Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/34352e3136312e3234362e302f32332d3233203d3e20323638343834.roa
File:                     34352e3136312e3234362e302f32332d3233203d3e20323638343834.roa (raw, json)
Hash identifier:          LOqI57OYRUUCjt4fa6+vUn2pzEJNu91IpfbaQyoTMHs=
Subject key identifier:   FC:51:F5:9A:48:0F:2F:98:98:88:5C:F9:BF:33:94:3E:DA:CA:E8:B8
Certificate issuer:       /CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
Certificate serial:       3CA484EBD1D9003E1FF57DD4805DF8C17AC9A22A
Authority key identifier: 31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/34352e3136312e3234362e302f32332d3233203d3e20323638343834.roa
Signing time:             Thu 04 Apr 2024 01:58:51 +0000
ROA not before:           Thu 04 Apr 2024 01:53:51 +0000
ROA not after:            Thu 03 Apr 2025 01:58:51 +0000
asID:                     268484
IP address blocks:        45.161.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 20:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a4:84:eb:d1:d9:00:3e:1f:f5:7d:d4:80:5d:f8:c1:7a:c9:a2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
        Validity
            Not Before: Apr  4 01:53:51 2024 GMT
            Not After : Apr  3 01:58:51 2025 GMT
        Subject: CN=FC51F59A480F2F9898885CF9BF33943EDACAE8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:40:d4:52:b1:d5:00:d2:a5:80:02:06:b8:
                    cf:5f:8d:41:0b:f7:4d:21:21:22:e6:3d:36:03:d4:
                    e9:23:ff:71:89:ee:25:86:58:e0:09:e3:f8:28:d2:
                    6c:2c:2c:15:01:d8:7e:5b:db:74:f6:1b:3f:2b:a8:
                    0e:94:f4:71:25:84:e8:20:66:a7:71:7f:90:07:45:
                    14:ec:5a:70:63:cc:58:c3:89:22:72:69:41:7c:db:
                    4f:41:00:97:94:aa:37:38:35:23:4b:59:6e:f3:79:
                    b0:6f:86:0e:c1:f2:d8:d6:84:5e:46:2d:ac:25:7c:
                    e2:9d:87:06:f5:cd:5d:2b:e4:9a:54:32:b5:5b:72:
                    1c:b2:fb:4c:bc:1c:c3:e6:eb:b1:08:f3:ad:25:13:
                    40:fb:7f:d2:1f:cf:bc:96:be:4b:07:af:df:f0:60:
                    1e:de:32:76:c1:7e:bb:43:24:d5:a1:90:80:f0:01:
                    2e:de:c8:ab:50:2f:0a:5b:e7:98:f7:97:0b:52:b7:
                    cf:cd:d6:2a:16:48:79:8d:15:ae:41:6a:9e:eb:08:
                    d7:2f:de:4b:86:5a:cc:a2:03:c1:fd:fb:93:dc:9d:
                    9a:bb:c5:bb:15:97:82:11:28:04:b1:5f:6e:ea:0a:
                    2a:9a:2c:80:77:93:ed:de:dd:a3:06:9d:5d:d6:ae:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:F5:9A:48:0F:2F:98:98:88:5C:F9:BF:33:94:3E:DA:CA:E8:B8
            X509v3 Authority Key Identifier:
                keyid:31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/34352e3136312e3234362e302f32332d3233203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:87:71:ba:8c:d2:38:a2:d5:5d:0d:45:ee:e2:ae:58:40:
         25:71:6d:9b:1b:f3:7d:2d:f7:3b:a4:13:e4:33:95:d6:2d:49:
         00:85:c6:b4:fc:28:11:58:40:5c:8e:7d:a7:60:71:37:6b:96:
         aa:83:5b:15:ab:a1:ee:37:e8:a0:1d:7a:cf:f5:8a:3f:39:3d:
         9b:8e:c5:c2:6b:14:5b:7f:99:19:08:8a:d2:9b:37:30:37:50:
         4c:ab:65:14:8c:9f:8f:43:e6:ca:76:33:60:95:37:9b:66:cf:
         95:bd:a8:b5:7c:2b:57:2f:f6:96:be:06:69:bc:cb:73:9a:a0:
         99:90:a2:af:6d:b7:9c:24:07:00:fc:23:41:5b:9f:da:d3:2b:
         1a:b8:7b:b1:e9:c1:20:40:ff:70:97:06:92:a9:9d:c6:c3:2c:
         40:d9:aa:67:b2:24:d4:ff:a1:1b:ba:99:41:22:50:6f:a6:c7:
         a1:20:e2:2b:df:e4:1f:e9:df:40:8e:e2:9c:0e:3f:54:db:48:
         33:9c:da:74:a0:f9:52:50:f6:3c:5c:7b:f4:4e:16:2d:f0:2c:
         c3:23:b3:c0:07:28:c9:3d:1d:18:26:d6:e8:ba:a3:cc:ec:cc:
         7e:a3:e6:2d:b5:53:d5:85:70:c4:56:54:1e:68:6a:d5:e2:5a:
         3d:97:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:51:14 2024 by rpki-client on console-ams.rpki-client.org