Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31342e302f32342d3234203d3e20323636353833.roa
File:                     34352e3232382e31342e302f32342d3234203d3e20323636353833.roa (raw, json)
Hash identifier:          y7Ik1TnOFvUJ9Bmu8yntH/LyMB4y1dIbM7fbqM5ehPo=
Subject key identifier:   48:A7:92:0D:C7:0D:3B:33:76:FB:81:4F:90:9D:BA:84:4A:D3:2B:FB
Certificate issuer:       /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial:       63E77C60F3A268FA4E9F11EA1B8BBF2B2E483A96
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31342e302f32342d3234203d3e20323636353833.roa
Signing time:             Tue 08 Oct 2024 11:00:24 +0000
ROA not before:           Tue 08 Oct 2024 10:55:24 +0000
ROA not after:            Tue 07 Oct 2025 11:00:24 +0000
asID:                     266583
IP address blocks:        45.228.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl
                          rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e7:7c:60:f3:a2:68:fa:4e:9f:11:ea:1b:8b:bf:2b:2e:48:3a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
        Validity
            Not Before: Oct  8 10:55:24 2024 GMT
            Not After : Oct  7 11:00:24 2025 GMT
        Subject: CN=48A7920DC70D3B3376FB814F909DBA844AD32BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:00:c6:da:1c:e5:5c:ac:d6:71:f6:52:45:
                    f5:d8:0b:2b:69:a2:16:34:37:c9:71:b8:e4:7d:40:
                    80:26:c0:66:6d:9c:23:46:e7:2b:a4:0a:eb:be:de:
                    42:c9:2a:08:5c:ab:bc:e3:f8:09:bf:dd:ac:d0:dc:
                    59:0d:82:92:50:3a:42:81:1b:7c:c7:2f:ad:38:be:
                    ad:4f:22:cc:be:40:5e:d0:a6:5b:40:8f:c5:0d:bd:
                    29:18:e4:7b:4e:53:7d:17:0b:f0:f0:b4:f2:5f:6b:
                    d0:05:2e:78:e5:8a:54:7c:68:31:67:a0:46:d8:2f:
                    7d:16:9e:fa:0d:b7:a3:b8:86:48:cb:0f:83:a6:d5:
                    41:7c:d2:42:1f:d5:f0:80:4c:5d:72:cc:32:f6:a3:
                    e8:9c:40:f7:d5:8c:25:bc:50:81:4f:18:26:69:1a:
                    83:28:b1:58:6f:08:d6:a3:97:76:0f:3a:98:37:b2:
                    df:10:bb:bc:75:ab:2f:22:8f:18:47:1d:1d:9f:5c:
                    4c:98:77:34:5b:14:7b:14:48:1c:5f:d9:1b:96:6c:
                    d7:41:ec:ad:f3:4d:14:91:f9:df:ff:9e:aa:0a:4d:
                    f0:2e:2a:81:17:ba:a2:29:b2:60:d5:97:5d:b2:55:
                    da:bd:7b:0e:5d:35:e3:0f:b5:5a:60:38:68:d7:fc:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A7:92:0D:C7:0D:3B:33:76:FB:81:4F:90:9D:BA:84:4A:D3:2B:FB
            X509v3 Authority Key Identifier:
                keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31342e302f32342d3234203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:15:c7:ab:f6:66:95:54:cf:ab:ef:73:b9:64:15:89:4f:45:
         dd:64:08:1d:49:f3:50:e7:8a:36:0d:be:47:16:a4:eb:00:13:
         7e:84:5c:8f:94:3f:cb:26:11:64:d4:dd:d1:a5:d3:9a:d6:4c:
         97:fd:e8:09:27:f9:45:e1:e4:b1:db:f7:b6:87:1f:4a:3b:e4:
         9d:4d:9a:06:97:ad:d6:f1:b9:40:ef:fc:01:c2:48:25:20:0d:
         ab:07:e6:ba:f7:88:80:cf:c0:0d:8b:40:61:5d:b9:a7:61:05:
         3c:a6:50:ff:ec:61:ca:82:ba:62:90:63:ed:4e:d8:ef:e8:8d:
         92:61:3f:5b:a6:76:5b:8a:7e:38:3e:0f:e8:c8:91:7b:a2:85:
         8e:18:45:13:e8:14:b3:c2:a9:e6:e8:38:ab:66:52:9c:02:eb:
         03:3b:4a:8e:13:6e:cf:8b:2b:bc:93:75:38:3d:57:59:69:cc:
         ee:8b:13:c7:a9:cb:41:cb:56:41:82:4e:4b:0e:98:77:db:a0:
         14:b7:75:c5:e3:e8:e4:91:ee:25:aa:76:e2:d2:8c:58:d7:5c:
         36:54:9c:4c:ac:6a:88:47:5e:96:54:6b:1e:64:72:eb:fb:f9:
         c5:62:d5:44:54:4f:71:b8:fe:d1:a7:f1:34:fe:02:72:37:5e:
         09:da:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:03 2024 by rpki-client on console-ams.rpki-client.org