Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa
File:                     34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (raw, json)
Hash identifier:          6BuPUgfKpHcFm1gU2ZoPZWo0BluF7+XrXWc0lJXQ8jc=
Subject key identifier:   C3:92:39:65:F7:41:E9:A5:E8:AD:0D:2A:05:74:94:0D:57:4B:D5:F5
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       51A5C764FB00013CDCE252DBDB993ECB38A0C4D4
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:08 +0000
ROA not before:           Mon 12 Aug 2024 17:05:08 +0000
ROA not after:            Mon 11 Aug 2025 17:10:08 +0000
asID:                     267121
IP address blocks:        45.229.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a5:c7:64:fb:00:01:3c:dc:e2:52:db:db:99:3e:cb:38:a0:c4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:08 2024 GMT
            Not After : Aug 11 17:10:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:e6:da:40:1f:f1:59:c7:0c:7a:89:ac:ed:
                    fb:5f:34:52:de:d5:1c:8f:cc:ee:83:46:b7:43:62:
                    b5:f3:42:8e:24:c9:87:17:1e:ea:49:72:b8:bc:66:
                    b7:ed:fb:b3:8d:c0:d7:c6:de:6e:5c:97:90:b1:c5:
                    31:5e:0b:61:4a:93:0f:87:68:44:26:3b:92:c3:ba:
                    47:7b:6c:e3:47:43:3e:cf:21:33:c8:c7:32:8b:d0:
                    86:2c:a0:7a:cc:34:e8:6d:09:e8:d2:7e:08:6a:ad:
                    d8:eb:2f:21:37:ca:b3:39:eb:a5:79:c1:aa:25:5e:
                    d9:74:42:f9:cc:c9:be:f1:c1:85:fe:ab:78:52:14:
                    57:29:98:6c:9c:20:a9:3d:7f:03:c6:a3:44:10:4b:
                    6a:9c:84:c8:cd:87:d5:6c:be:fb:e9:60:a4:d8:39:
                    45:a8:3e:ee:0b:1a:71:ed:e9:fd:10:c1:b7:f1:b6:
                    d1:ac:2a:73:2a:8b:46:a6:9b:fd:97:2c:fe:7e:35:
                    56:8e:1e:b0:b1:dc:35:b8:f6:5f:01:b0:e4:70:b1:
                    6b:cd:d4:9e:ec:c2:15:40:3c:bb:61:e0:a6:e1:03:
                    6f:13:85:4b:32:15:b1:d9:d1:5c:31:7d:3e:59:6a:
                    1e:de:de:38:19:04:3f:93:06:50:a6:b2:83:f5:e4:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:92:39:65:F7:41:E9:A5:E8:AD:0D:2A:05:74:94:0D:57:4B:D5:F5
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:1e:f5:55:fd:0e:68:4b:27:13:af:04:be:95:21:dd:6e:
         b5:8f:c9:e4:33:ae:17:df:e4:f2:9a:e2:d8:f1:c7:86:f5:62:
         0f:37:13:f5:1c:83:64:68:72:35:2e:8a:da:3c:3e:e3:d9:4e:
         37:f5:ab:22:f2:15:c0:37:1a:b5:92:2b:7c:70:3d:b8:51:37:
         14:fe:90:c5:0b:58:fe:56:fa:80:5a:6a:a0:24:31:96:74:dd:
         6f:2d:67:70:31:25:97:ec:27:5a:ea:6a:18:73:68:6d:fc:a8:
         7c:7b:d2:c8:64:22:b3:fa:72:af:a5:df:42:da:f9:61:ff:42:
         6e:d4:7e:52:49:ae:2c:c5:8e:dc:d2:81:37:bd:4f:1e:92:69:
         e6:1c:06:1f:75:f0:37:63:43:94:ed:63:ca:03:71:3e:fc:d4:
         e4:9a:e3:4a:11:40:32:49:78:2d:ec:1d:c1:66:f4:fa:c4:a0:
         7b:c8:15:1d:4b:72:ce:86:c9:ec:a8:65:8b:4a:e9:2e:43:97:
         ef:09:84:4e:df:e5:af:69:c8:45:bb:4e:87:e7:fc:8c:1b:28:
         fe:9a:68:17:c6:d5:07:12:06:05:67:8e:a0:e7:5e:d0:9a:cc:
         7c:92:4b:00:cd:61:d4:c8:5f:68:5f:05:37:27:73:88:58:13:
         64:3c:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:14 2024 by rpki-client on console-fra.rpki-client.org