Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136342e302f32322d3234203d3e20323731303435.roa
File:                     34352e36352e3136342e302f32322d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          WWqOr5aMxpDdRrhHf2UBuqkKRxZj67u8sYFjrFU99Lc=
Subject key identifier:   97:84:2B:73:7C:32:9A:EC:98:A0:BD:85:2A:5A:06:72:54:02:44:5F
Certificate issuer:       /CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
Certificate serial:       3ED9876320CFB695030C00E00B37E03A3DE9B5AE
Authority key identifier: 22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136342e302f32322d3234203d3e20323731303435.roa
Signing time:             Thu 04 Jul 2024 19:07:31 +0000
ROA not before:           Thu 04 Jul 2024 19:02:31 +0000
ROA not after:            Thu 03 Jul 2025 19:07:31 +0000
asID:                     271045
IP address blocks:        45.65.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl
                          rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d9:87:63:20:cf:b6:95:03:0c:00:e0:0b:37:e0:3a:3d:e9:b5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
        Validity
            Not Before: Jul  4 19:02:31 2024 GMT
            Not After : Jul  3 19:07:31 2025 GMT
        Subject: CN=97842B737C329AEC98A0BD852A5A06725402445F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:3f:9d:ea:6c:e6:f5:a4:f5:e0:53:04:a3:
                    e4:d6:58:1d:04:5a:e3:8f:10:36:83:49:8b:61:4b:
                    ef:d9:11:68:35:7c:9e:c3:03:d7:a4:a2:aa:88:70:
                    37:e7:1c:2e:4f:30:bd:fd:9e:0a:3c:ce:35:f6:e7:
                    57:44:9c:68:61:8f:19:e6:9c:84:36:ec:39:22:9b:
                    d6:7b:5a:6a:8b:78:06:31:19:78:83:15:79:5d:51:
                    3e:48:c8:4b:77:36:f6:59:ef:bc:cd:56:82:2a:0b:
                    77:42:a0:4c:74:b2:32:0e:67:51:b6:78:ae:8f:ca:
                    d6:cd:9d:ab:a1:cb:91:13:0e:32:71:c1:4e:d8:1d:
                    e9:75:9f:9e:ed:d4:4f:0a:29:95:be:31:33:b7:da:
                    fa:a0:0d:d5:8e:ad:d5:55:5c:9a:b6:c1:ec:82:86:
                    7f:c0:b5:c9:c8:fa:4b:a5:1d:cd:b5:51:ac:ff:5f:
                    51:7c:f8:a6:1f:f9:76:fb:ad:6b:fd:8a:5e:14:20:
                    7d:48:a3:80:41:c0:37:76:13:94:0d:0d:69:9b:7f:
                    91:74:16:2e:67:23:4f:c0:1b:4d:10:4c:dd:38:b2:
                    00:d2:00:f6:45:de:ab:34:d1:76:d0:3b:e4:f8:8c:
                    ef:30:8c:c6:d8:d4:71:d8:3d:c4:37:55:a0:47:bf:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:84:2B:73:7C:32:9A:EC:98:A0:BD:85:2A:5A:06:72:54:02:44:5F
            X509v3 Authority Key Identifier:
                keyid:22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136342e302f32322d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:0a:0e:cd:25:82:74:42:7b:3e:2a:9e:25:d0:6c:31:ac:
         1a:30:b4:bb:48:b7:a7:43:8f:63:18:f1:af:89:a2:83:b0:a9:
         c0:4c:08:bc:83:d8:84:f0:ae:d4:5e:12:23:81:14:13:e9:73:
         95:71:fa:b4:9f:53:86:a6:41:0b:69:01:1b:cf:18:fd:8b:43:
         bd:8a:40:c0:c1:c8:01:90:ca:05:a3:2a:a1:8f:1b:72:55:02:
         88:a4:23:b3:b1:fd:f2:cc:54:fd:b1:62:2a:11:39:4f:64:88:
         d8:fa:51:5f:0b:5b:a9:4b:4a:d4:29:a4:c8:c3:c4:c2:a9:3b:
         3a:4a:51:c7:48:02:26:e7:da:5f:ff:9c:d9:96:a5:96:24:52:
         62:37:93:ae:5c:0e:96:11:98:c9:cd:5f:93:4b:d0:19:94:33:
         b5:0b:10:52:11:c8:61:c7:34:d0:57:7a:3e:25:b3:55:ef:3e:
         1a:f5:b6:94:f5:51:ee:71:34:37:da:7c:c0:c7:31:52:7e:9d:
         63:66:64:b4:56:57:bb:ac:39:9a:f7:e8:c3:7f:ac:0e:af:d8:
         e3:95:a9:ab:27:5b:99:37:d1:eb:bf:92:ff:d2:7a:21:0c:bd:
         44:6a:10:c8:32:3e:c3:46:8c:ff:4e:17:83:bb:4b:b4:5f:47:
         30:e0:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:52 2024 by rpki-client on console-fra.rpki-client.org