Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
File:                     34352e3233362e37322e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          a8AT+NA0XUuF9f8EFBNL7RjFiCbdUD3BVDg8ZNS0GJw=
Subject key identifier:   F9:68:19:DA:13:4E:E0:9F:FB:58:1A:77:EE:3C:1A:FA:2D:F0:67:E5
Certificate issuer:       /CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
Certificate serial:       6897D2FB5263017C5DC8B670D53EF9E5B98A1647
Authority key identifier: 99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
Signing time:             Thu 12 Sep 2024 15:09:29 +0000
ROA not before:           Thu 12 Sep 2024 15:04:29 +0000
ROA not after:            Thu 11 Sep 2025 15:09:29 +0000
asID:                     271478
IP address blocks:        45.236.72.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:97:d2:fb:52:63:01:7c:5d:c8:b6:70:d5:3e:f9:e5:b9:8a:16:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
        Validity
            Not Before: Sep 12 15:04:29 2024 GMT
            Not After : Sep 11 15:09:29 2025 GMT
        Subject: CN=F96819DA134EE09FFB581A77EE3C1AFA2DF067E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:8e:fd:30:d0:4b:d9:97:ca:2b:b9:80:6d:
                    16:75:e7:bd:f8:93:f1:b3:87:89:eb:d5:50:8c:49:
                    7c:92:51:28:11:e1:0a:32:a9:14:55:b8:7a:07:cf:
                    b5:74:c7:0a:72:28:9e:f1:c6:b9:39:10:15:d8:05:
                    dc:0b:60:f0:67:13:b9:7c:d4:6d:c8:25:d1:e6:94:
                    f7:2b:06:09:75:9d:8d:66:36:bd:a4:57:99:da:d2:
                    a1:ae:d7:9b:9e:47:94:10:24:a9:a4:bf:f6:95:c8:
                    58:35:48:26:58:0d:87:25:23:df:96:ea:49:9a:ce:
                    0b:2d:04:0c:50:7c:0a:82:46:3f:b8:c2:26:81:f1:
                    84:46:8e:9a:c0:74:12:e1:16:f4:46:5a:06:24:c6:
                    66:87:6f:bd:38:12:04:e2:ba:1e:1f:1c:44:70:53:
                    0d:f6:4e:92:f8:99:21:30:79:5c:1c:cc:99:45:26:
                    2b:e7:d3:e9:dc:19:8c:a7:3a:10:94:99:fa:1a:b0:
                    89:9b:7a:56:f4:79:0e:ba:0c:90:f0:fc:b4:c2:93:
                    77:d7:a3:4c:d5:a2:fe:bd:29:6e:49:ed:09:71:5e:
                    af:8e:90:03:d4:54:ea:94:59:8e:a3:11:ca:02:dd:
                    40:31:48:1d:4a:ed:d8:3f:25:66:5c:45:82:02:0d:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:68:19:DA:13:4E:E0:9F:FB:58:1A:77:EE:3C:1A:FA:2D:F0:67:E5
            X509v3 Authority Key Identifier:
                keyid:99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:95:2d:78:27:85:fb:cc:26:98:74:ec:c7:54:74:b8:22:fd:
         bc:b4:5f:9d:4d:66:00:54:7c:ed:b0:5e:d9:13:08:f6:c0:57:
         9f:00:7a:28:bb:46:e0:58:89:6e:65:70:12:93:47:05:67:ce:
         03:72:dd:ab:24:25:04:bb:1f:bb:dd:9c:20:3c:23:81:c1:78:
         1b:43:da:58:3b:ed:e0:81:b5:e5:8f:d0:8c:e8:a7:36:a6:d2:
         7d:b5:e0:ec:61:8d:83:10:55:e0:1b:24:4a:f3:a4:5a:5d:aa:
         f8:8d:f1:60:5d:60:d0:cf:12:76:78:66:8c:7c:76:6c:da:86:
         81:5b:f7:b2:f6:e4:48:c9:f5:49:85:d2:5f:6b:ad:42:07:66:
         43:9b:b7:1f:a5:d5:05:ab:50:97:83:2c:dd:cd:56:49:a4:9a:
         a8:9a:6c:2b:c4:10:d9:fc:cd:89:ed:92:c1:c6:89:3f:01:15:
         cc:bb:dc:5e:92:82:ac:e7:5c:a5:be:1e:e1:bb:ad:2d:10:e0:
         c3:ed:c8:43:75:7a:2d:4f:05:70:27:12:f0:c4:6a:a4:7a:f1:
         cf:6f:12:f5:50:a6:1c:df:9e:fd:1c:f5:fe:c9:e5:e6:69:38:
         48:1d:2f:36:e6:8f:ed:79:fa:80:be:0b:ed:86:96:3d:db:62:
         e9:63:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:13 2024 by rpki-client on console-ams.rpki-client.org