Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32322d3232203d3e20323638363338.roa
File:                     34352e3136342e3232342e302f32322d3232203d3e20323638363338.roa (raw, json)
Hash identifier:          vhktXx70dTL/KFb7ZeetyMYdgD0V9nkhlYU6lYcUIak=
Subject key identifier:   DD:1F:65:21:08:88:BE:DE:A3:64:FE:65:B2:B8:BE:F9:50:F6:31:87
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       2FD74C9724179351D7316A25C7F00FDD62EBE8E8
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32322d3232203d3e20323638363338.roa
Signing time:             Thu 04 Apr 2024 14:01:14 +0000
ROA not before:           Thu 04 Apr 2024 13:56:14 +0000
ROA not after:            Thu 03 Apr 2025 14:01:14 +0000
asID:                     268638
IP address blocks:        45.164.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl
                          rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d7:4c:97:24:17:93:51:d7:31:6a:25:c7:f0:0f:dd:62:eb:e8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Apr  4 13:56:14 2024 GMT
            Not After : Apr  3 14:01:14 2025 GMT
        Subject: CN=DD1F65210888BEDEA364FE65B2B8BEF950F63187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:27:58:09:61:26:2a:74:c9:46:39:c4:6d:
                    6a:87:6c:af:87:fb:5a:39:e2:48:7d:8e:05:2f:69:
                    5e:35:55:07:c1:c9:23:d1:86:54:2f:fa:b1:40:bb:
                    bd:34:58:c2:b9:3d:00:8b:6e:49:24:61:1d:18:55:
                    a5:58:82:f9:1a:e0:da:3e:cf:f5:63:10:d6:1b:26:
                    37:b4:80:12:36:be:1c:82:24:29:ef:3d:2e:5d:ad:
                    ba:92:b3:45:6a:56:0f:8d:9b:a5:23:78:27:53:d4:
                    14:2c:59:1c:ce:0a:c7:1f:3f:34:1b:87:32:c5:a4:
                    a7:eb:6d:38:b9:84:22:f3:9e:f8:90:1e:1c:1b:a4:
                    27:fc:dc:41:a5:47:35:af:e7:5e:e2:7e:ed:6c:a0:
                    e7:2d:9f:fb:08:b7:c7:f7:1f:18:93:a4:96:5c:0f:
                    2b:5b:24:a4:c3:e4:1e:06:97:57:35:7a:be:71:67:
                    5f:8d:2a:f0:9c:18:13:90:b8:30:7d:e0:a4:a7:28:
                    75:db:3d:33:b3:fc:6c:02:2a:df:20:a5:9a:5c:ad:
                    f8:fa:4e:ed:86:6f:96:61:01:64:40:ef:d8:ae:7a:
                    3b:01:7f:9b:66:0f:b8:5e:10:78:a0:f6:56:f6:5e:
                    c2:ba:95:3f:f6:2e:a9:09:a8:5f:ec:88:a7:45:0e:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1F:65:21:08:88:BE:DE:A3:64:FE:65:B2:B8:BE:F9:50:F6:31:87
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32322d3232203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:8c:98:28:7f:49:78:80:1a:c0:88:65:c7:a0:2e:f8:22:
         ab:08:13:69:9d:19:02:b7:aa:dc:d8:d9:6c:4c:ba:c2:6c:41:
         6f:c7:af:f6:f7:40:11:87:8b:f2:6e:89:c2:1b:9f:2a:48:ae:
         66:2c:c9:93:9a:e1:05:ba:fc:ca:50:91:00:34:46:5d:be:4c:
         61:d0:95:21:65:30:c4:03:7d:51:03:9d:a6:ea:a1:de:d1:ff:
         74:e6:59:d6:6c:14:f1:4c:a1:09:f4:d7:0a:0d:cc:8a:de:0c:
         20:81:83:13:c6:40:78:ef:ea:51:ef:97:59:d8:13:2a:49:dc:
         8a:7c:08:5e:6e:03:56:d6:d8:a1:90:59:91:a0:20:ec:77:7a:
         fa:aa:88:ed:f8:d7:51:b4:b7:9a:30:f6:7a:01:94:cf:aa:4a:
         07:fb:0b:36:4e:41:3a:13:94:bc:35:c0:fe:92:3b:0b:9e:9b:
         36:cf:83:31:76:bb:fe:d0:49:b3:94:d4:2c:58:f3:01:fd:97:
         55:f7:b2:65:05:ad:25:0e:36:36:f3:ef:b2:72:6f:0f:5d:41:
         1b:3f:ea:d4:03:22:b3:96:f8:42:99:9a:ba:f8:01:a9:72:33:
         c2:fb:f7:fb:c0:7d:2b:ce:e4:d7:46:e4:75:96:74:89:ce:dd:
         cd:8e:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:46 2024 by rpki-client on console-fra.rpki-client.org