Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa
File:                     34352e3138352e39382e302f32342d3234203d3e20323639333732.roa (raw, json)
Hash identifier:          3mkNpbx57q4G6XyoO6Xc6yOIDF8r5i7EHJuM98T7erY=
Subject key identifier:   EE:36:C3:12:40:FE:87:E6:A5:62:11:54:E1:49:9F:04:9D:B2:0C:54
Certificate issuer:       /CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC
Certificate serial:       25CD7F30DE2E68D0F656F01BB97247C8FA6B29F7
Authority key identifier: 9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa
Signing time:             Thu 04 Apr 2024 07:32:21 +0000
ROA not before:           Thu 04 Apr 2024 07:27:21 +0000
ROA not after:            Thu 03 Apr 2025 07:32:21 +0000
asID:                     269372
IP address blocks:        45.185.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.crl
                          rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cd:7f:30:de:2e:68:d0:f6:56:f0:1b:b9:72:47:c8:fa:6b:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC
        Validity
            Not Before: Apr  4 07:27:21 2024 GMT
            Not After : Apr  3 07:32:21 2025 GMT
        Subject: CN=EE36C31240FE87E6A5621154E1499F049DB20C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:8e:50:6f:6f:87:d7:1d:2b:e1:a2:12:8b:
                    ca:ec:7d:95:e4:4d:29:36:20:51:44:ea:f6:f5:98:
                    5e:ae:17:66:ec:31:a4:a2:4a:30:5b:17:4a:68:d7:
                    54:ac:42:fa:99:1e:e3:57:4e:45:07:ac:b9:67:0e:
                    c4:f1:d3:f0:0f:a3:75:11:df:8a:4f:d9:ac:32:a5:
                    14:24:df:f4:bf:8a:9c:31:e6:2e:7d:5d:16:91:ad:
                    bb:02:4e:d6:fa:56:a4:3b:6f:b1:a4:13:1a:51:47:
                    2c:50:17:ae:4d:e8:d7:16:ee:b1:dc:92:fe:75:7e:
                    c8:ea:3f:66:7b:96:ae:34:ee:73:9d:e7:b9:1f:52:
                    55:df:fe:df:20:db:6a:08:ed:b3:3b:d3:78:2f:a7:
                    ad:6c:12:b5:08:0e:d4:c8:e3:85:b8:eb:8b:89:c3:
                    8c:cb:00:ac:a9:69:31:d1:f7:e4:8e:a5:62:52:34:
                    e5:28:c9:c5:c7:fe:d4:54:1c:a0:99:93:f2:2b:03:
                    e1:83:ed:bf:8f:90:94:d0:cf:c5:11:5a:b3:1d:a0:
                    7e:78:5c:ea:d0:58:28:a9:5b:f9:57:45:38:83:20:
                    ec:ce:95:09:eb:62:2f:30:bb:e4:ae:5e:61:6f:8d:
                    fe:0e:60:11:96:dd:8a:46:81:2c:65:20:24:b0:bc:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:36:C3:12:40:FE:87:E6:A5:62:11:54:E1:49:9F:04:9D:B2:0C:54
            X509v3 Authority Key Identifier:
                keyid:9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:c7:f0:12:49:4b:0c:16:dc:5a:e1:77:bc:f3:dc:e5:d5:
         d7:9d:c2:d2:1f:af:4a:d0:24:ea:1d:4d:f8:ee:09:c4:3e:7e:
         92:53:36:aa:5b:2e:fa:7e:0e:a4:62:41:58:77:c7:46:f3:f8:
         b0:83:2c:89:39:39:ba:d2:49:64:da:5d:1c:49:d2:5a:d7:3f:
         5e:6e:11:20:79:ab:66:85:31:d3:de:84:ef:2f:84:95:48:a2:
         fb:3e:65:b0:f6:2c:e1:32:02:75:44:7a:0f:fd:cc:ad:d8:b1:
         77:73:cb:f4:0f:21:14:13:4f:c2:de:36:97:dc:34:70:3b:2f:
         e3:5b:c7:b0:15:69:dc:ff:e2:69:be:68:b5:ba:de:a0:55:ef:
         1d:c8:a7:5a:ff:0b:7b:5b:c2:95:14:e1:2c:19:23:64:5e:07:
         33:0f:82:04:7b:92:60:66:ce:42:14:ce:31:ff:df:fd:2c:26:
         c5:cf:4d:cf:5f:56:f5:7e:aa:79:fa:64:96:81:cf:cc:9b:f0:
         d2:74:35:e0:39:e2:f0:7e:3e:e3:86:7b:27:19:9a:27:b2:06:
         b6:6c:b9:f0:1a:4c:13:b4:08:2b:04:fd:fc:ca:f1:57:10:0c:
         de:f6:29:ab:c1:59:4d:f9:ff:df:14:cd:07:ac:30:51:3f:23:
         e4:cc:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org