Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3131302e302f32332d3234203d3e20323638313036.roa
File:                     34352e3136392e3131302e302f32332d3234203d3e20323638313036.roa (raw, json)
Hash identifier:          rVnieJ+baOh5TfmN+1wgZ1R7+fBvDbQWKHupBaYZwzQ=
Subject key identifier:   E3:E5:9A:D6:D7:B9:2C:3E:20:F8:22:88:89:4D:56:F9:CE:62:76:38
Certificate issuer:       /CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
Certificate serial:       63FA07565D7FD2E967B262BEEA6AC45211E10095
Authority key identifier: 17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3131302e302f32332d3234203d3e20323638313036.roa
Signing time:             Wed 03 Apr 2024 22:15:34 +0000
ROA not before:           Wed 03 Apr 2024 22:10:34 +0000
ROA not after:            Wed 02 Apr 2025 22:15:34 +0000
asID:                     268106
IP address blocks:        45.169.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:07:56:5d:7f:d2:e9:67:b2:62:be:ea:6a:c4:52:11:e1:00:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
        Validity
            Not Before: Apr  3 22:10:34 2024 GMT
            Not After : Apr  2 22:15:34 2025 GMT
        Subject: CN=E3E59AD6D7B92C3E20F82288894D56F9CE627638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:80:85:f3:2b:6a:bc:e4:94:e5:26:9a:5b:
                    82:dd:4b:6a:2a:84:5d:d7:d7:80:da:90:f1:b6:fd:
                    14:41:09:35:63:7a:43:98:66:43:db:8e:ee:a6:cb:
                    2f:d7:d4:55:90:0c:08:19:10:66:9f:d0:7a:b6:62:
                    77:9f:5e:0f:24:61:d4:98:7e:7f:96:fa:13:c9:91:
                    6c:a7:1e:91:72:1f:ad:19:08:cd:ac:5a:18:f7:27:
                    15:15:e5:88:01:6a:b2:4e:0a:ba:8c:db:5a:35:19:
                    1d:8d:66:d1:74:c0:49:db:7c:98:98:52:84:97:93:
                    e7:4d:9a:92:c9:34:76:7f:91:91:6f:93:40:fd:d3:
                    b8:bf:90:cd:b8:bb:5d:ac:2c:5b:34:35:e7:ea:eb:
                    3f:c3:91:9b:e2:5f:7b:f0:1c:23:ef:ee:b0:7f:4f:
                    04:6f:d2:33:d7:bd:c5:70:c0:b6:7e:5d:07:37:1d:
                    24:15:58:4f:84:a9:42:b6:01:01:f2:fb:5c:75:2d:
                    b2:b7:76:42:b6:54:38:d2:50:dd:ed:2d:cb:da:0e:
                    43:5b:df:2d:4c:99:4b:cd:58:a4:6b:4d:c4:7e:d2:
                    78:1f:8c:11:52:1a:ee:82:62:0d:ae:6f:22:79:ed:
                    e6:e7:26:5b:cc:d3:f5:de:4e:88:77:a2:20:4a:71:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E5:9A:D6:D7:B9:2C:3E:20:F8:22:88:89:4D:56:F9:CE:62:76:38
            X509v3 Authority Key Identifier:
                keyid:17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3131302e302f32332d3234203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:f2:bb:4f:63:e9:b9:2c:de:96:22:69:a5:a4:ea:19:25:dd:
         a5:ab:a3:68:86:bc:99:69:19:a9:75:c4:90:f8:4e:11:b6:6f:
         68:a8:41:f5:d4:bd:f2:d6:c9:bd:7f:eb:8e:c5:f9:b7:6b:29:
         16:0a:bc:95:98:a6:80:78:83:57:81:53:e3:3b:61:ec:e0:1a:
         dd:ad:64:83:c3:67:a1:4a:bc:f2:56:28:78:35:73:9b:97:ba:
         1b:3e:5a:f9:c6:b0:50:a8:fe:42:21:c6:99:b5:ae:e3:4f:9e:
         3b:22:77:c8:24:9d:7b:1e:6c:6c:6e:93:78:4b:75:29:48:ed:
         42:86:e0:d4:02:33:60:0e:5a:92:be:45:88:9c:db:46:a4:9d:
         df:0f:81:87:4e:ae:82:a1:ae:ef:7d:eb:f6:03:76:0c:6d:ea:
         54:7c:04:23:38:eb:51:a4:04:e8:1c:f4:a3:a7:c9:dd:14:55:
         f4:d7:ad:76:64:00:7f:96:50:dc:a4:59:96:ec:09:98:ae:d5:
         76:d4:4a:42:ab:96:bd:88:11:bf:7b:d7:b9:4c:e8:20:db:de:
         49:cf:03:ba:80:34:7f:2b:c7:52:e7:d2:37:33:27:6f:56:7f:
         cc:73:1b:79:b0:fb:62:12:3b:7d:cf:46:79:46:6f:3d:82:e4:
         8c:1b:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org