Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
File:                     34352e3233362e37342e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          865WTy6EExJnS54h6ehTaNx2IfF6eix9b0Z3IGKmaG8=
Subject key identifier:   DA:A0:94:39:CD:FB:0E:8F:6C:5A:86:73:44:93:30:89:57:70:61:E1
Certificate issuer:       /CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
Certificate serial:       2095658A131B13C1AB021A9A3CF499F69C94B7A7
Authority key identifier: 99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
Signing time:             Thu 12 Sep 2024 15:09:43 +0000
ROA not before:           Thu 12 Sep 2024 15:04:43 +0000
ROA not after:            Thu 11 Sep 2025 15:09:43 +0000
asID:                     271478
IP address blocks:        45.236.74.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 18:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:95:65:8a:13:1b:13:c1:ab:02:1a:9a:3c:f4:99:f6:9c:94:b7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
        Validity
            Not Before: Sep 12 15:04:43 2024 GMT
            Not After : Sep 11 15:09:43 2025 GMT
        Subject: CN=DAA09439CDFB0E8F6C5A867344933089577061E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:e9:05:e5:d6:f8:85:25:b1:df:11:2f:99:
                    d3:79:e7:4c:1a:3a:dc:4c:c6:78:73:22:24:c0:d9:
                    95:f4:f0:9d:e7:5a:63:d7:1b:30:59:7f:f2:a3:18:
                    5e:59:f9:d8:4a:53:34:84:bd:d1:f0:fe:c0:66:b9:
                    9e:48:b0:e7:ea:72:d8:30:d4:0d:a1:e0:5a:18:24:
                    01:7a:a2:94:9d:53:8c:8f:b3:d1:06:84:53:de:aa:
                    bd:b9:d8:de:d3:f3:ea:0d:9c:fc:83:bf:47:16:a5:
                    40:f8:63:f8:b4:7f:ce:1f:e7:8d:7d:f6:67:57:89:
                    fb:93:2c:14:c9:2c:5d:54:11:69:38:74:71:ce:bb:
                    e7:0a:16:fa:14:86:1d:e8:2d:ab:c9:be:5e:e3:78:
                    ab:6d:1f:a2:86:be:15:32:b2:1f:07:d7:5c:16:27:
                    49:52:28:d7:a2:ec:06:0d:7b:67:4e:23:b0:65:38:
                    e2:ed:a0:2b:77:c6:93:e9:4e:0c:64:e9:ea:33:06:
                    cc:10:b2:07:b3:17:3a:a5:7a:fd:75:5b:c0:a9:94:
                    36:08:96:11:5b:5b:10:8d:35:34:8b:3d:d4:6f:5d:
                    d3:00:22:5f:be:01:3e:c1:03:3a:89:27:4b:64:96:
                    1a:0d:88:93:d5:30:48:07:fb:46:1b:a1:4b:98:c2:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A0:94:39:CD:FB:0E:8F:6C:5A:86:73:44:93:30:89:57:70:61:E1
            X509v3 Authority Key Identifier:
                keyid:99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:41:a5:a5:3e:b0:8c:1d:4e:d7:08:9e:e0:e3:45:e3:81:
         f1:0b:53:1b:ef:2d:24:0d:43:43:81:ef:01:28:5f:96:d5:47:
         1d:85:15:5e:62:8f:fc:f5:1c:8c:e2:6e:c6:94:ce:62:89:e1:
         32:0d:18:e8:ad:88:63:5d:de:ed:aa:69:11:4a:70:40:fb:9b:
         ec:f7:5c:a0:69:0a:f1:fc:e2:40:a9:4b:69:39:de:15:52:1b:
         f3:e8:e7:7d:59:6d:a4:41:37:6e:55:f7:8c:06:be:63:f4:ee:
         17:19:65:92:8c:8d:b8:56:2c:95:28:61:6d:fb:ae:7c:05:65:
         89:de:e4:4e:02:cb:25:2a:93:1a:30:b6:31:6d:3b:0d:8a:e0:
         06:f1:74:75:48:1f:c9:26:8a:60:ac:7c:5b:ca:e2:00:00:60:
         02:3b:e3:ae:3c:43:11:66:e5:36:f9:b5:d5:7a:36:9d:14:50:
         38:52:3a:9c:df:48:ca:b7:1e:a0:7c:ed:74:26:fb:f4:57:70:
         c6:78:8b:e3:ed:26:ac:52:97:e8:7a:30:b6:a6:ec:e6:b4:79:
         c5:fd:68:d2:33:80:45:f0:ea:fb:74:cb:a0:fa:d7:f1:11:c1:
         86:ec:1c:fb:0d:d2:0e:f4:bf:f1:95:92:3d:59:eb:8b:ea:bc:
         21:9b:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:56:42 2024 by rpki-client on console-ams.rpki-client.org