Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa
File:                     34352e3136332e39362e302f32322d3234203d3e20323638353535.roa (raw, json)
Hash identifier:          dCaF/HAZW4abpufEwfUKSqdX91iEYcqJkrwIdt/XGAE=
Subject key identifier:   89:8E:C1:64:4B:53:8A:98:8E:6C:91:A8:89:28:79:D9:03:9E:A4:F7
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       169D75AF4ED69F0B5D4B4E6DC76826F453918206
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa
Signing time:             Mon 08 Jul 2024 19:43:02 +0000
ROA not before:           Mon 08 Jul 2024 19:38:02 +0000
ROA not after:            Mon 07 Jul 2025 19:43:02 +0000
asID:                     268555
IP address blocks:        45.163.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9d:75:af:4e:d6:9f:0b:5d:4b:4e:6d:c7:68:26:f4:53:91:82:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:02 2024 GMT
            Not After : Jul  7 19:43:02 2025 GMT
        Subject: CN=898EC1644B538A988E6C91A8892879D9039EA4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:65:b9:25:51:d2:20:c3:b2:2e:6a:ef:ec:
                    e4:f4:73:c5:75:9f:d1:ea:5e:b0:d6:68:11:17:c1:
                    9f:dc:df:d2:6e:bb:78:35:91:63:6b:2e:4b:6f:3a:
                    61:b0:15:77:8f:28:80:94:f1:67:e5:72:20:7a:c9:
                    99:83:d7:fe:c0:84:de:34:a1:82:fc:00:03:bf:fe:
                    8a:dc:f5:01:02:64:73:e8:79:04:0f:40:5f:50:80:
                    9b:c2:6d:8f:71:70:97:18:e9:9f:f4:82:26:13:08:
                    63:6a:38:e4:a5:f7:34:37:96:2e:1c:58:b1:48:7c:
                    d8:3b:62:de:82:cf:d6:12:e8:df:6b:77:ce:6e:db:
                    a6:4f:e0:6c:ba:41:ad:ee:c1:80:7a:14:22:9f:5d:
                    85:ee:20:85:83:b1:01:6d:b8:b7:24:83:28:b7:2b:
                    fe:bf:5d:e4:b6:c4:0f:48:8c:aa:e0:c7:dc:b9:be:
                    29:3e:2a:9d:aa:b1:23:00:70:46:4c:b2:d2:2b:f5:
                    66:2a:ef:6a:35:05:30:86:75:02:e3:51:37:e7:a8:
                    59:7a:cf:cd:d3:4b:0f:c9:6f:2d:b2:69:db:df:7f:
                    fa:aa:27:e2:85:fb:8f:f3:b8:a3:d1:82:92:f9:e0:
                    64:bf:5e:01:0d:0e:b1:28:57:b4:b6:3e:a1:82:37:
                    42:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8E:C1:64:4B:53:8A:98:8E:6C:91:A8:89:28:79:D9:03:9E:A4:F7
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:48:e9:88:ab:3d:35:65:7b:65:39:be:f6:9f:d8:2a:ba:19:
         7a:30:78:ab:29:e3:fc:85:cb:1e:27:1b:dd:73:f8:2f:16:1e:
         83:66:95:11:ce:ed:33:67:b2:55:aa:43:7d:e0:ca:32:aa:b7:
         c3:37:08:6f:de:fa:53:83:48:29:60:a5:c7:d6:a3:06:9d:42:
         10:c1:11:3c:b2:0a:e7:4c:d9:44:74:b0:db:19:9f:db:d8:52:
         ab:3c:c7:35:1d:02:59:db:92:32:63:b3:dc:d3:57:ff:8a:ca:
         ba:ce:92:03:59:ac:7f:77:de:09:95:61:67:07:d1:0b:17:98:
         6d:6f:52:9f:87:78:f9:c5:89:0c:f3:20:7b:8b:de:96:67:08:
         51:0f:f7:3a:70:0d:e3:b9:7e:3c:ce:fe:60:d5:9f:c6:bd:95:
         09:18:3c:09:d1:ed:db:33:de:a9:19:e9:1c:37:9b:fd:48:e2:
         56:3d:03:2a:fd:87:0e:31:8a:4c:a0:64:50:7f:2f:04:4d:e2:
         cc:f7:9f:bf:01:66:81:e8:99:56:9e:ae:78:08:22:37:34:1e:
         ea:b3:9b:2f:2c:c3:62:ae:03:93:17:4e:b7:0c:ea:fd:35:0f:
         c8:0b:3b:7d:ca:4d:76:76:e9:c8:22:b5:ee:11:cc:67:f9:1d:
         9e:b8:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org