Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa
File:                     34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa (raw, json)
Hash identifier:          tAcOw/c+Q+jGXzcaSdfRfDzJLkZXk8fihtoENecU1M8=
Subject key identifier:   71:A6:5F:E2:89:F2:08:7A:91:39:41:2D:4B:A6:39:E7:3C:F0:08:8D
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       37CB4FBE376DA70C9B6F2146134663E28F38ED03
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa
Signing time:             Thu 04 Apr 2024 14:01:14 +0000
ROA not before:           Thu 04 Apr 2024 13:56:14 +0000
ROA not after:            Thu 03 Apr 2025 14:01:14 +0000
asID:                     268638
IP address blocks:        45.164.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl
                          rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cb:4f:be:37:6d:a7:0c:9b:6f:21:46:13:46:63:e2:8f:38:ed:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Apr  4 13:56:14 2024 GMT
            Not After : Apr  3 14:01:14 2025 GMT
        Subject: CN=71A65FE289F2087A9139412D4BA639E73CF0088D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7b:77:f0:64:8a:80:29:9d:85:9e:0e:23:d3:
                    76:52:25:d7:0d:d9:89:05:27:0d:df:06:6e:8e:52:
                    f2:db:23:d1:35:52:fe:f6:7c:0d:1d:af:06:da:21:
                    f7:f5:d0:a7:02:f2:31:94:ca:6b:7c:eb:6f:e5:59:
                    32:75:29:26:80:ed:69:17:3a:25:c0:c7:36:0a:32:
                    a9:c3:34:13:bf:07:cc:1c:b4:eb:a3:bb:69:06:4e:
                    9e:d4:c2:36:79:52:b2:55:84:56:8d:03:84:f0:57:
                    f0:67:b2:35:04:3c:fb:6b:18:33:3a:8f:1e:09:a0:
                    69:30:87:ec:8d:5a:ec:45:0a:f0:a7:bf:4b:78:9e:
                    27:50:b6:f3:fb:ae:56:34:95:03:03:29:a2:e4:f2:
                    ed:79:9b:11:83:c8:f9:9e:8e:de:55:4c:48:85:ca:
                    da:af:5b:bb:4f:e6:37:de:7a:08:cb:d6:42:b3:3b:
                    ad:f5:f7:5a:83:3f:28:bf:bc:99:42:ab:7b:38:3b:
                    92:37:a2:f7:14:ca:bc:9c:7a:42:c5:72:23:f2:a5:
                    42:71:77:84:fd:50:1c:58:59:a6:70:11:c2:5d:d0:
                    77:3f:0e:3e:b9:41:94:3e:4f:2a:65:d0:d0:50:92:
                    38:0f:73:0d:c8:00:eb:bb:1f:aa:37:12:da:a7:1d:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A6:5F:E2:89:F2:08:7A:91:39:41:2D:4B:A6:39:E7:3C:F0:08:8D
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:af:dd:57:33:d3:71:bd:48:29:25:c8:14:5e:4a:74:6a:27:
         7f:75:70:72:81:02:49:22:4e:bb:20:a2:be:98:33:72:1b:b0:
         f1:b4:b2:4a:7b:fa:61:7f:4e:21:9b:45:fc:7c:00:4c:70:3e:
         43:f5:c1:04:11:62:da:3f:07:cf:77:da:29:8a:c8:20:07:6a:
         42:28:9f:af:b8:09:6e:13:6a:38:c3:f2:fc:21:92:29:9d:33:
         c4:dc:8b:1f:29:97:08:47:1c:3a:3b:1c:f3:d4:18:21:91:3a:
         50:bb:f9:63:c1:1e:fd:d0:0b:86:72:35:6e:f6:74:2a:a8:7e:
         71:93:6a:aa:20:62:f6:27:f9:8d:95:0e:85:29:e8:54:1b:03:
         50:95:33:88:99:9b:6b:83:8e:b3:80:93:a3:1f:43:a1:59:57:
         0f:06:2a:df:58:cc:52:e9:28:c9:e5:7c:09:67:3a:a3:f8:e4:
         85:50:76:41:c3:83:fd:7a:b3:ab:65:ab:08:d1:fa:39:74:23:
         b5:ce:de:60:9e:4b:35:27:83:1f:04:2f:0e:53:65:8c:7c:36:
         a7:38:a7:5e:bf:0b:02:2f:ca:7a:dd:a8:85:54:d5:92:83:fb:
         6e:e4:a4:4e:10:6b:52:6c:02:73:95:69:06:1d:1f:90:4b:9d:
         e3:dc:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:46 2024 by rpki-client on console-fra.rpki-client.org