Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133322e302f32322d3232203d3e20323639363732.roa
File:                     34352e3139312e3133322e302f32322d3232203d3e20323639363732.roa (raw, json)
Hash identifier:          RFHoDNnmp5t97ecFCnv/SYjxT3AktZtk9nFaFJdjRNE=
Subject key identifier:   D5:D1:5C:39:70:02:CA:6C:8E:77:A9:F9:C9:C8:54:BE:D0:2E:4D:A2
Certificate issuer:       /CN=EA8A97E97E20307979056DE90EAA41CF2EFC84BB
Certificate serial:       19D4B69242152971E05B539EFEB76381842BC266
Authority key identifier: EA:8A:97:E9:7E:20:30:79:79:05:6D:E9:0E:AA:41:CF:2E:FC:84:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133322e302f32322d3232203d3e20323639363732.roa
Signing time:             Tue 29 Oct 2024 14:11:51 +0000
ROA not before:           Tue 29 Oct 2024 14:06:51 +0000
ROA not after:            Tue 28 Oct 2025 14:11:51 +0000
asID:                     269672
IP address blocks:        45.191.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.crl
                          rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d4:b6:92:42:15:29:71:e0:5b:53:9e:fe:b7:63:81:84:2b:c2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8A97E97E20307979056DE90EAA41CF2EFC84BB
        Validity
            Not Before: Oct 29 14:06:51 2024 GMT
            Not After : Oct 28 14:11:51 2025 GMT
        Subject: CN=D5D15C397002CA6C8E77A9F9C9C854BED02E4DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:ca:f9:e0:3d:66:92:45:a1:35:48:38:76:
                    aa:b8:02:72:89:c8:4e:dc:4b:31:ff:79:c5:26:1b:
                    0d:12:0d:f8:e3:ce:4e:92:6b:97:d4:86:97:f4:7a:
                    aa:7f:68:44:31:d8:6f:26:2a:19:2c:5a:4e:6f:20:
                    02:c0:a6:c5:8c:0a:26:d7:c8:65:30:f4:ea:00:60:
                    98:a6:b6:5b:ee:b4:93:2e:84:c6:5c:bc:50:47:d5:
                    db:27:17:83:ef:f9:6b:b3:9e:00:8f:b6:07:7d:0b:
                    f8:5d:e8:89:86:20:c5:2a:56:ba:89:b6:e2:49:ca:
                    be:6f:f6:8f:a0:78:ee:47:bf:9b:67:06:c5:d3:53:
                    89:25:08:b7:7b:2b:2a:f9:c6:a5:1a:59:5d:3e:fa:
                    42:d7:df:5e:dd:3b:ea:db:10:d2:94:a4:84:1e:c6:
                    1b:c8:af:8b:ea:6c:1a:d6:a0:f8:00:ef:3a:cc:eb:
                    24:3a:3c:43:61:a5:ed:be:23:45:f1:8e:5b:6c:9e:
                    fb:d2:18:60:a4:60:92:53:3d:9f:0d:22:11:60:ce:
                    53:8f:79:3e:8b:e1:49:71:19:57:dd:02:0d:f9:80:
                    3c:66:24:90:82:3a:21:d9:b6:fd:5e:cb:a2:3d:79:
                    ee:94:72:68:b6:12:65:fa:a8:46:ab:c8:e5:57:3b:
                    17:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D1:5C:39:70:02:CA:6C:8E:77:A9:F9:C9:C8:54:BE:D0:2E:4D:A2
            X509v3 Authority Key Identifier:
                keyid:EA:8A:97:E9:7E:20:30:79:79:05:6D:E9:0E:AA:41:CF:2E:FC:84:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133322e302f32322d3232203d3e20323639363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:65:b4:f1:87:3b:5b:bc:8d:83:38:24:4a:20:52:b1:fc:
         75:7a:d8:00:00:84:82:c4:59:d8:50:d9:3d:c1:17:13:97:58:
         96:83:1b:5c:f8:14:8f:5a:b8:e3:81:6d:22:c7:50:22:7a:ce:
         40:72:dc:4d:26:dd:db:eb:e2:94:73:e7:b8:d2:6b:13:11:bb:
         89:00:1a:02:1e:f6:43:12:cd:53:f6:50:28:73:26:38:f9:b4:
         3c:30:7f:22:d8:05:d6:2a:8d:19:c0:4e:02:35:48:b2:c4:1e:
         ae:ed:5b:c4:b1:d8:47:7f:da:72:95:61:ff:52:2a:ef:dd:c2:
         93:0a:22:2c:4f:cf:73:94:63:5a:8d:5f:cf:94:fc:48:6a:db:
         ad:02:5a:88:50:91:33:20:fa:b2:2d:d2:96:ec:1d:f1:56:9e:
         16:60:37:24:f3:d9:29:5d:30:bf:64:9d:78:4e:11:8e:70:7c:
         39:65:04:68:89:29:2f:19:d1:8d:60:77:da:da:5b:6e:35:91:
         f1:7e:d0:aa:ae:a0:1d:21:34:62:5c:26:13:83:90:c4:5c:06:
         42:1b:89:d2:44:8c:70:ea:75:5f:20:4b:d4:5e:22:24:ea:36:
         af:7b:98:b9:72:99:15:ff:76:81:90:56:0f:7d:d9:5c:fb:0b:
         66:d4:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:24 2024 by rpki-client on console-ams.rpki-client.org