Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/34352e3136352e36302e302f32322d3234203d3e20323638363538.roa
File:                     34352e3136352e36302e302f32322d3234203d3e20323638363538.roa (raw, json)
Hash identifier:          kKVMRuc29JaRp7AtWdHLGQmD2SLTZvYD+53MTtlwoBY=
Subject key identifier:   F2:9E:7F:0B:A3:16:5F:15:D9:27:90:71:47:06:73:95:1B:E8:D4:F3
Certificate issuer:       /CN=AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6
Certificate serial:       1C463E6A8A9064BE88B3A2EF9F393D43E79E0A80
Authority key identifier: AD:6D:43:80:AF:CD:C7:5E:B0:1F:AA:58:AA:53:B5:19:81:D6:FA:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/34352e3136352e36302e302f32322d3234203d3e20323638363538.roa
Signing time:             Tue 20 Aug 2024 13:35:29 +0000
ROA not before:           Tue 20 Aug 2024 13:30:29 +0000
ROA not after:            Tue 19 Aug 2025 13:35:29 +0000
asID:                     268658
IP address blocks:        45.165.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.crl
                          rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:3e:6a:8a:90:64:be:88:b3:a2:ef:9f:39:3d:43:e7:9e:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6
        Validity
            Not Before: Aug 20 13:30:29 2024 GMT
            Not After : Aug 19 13:35:29 2025 GMT
        Subject: CN=F29E7F0BA3165F15D9279071470673951BE8D4F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:be:8e:b0:69:10:bf:c9:78:1b:5b:e1:f8:
                    89:a2:22:fa:37:78:27:01:88:b2:15:5f:7a:73:25:
                    fd:b8:b1:19:bc:f0:bf:a2:08:96:38:e5:0f:e0:8b:
                    a1:ad:ab:46:c9:6e:13:41:6b:dc:d4:e1:34:f9:83:
                    56:0f:5f:14:d0:d8:b9:a9:47:89:cf:3a:be:43:c0:
                    02:41:b6:93:2d:54:c9:a6:2d:a8:3b:2b:fc:e8:3c:
                    b5:0f:fc:a7:3a:66:dc:12:54:16:2a:64:16:62:bc:
                    82:46:45:48:65:05:23:c7:b6:45:b6:9d:fa:cd:5a:
                    be:5e:e9:0c:53:ef:c0:64:4c:1d:7a:7d:a8:3c:c1:
                    4e:e7:b1:1a:ee:cb:14:f4:17:d6:f9:39:50:70:34:
                    fd:67:df:b2:4d:ed:dd:2e:d1:8f:68:05:ff:eb:22:
                    2e:ed:e6:dc:85:6c:57:1d:f6:95:80:61:fb:e9:6f:
                    e4:6e:85:b2:8e:a5:91:26:fb:59:c9:ee:0b:f2:e2:
                    88:be:a9:6b:67:0d:0b:5d:17:3e:12:52:b0:c7:50:
                    8f:71:ea:80:d6:82:79:1e:84:3c:56:35:86:1b:05:
                    ec:e6:d0:4c:7b:b4:b1:f6:f4:e6:c7:bc:44:0a:07:
                    4b:d2:46:b0:79:e5:c0:78:f8:5c:0f:3f:92:5b:ea:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:7F:0B:A3:16:5F:15:D9:27:90:71:47:06:73:95:1B:E8:D4:F3
            X509v3 Authority Key Identifier:
                keyid:AD:6D:43:80:AF:CD:C7:5E:B0:1F:AA:58:AA:53:B5:19:81:D6:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/34352e3136352e36302e302f32322d3234203d3e20323638363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:5b:c8:1c:53:b8:51:96:33:4f:3e:a0:df:7a:fe:76:65:a7:
         ea:7f:63:8e:2f:69:79:94:10:0a:74:c0:54:81:db:25:d7:5b:
         0e:09:a2:e8:66:6f:76:40:c6:81:7d:17:51:8c:84:00:6f:e3:
         dd:56:aa:cf:e1:37:f7:5f:fc:29:5e:54:d6:5e:3f:eb:98:58:
         91:58:b4:ae:30:06:57:f4:54:62:7c:ac:77:1c:4a:ed:fc:98:
         4d:67:14:6b:8a:0c:b8:9f:0b:94:b0:5f:3b:71:0c:0b:36:b7:
         e4:8d:cd:15:e3:31:27:c7:33:f1:17:bb:b6:73:82:1f:76:eb:
         33:2f:a0:e7:45:ed:13:80:5f:d2:a6:95:9e:65:78:b0:7c:8c:
         f9:4a:4b:05:7e:f2:12:b8:0a:53:4a:67:0b:a6:a7:ec:55:c0:
         6b:29:ae:52:7f:a8:72:54:4a:c2:33:c1:30:ab:3a:ff:f5:bc:
         91:39:7b:bf:c1:af:84:c9:42:38:8a:5f:27:f7:66:5a:36:eb:
         05:fd:09:d1:9d:6e:a8:12:16:ad:c7:d2:e7:7b:97:57:a8:a7:
         23:1a:92:a5:62:0c:f2:2f:9a:3b:23:37:66:56:b4:68:95:ab:
         8f:be:27:df:a0:d7:33:ac:1d:fc:00:a6:36:e4:9b:fc:85:cf:
         98:39:c3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org