Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39372e302f32342d3234203d3e20323639333732.roa
File:                     34352e3138352e39372e302f32342d3234203d3e20323639333732.roa (raw, json)
Hash identifier:          FAygBOMVJXrgSUoQbZ8bHUDdjNJb0BPH/t/zDJT1jT4=
Subject key identifier:   35:51:1E:C5:51:5B:C8:68:D0:7D:DC:CF:5E:0F:BD:74:8D:8A:E3:89
Certificate issuer:       /CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC
Certificate serial:       5E427226D8C1FEFC71038FFF7FA5674F8314F516
Authority key identifier: 9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39372e302f32342d3234203d3e20323639333732.roa
Signing time:             Thu 04 Apr 2024 07:32:21 +0000
ROA not before:           Thu 04 Apr 2024 07:27:21 +0000
ROA not after:            Thu 03 Apr 2025 07:32:21 +0000
asID:                     269372
IP address blocks:        45.185.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.crl
                          rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:42:72:26:d8:c1:fe:fc:71:03:8f:ff:7f:a5:67:4f:83:14:f5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC
        Validity
            Not Before: Apr  4 07:27:21 2024 GMT
            Not After : Apr  3 07:32:21 2025 GMT
        Subject: CN=35511EC5515BC868D07DDCCF5E0FBD748D8AE389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:1d:a8:52:58:9e:3a:98:d8:ab:ba:3f:11:
                    75:df:ad:b7:79:73:75:92:f7:f2:36:48:cf:5d:10:
                    dd:aa:92:fa:0f:0a:52:bb:aa:50:a4:e5:3f:dd:0f:
                    0b:c4:75:16:52:b3:fb:af:66:88:fd:61:80:0c:5e:
                    36:3b:32:0f:6f:7e:62:82:38:e2:e4:bf:a2:9c:78:
                    11:04:3a:97:14:aa:76:49:f0:d0:60:92:80:cf:48:
                    f8:3b:3d:60:76:50:0e:af:6b:52:bd:0d:c8:d2:66:
                    44:f9:16:7c:a3:41:1c:cc:98:42:37:8b:08:73:84:
                    fb:30:d0:38:de:33:41:d4:0a:8e:91:41:db:af:52:
                    88:97:fb:fa:2f:ce:c9:d6:bd:78:52:c4:65:a2:18:
                    85:88:95:fb:12:5a:3a:29:ba:d6:91:63:8d:2d:10:
                    80:e0:3d:3d:18:97:2c:3f:20:28:4c:67:56:44:72:
                    61:f5:90:b5:04:44:b9:b9:a4:a4:c6:37:38:43:21:
                    a2:66:75:dc:de:f0:5b:11:b3:ec:cb:15:c3:15:6f:
                    e5:6b:90:22:9f:87:ef:8b:1e:77:ea:36:2b:ec:92:
                    02:3d:01:c1:65:31:18:7a:9f:1b:23:9f:db:22:88:
                    6a:02:2a:47:a4:0e:43:98:6c:9d:f0:e7:24:50:48:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:51:1E:C5:51:5B:C8:68:D0:7D:DC:CF:5E:0F:BD:74:8D:8A:E3:89
            X509v3 Authority Key Identifier:
                keyid:9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39372e302f32342d3234203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:65:94:3f:8f:26:d8:4b:67:cd:f5:4c:b2:a5:95:d7:e3:
         32:ac:8d:ef:65:a5:d3:e3:65:ce:99:d7:81:ad:ac:4b:a5:7f:
         fd:17:0c:cc:48:17:6f:65:a6:29:ff:2d:35:7e:23:cd:35:0f:
         9b:33:93:64:cf:08:55:71:5f:8b:5d:88:9b:c0:11:70:2c:ea:
         1b:e6:5e:b0:84:93:16:95:4b:9c:20:54:a1:78:f4:9d:8d:a1:
         5d:f8:32:61:47:2b:0c:a2:c8:78:f1:75:14:d5:86:82:35:ba:
         92:4b:13:0d:fb:39:29:24:96:ac:bd:bb:26:20:76:12:8d:ee:
         39:6e:7c:8f:b9:47:54:a7:f4:e7:11:d3:23:e3:c0:8b:6b:d8:
         4b:19:6c:1f:8a:b0:98:67:34:e4:b9:42:84:95:7c:37:a3:db:
         91:ca:76:e7:71:e1:69:a3:36:6e:4a:24:23:9e:05:6a:55:98:
         3b:5b:b1:a0:fb:c0:68:45:7c:45:e7:03:d7:64:fa:8d:b2:ae:
         52:8b:8b:25:24:33:62:40:0b:b0:f4:90:3a:6e:c0:da:2a:de:
         5b:7e:d4:33:42:af:95:ff:61:dc:40:37:6f:10:b9:17:bb:a1:
         b1:41:32:90:2a:90:9f:d9:2e:a9:09:22:02:a0:bc:b1:44:86:
         c3:01:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org