Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233382e302f32342d3234203d3e20323637333836.roa
File:                     34352e3233342e3233382e302f32342d3234203d3e20323637333836.roa (raw, json)
Hash identifier:          zSnsBEjyprut42gZ3YehZz81FYegXVW1Xq8uFSESf98=
Subject key identifier:   8A:B3:C1:EC:06:07:31:FD:4A:8C:72:D3:1F:9B:C2:1D:09:34:57:B1
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       3CD2BE1071A3D87B22BB820243562F60DC75B537
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233382e302f32342d3234203d3e20323637333836.roa
Signing time:             Thu 01 Aug 2024 11:59:01 +0000
ROA not before:           Thu 01 Aug 2024 11:54:01 +0000
ROA not after:            Thu 31 Jul 2025 11:59:01 +0000
asID:                     267386
IP address blocks:        45.234.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Oct 2024 14:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d2:be:10:71:a3:d8:7b:22:bb:82:02:43:56:2f:60:dc:75:b5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Aug  1 11:54:01 2024 GMT
            Not After : Jul 31 11:59:01 2025 GMT
        Subject: CN=8AB3C1EC060731FD4A8C72D31F9BC21D093457B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:c6:11:62:12:b3:ac:4c:a8:3c:cf:18:e3:
                    8d:2d:2c:28:da:72:a5:d9:a7:32:3b:7c:35:d5:00:
                    92:ec:c1:e8:ca:a8:0b:f8:c4:3d:7a:3d:73:0b:00:
                    2e:6d:9e:ea:56:97:69:ac:7a:79:78:7b:ac:3f:38:
                    76:06:c3:f6:a2:60:60:2b:63:1b:03:95:09:fa:db:
                    50:74:cb:da:4e:b2:26:47:9d:d8:b3:76:68:d2:ca:
                    c7:87:32:45:7f:d7:08:3e:bc:a0:32:9f:39:f5:ab:
                    ee:88:b6:2d:0a:9e:62:08:97:c7:c9:00:cb:1a:5d:
                    e0:de:20:15:80:fb:77:2c:8b:22:bf:e1:78:2a:67:
                    f1:3a:f9:fa:75:4e:7b:94:0e:cd:cf:27:0c:a7:43:
                    e2:7b:e6:6e:cf:4c:59:b7:31:e0:c1:d7:b0:aa:6f:
                    ca:b4:65:74:6b:aa:ce:78:29:3f:3f:5b:e1:c4:93:
                    c6:00:7e:f6:91:4a:81:66:22:d2:ce:88:81:11:d5:
                    cb:e8:30:73:c6:0a:e9:ce:e0:04:d7:6a:2f:ea:28:
                    76:1b:b2:97:3d:dd:ce:33:f4:49:69:a9:70:07:bc:
                    5a:dc:01:dc:b4:80:74:3e:e6:9a:53:88:bc:5b:5d:
                    4f:9e:1f:00:17:25:ba:0d:37:a1:9b:b0:44:4f:c7:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B3:C1:EC:06:07:31:FD:4A:8C:72:D3:1F:9B:C2:1D:09:34:57:B1
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233382e302f32342d3234203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:67:fd:3a:7d:9c:d2:e7:55:2e:02:83:13:05:44:e3:62:
         be:12:44:05:06:d7:bf:73:f6:cd:8a:61:90:04:43:56:61:1e:
         7a:1e:0a:08:54:5d:bf:8c:ef:af:e1:fa:ae:d9:68:44:22:65:
         ee:4d:1f:7b:3a:54:99:79:5b:37:00:39:e1:dd:e8:8d:08:21:
         0a:64:cd:b8:de:78:38:ea:70:6b:2a:8b:e7:5a:49:c6:67:5b:
         23:1d:1c:33:76:e0:28:f6:cc:71:f2:b5:c3:87:9c:56:cc:81:
         1e:60:48:60:15:17:fb:ad:f2:88:7b:62:80:a1:e8:b6:86:89:
         29:6f:a3:ff:85:d4:9e:ed:8f:10:33:a0:a5:a2:73:8f:b4:2c:
         e2:05:69:46:1e:c2:e0:30:b3:32:08:4a:82:d2:27:df:c1:9d:
         08:64:29:7b:40:3c:58:cf:3c:be:ee:57:86:22:a9:49:60:f9:
         c8:20:06:5a:7f:4d:7f:87:a6:c6:f4:a2:02:d1:e1:bd:64:57:
         0b:0d:14:41:ef:50:62:25:fa:54:25:52:6c:a3:69:10:6c:0d:
         fe:55:f5:54:72:ef:d0:91:b3:45:45:d1:c3:c0:10:a7:df:94:
         af:6c:dd:c9:c8:36:5c:85:a6:ef:f9:5b:9a:30:4d:1a:e5:b7:
         b5:3b:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 17:01:38 2024 by rpki-client on console.sobornost.net