DF:39:CA:91:2B:34:67:B5:11:51:18:DC:8C:F9:12:4D:65:34:FE
Certificate issuer:       /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial:       13A6377D849162E5EBC9086DF7F3E1E00F949065
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32342d3234203d3e20323636353833.roa
Signing time:             Tue 08 Oct 2024 11:00:21 +0000
ROA not before:           Tue 08 Oct 2024 10:55:21 +0000
ROA not after:            Tue 07 Oct 2025 11:00:21 +0000
asID:                     266583
IP address blocks:        45.228.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl
                          rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a6:37:7d:84:91:62:e5:eb:c9:08:6d:f7:f3:e1:e0:0f:94:90:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
        Validity
            Not Before: Oct  8 10:55:21 2024 GMT
            Not After : Oct  7 11:00:21 2025 GMT
        Subject: CN=6DDF39CA912B3467B5115118DC8CF9124D6534FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:c1:6f:db:be:e2:f3:a1:8f:e3:5e:bf:82:
                    1b:00:44:1a:34:d5:ab:6e:b2:11:78:5d:54:15:4b:
                    b8:ce:6a:57:22:c0:7a:91:5c:f9:98:69:b6:d9:43:
                    a8:5d:c5:89:fc:50:05:b5:9f:85:af:56:1d:d3:29:
                    92:47:78:1b:ca:68:50:d2:73:d1:4b:9a:db:ac:ef:
                    cc:6e:e5:55:87:e4:b6:1e:fe:15:ea:bb:6a:8c:7e:
                    58:26:c2:eb:4f:6e:37:33:89:6a:a2:94:2b:cf:35:
                    07:8e:37:fe:c4:8e:83:94:43:ce:fe:a1:e0:04:4b:
                    8c:8a:fa:b4:63:ea:f4:ab:d6:cd:39:d1:a2:9e:24:
                    f5:c3:66:48:5b:d4:fb:3d:94:9b:34:ba:53:58:e4:
                    0e:f6:8a:9c:31:0d:b8:e4:35:ea:c2:af:e6:fc:c4:
                    fc:73:c8:d5:2c:af:eb:d8:8f:18:1c:a9:3b:25:f0:
                    0e:38:01:58:c4:ee:03:a6:d7:b3:b7:36:e9:82:2e:
                    4f:c3:e5:85:ba:8b:ba:2c:74:7f:a1:c4:fb:0b:ba:
                    28:86:cc:52:af:85:76:f0:8b:a2:ae:4e:70:06:1d:
                    6b:27:91:fb:33:b8:7f:58:54:29:1a:40:3f:38:e1:
                    d1:79:1b:17:7d:81:d8:3c:22:64:4b:de:aa:5b:79:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DF:39:CA:91:2B:34:67:B5:11:51:18:DC:8C:F9:12:4D:65:34:FE
            X509v3 Authority Key Identifier:
                keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32342d3234203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:78:7f:86:22:fe:70:14:16:16:e1:58:27:32:16:be:54:54:
         b4:bb:7b:3c:2a:d4:8a:13:0c:34:95:88:71:2d:b9:07:95:68:
         18:90:59:7d:82:8d:e6:46:e8:1d:71:e1:29:f7:93:21:f4:ed:
         75:c9:55:73:53:8c:6b:3c:e3:88:7b:d9:53:53:fe:0b:ff:2a:
         f8:34:7d:de:62:e1:13:92:b0:79:11:e7:20:fe:f0:f4:d5:b8:
         68:88:6a:75:28:c3:91:94:01:eb:cc:ea:6c:0c:aa:9f:84:e4:
         eb:7f:37:29:b6:89:32:ac:52:26:61:29:dd:6b:d8:10:ed:38:
         02:a2:26:a8:51:df:1e:46:c0:be:eb:e4:2d:0e:43:63:21:c0:
         1b:ba:43:6b:e4:44:54:86:15:7f:14:dc:42:0a:47:2d:9b:f5:
         0e:3e:79:ac:18:a8:fd:3d:1b:bb:92:e0:f1:73:10:1a:25:d9:
         ee:bb:62:0e:62:aa:88:99:b1:d5:36:82:f3:cc:4f:96:83:b4:
         fc:5a:d3:e0:bf:9b:72:12:f5:d6:33:b0:1f:12:90:ce:03:aa:
         85:c7:6e:75:24:99:d0:16:11:26:9a:ee:55:28:2b:37:72:eb:
         eb:d6:00:bf:ed:e0:2b:95:e4:ab:7c:a5:ee:50:84:b4:69:2c:
         ba:a1:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:03 2024 by rpki-client on console-ams.rpki-client.org