Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/34352e3136312e3234372e302f32342d3234203d3e20323638343834.roa
File:                     34352e3136312e3234372e302f32342d3234203d3e20323638343834.roa (raw, json)
Hash identifier:          Ju9ENnYmALqeZpdTs6jEwzACo5LRdkEabAFvxCMI9Wc=
Subject key identifier:   F4:C4:0B:F2:42:C1:86:8B:EC:9E:F4:4D:77:0B:E4:06:9D:82:D5:4A
Certificate issuer:       /CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
Certificate serial:       707AEF99B653E1CCEB67ACAF5A5173A567A05376
Authority key identifier: 31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/34352e3136312e3234372e302f32342d3234203d3e20323638343834.roa
Signing time:             Thu 04 Apr 2024 01:58:51 +0000
ROA not before:           Thu 04 Apr 2024 01:53:51 +0000
ROA not after:            Thu 03 Apr 2025 01:58:51 +0000
asID:                     268484
IP address blocks:        45.161.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 20:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7a:ef:99:b6:53:e1:cc:eb:67:ac:af:5a:51:73:a5:67:a0:53:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
        Validity
            Not Before: Apr  4 01:53:51 2024 GMT
            Not After : Apr  3 01:58:51 2025 GMT
        Subject: CN=F4C40BF242C1868BEC9EF44D770BE4069D82D54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:c0:93:41:ca:48:0a:c6:99:81:99:e9:44:
                    ef:ca:82:88:58:a0:ee:99:a2:b6:ca:94:5a:2c:e8:
                    11:e2:7f:c1:cb:5d:19:da:9c:33:a3:68:5a:83:8d:
                    6b:6a:45:06:c0:99:1e:a6:0d:52:dd:ee:6c:f3:67:
                    3f:a6:9c:4d:98:df:eb:3a:ca:21:ea:d1:76:b4:51:
                    90:45:f4:94:cf:e3:57:af:7a:ed:30:ff:9f:32:dd:
                    c9:29:7d:de:0a:9b:b0:a5:63:91:9b:4f:27:4c:b4:
                    3d:3e:60:1e:1d:7b:7f:c5:2b:50:13:b1:2a:56:b2:
                    fa:6a:c8:f3:ab:f4:b4:a0:95:f2:a9:d5:16:2a:ec:
                    8b:03:1c:59:fb:ca:2e:26:fa:f7:9d:4c:4a:dc:ba:
                    2e:37:0e:b6:0b:16:7f:55:a7:ef:d6:c2:ba:e6:dc:
                    0d:07:7e:16:66:89:50:25:a2:50:22:bf:df:6d:ce:
                    e5:67:39:7f:78:7c:de:45:18:eb:25:d1:7b:3c:de:
                    bf:bf:bc:88:99:91:7e:4b:7a:44:4b:45:7a:bb:22:
                    d9:bd:6d:f1:57:5f:54:56:2e:19:33:02:a1:bb:01:
                    2e:23:a3:74:cd:ee:d5:b8:55:03:1c:f6:c8:19:f3:
                    68:fd:31:94:7b:1f:6c:2a:4b:57:05:c0:55:b9:ec:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C4:0B:F2:42:C1:86:8B:EC:9E:F4:4D:77:0B:E4:06:9D:82:D5:4A
            X509v3 Authority Key Identifier:
                keyid:31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/34352e3136312e3234372e302f32342d3234203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:62:6d:ec:2e:d1:ef:6b:9f:42:5f:f9:7e:48:d5:18:82:63:
         a2:5e:25:22:5d:e7:d2:7e:67:14:bf:82:bc:30:25:9f:a9:6b:
         09:52:10:9b:07:29:6f:18:30:66:59:44:52:4a:42:8b:f6:0b:
         5a:a1:db:75:99:4c:0f:6d:a7:a7:fd:d8:2c:45:8c:f6:5a:49:
         78:c2:9c:61:b1:46:ff:ef:d6:44:33:1c:93:2b:14:23:5c:12:
         23:31:1a:0f:ea:54:0f:e0:c4:90:45:09:7d:e4:d5:b9:a8:f5:
         02:a1:4d:33:3b:ff:7b:29:e9:8c:33:75:b0:d2:a7:92:fe:46:
         a8:1d:d7:72:62:d3:c6:92:65:53:da:40:58:85:01:f8:eb:e0:
         bf:0b:5f:e5:ac:f8:ca:cf:3a:84:03:16:36:b9:6d:45:99:65:
         f8:1c:f6:97:03:c0:4a:b9:ca:18:dc:35:70:d4:6c:23:9e:64:
         91:17:e7:12:5e:1a:c3:a3:0d:59:b3:dd:79:79:2b:dd:b9:86:
         c3:03:68:36:05:21:35:a0:ae:97:72:0d:58:44:06:12:59:25:
         8d:ef:46:1b:2d:42:fb:d0:4c:a6:83:6f:73:62:bc:df:aa:36:
         f2:93:a0:a7:7b:70:59:8c:96:85:4d:6c:81:e9:a5:cb:7c:85:
         35:ec:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:51:14 2024 by rpki-client on console-ams.rpki-client.org