Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa
File:                     34352e3232362e37362e302f32322d3234203d3e20323636393834.roa (raw, json)
Hash identifier:          5hIp90OXGQGCge1EzQ2QEJ7RUHfT1Ytw+IHSFMjbu9Q=
Subject key identifier:   29:2D:7B:D9:65:D7:36:02:E9:65:81:65:CA:13:FD:12:8B:E0:65:76
Certificate issuer:       /CN=17F9C17DD5C3401ED9065ED1A7668F83546F7E07
Certificate serial:       1CF6F7607C35E1B891FB8841C5AFC141812E0795
Authority key identifier: 17:F9:C1:7D:D5:C3:40:1E:D9:06:5E:D1:A7:66:8F:83:54:6F:7E:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17F9C17DD5C3401ED9065ED1A7668F83546F7E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa
Signing time:             Wed 21 Aug 2024 14:12:06 +0000
ROA not before:           Wed 21 Aug 2024 14:07:06 +0000
ROA not after:            Wed 20 Aug 2025 14:12:06 +0000
asID:                     266984
IP address blocks:        45.226.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/17F9C17DD5C3401ED9065ED1A7668F83546F7E07.crl
                          rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/17F9C17DD5C3401ED9065ED1A7668F83546F7E07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17F9C17DD5C3401ED9065ED1A7668F83546F7E07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 14:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f6:f7:60:7c:35:e1:b8:91:fb:88:41:c5:af:c1:41:81:2e:07:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17F9C17DD5C3401ED9065ED1A7668F83546F7E07
        Validity
            Not Before: Aug 21 14:07:06 2024 GMT
            Not After : Aug 20 14:12:06 2025 GMT
        Subject: CN=292D7BD965D73602E9658165CA13FD128BE06576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:9a:bc:4d:a4:20:57:9c:77:0f:00:b2:bc:
                    13:25:57:81:bb:7c:f0:c0:b8:dc:a1:c6:bc:65:7e:
                    33:26:97:d8:9c:cd:e9:fd:23:02:22:d4:af:dd:1f:
                    02:8a:31:92:93:cf:d0:bd:9d:1e:54:a5:aa:8e:6b:
                    aa:21:a4:1e:d7:3f:5e:22:12:3a:d7:41:d7:09:f2:
                    85:08:5b:f7:af:15:16:d3:78:86:95:4e:a5:e0:2c:
                    7a:c2:79:90:1e:97:70:2d:ac:10:fa:5e:68:1b:10:
                    bb:1d:db:76:58:6e:d7:2a:e8:c2:7d:a3:08:b6:e1:
                    57:d3:8e:ae:e6:0f:7b:d6:ce:c8:89:5e:6a:4c:72:
                    89:63:14:a7:ac:95:8d:64:90:9b:e3:7e:56:0d:46:
                    71:e5:bc:ed:c1:0b:8e:08:8a:be:ae:8a:f6:ed:25:
                    01:9a:f7:d5:6e:c5:cf:6f:b7:c4:7f:be:af:27:ce:
                    2a:9d:a7:9a:a3:b2:63:8a:22:65:ee:9a:65:5b:f0:
                    9b:3f:4c:2b:a5:b1:bf:94:ed:8d:5d:0c:a3:75:6f:
                    0f:45:ec:07:e8:e5:1f:eb:4e:50:61:db:36:ec:a2:
                    e1:7e:fa:6d:6d:2a:f1:16:fa:da:6f:47:1f:e8:80:
                    75:16:6d:1a:7b:0e:31:e5:bb:c0:7b:5a:e6:de:1d:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2D:7B:D9:65:D7:36:02:E9:65:81:65:CA:13:FD:12:8B:E0:65:76
            X509v3 Authority Key Identifier:
                keyid:17:F9:C1:7D:D5:C3:40:1E:D9:06:5E:D1:A7:66:8F:83:54:6F:7E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/17F9C17DD5C3401ED9065ED1A7668F83546F7E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17F9C17DD5C3401ED9065ED1A7668F83546F7E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:01:f4:a4:20:62:f3:41:de:11:ba:ce:60:0c:f0:ec:1c:e2:
         4a:4d:38:f5:7a:16:86:1b:61:29:91:f2:b6:10:89:31:3e:77:
         18:30:06:ec:0d:8a:88:dd:d5:7f:f3:4d:3d:e1:ed:ed:cf:d8:
         1c:bc:9f:63:01:b9:6a:95:c9:73:f0:64:50:d2:26:1a:d3:3a:
         c6:cf:05:8a:43:55:49:7a:87:77:7a:90:dc:f6:b9:ae:85:aa:
         20:2b:b6:0f:57:c7:74:b6:10:51:f0:7c:fb:a7:2d:0a:97:06:
         0b:14:61:25:33:fe:6c:2b:83:21:e8:9d:bc:b3:ff:e4:73:a8:
         b6:b2:7e:02:1f:c4:ca:6c:ba:fc:75:e4:b7:d8:3c:07:ec:a6:
         7b:bc:10:99:85:35:53:30:ba:cd:45:86:d9:ee:d0:34:f5:98:
         c6:90:a2:1d:18:dd:c9:fa:80:12:b6:47:a8:80:80:2c:cc:d6:
         af:1b:37:a5:75:cf:5e:e0:c5:5e:10:34:42:32:46:78:20:e0:
         87:35:9a:13:e3:ac:77:3f:f5:be:11:16:49:ee:45:e5:c2:c6:
         53:8d:65:73:ae:d6:99:da:ff:72:76:61:ae:9a:e4:b3:09:65:
         04:46:ef:cf:7d:b8:a9:e5:42:42:75:8f:dd:e7:a4:2d:90:ca:
         87:b2:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 14:49:04 2024 by rpki-client on console-fra.rpki-client.org