Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa
File:                     34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa (raw, json)
Hash identifier:          O6dc0PxaVPA2XlXy7Or7Yvza1Wcrz1fyF1yEwBk3YcA=
Subject key identifier:   39:DB:3F:63:BB:37:3E:71:FD:C3:D2:A2:6F:26:30:59:5D:EB:7C:95
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       33788CC5C57F35F436CBD74F9896FB0AFA61571A
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa
Signing time:             Thu 04 Apr 2024 03:38:27 +0000
ROA not before:           Thu 04 Apr 2024 03:33:27 +0000
ROA not after:            Thu 03 Apr 2025 03:38:27 +0000
asID:                     268513
IP address blocks:        45.161.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:78:8c:c5:c5:7f:35:f4:36:cb:d7:4f:98:96:fb:0a:fa:61:57:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Apr  4 03:33:27 2024 GMT
            Not After : Apr  3 03:38:27 2025 GMT
        Subject: CN=39DB3F63BB373E71FDC3D2A26F2630595DEB7C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:a5:65:5b:58:19:7e:9c:a2:09:56:2c:d0:
                    88:00:33:f3:86:62:80:7c:82:a0:1c:f1:5b:5c:2a:
                    ce:0a:49:5a:10:fe:10:03:67:6b:25:60:30:f8:cf:
                    78:04:33:00:df:92:c3:2c:5b:2b:eb:0b:71:74:37:
                    95:b9:11:9c:f8:25:d4:3d:d8:75:bc:be:60:c6:b5:
                    93:75:88:7e:d9:fc:68:93:94:97:12:bb:b8:0f:76:
                    0b:59:c4:93:6c:df:11:8e:8f:b3:93:38:4d:5c:bb:
                    e0:0c:2a:56:cf:4a:f7:8c:e0:56:14:9e:27:09:66:
                    38:76:f6:ae:d4:05:70:c3:36:da:12:a4:1a:4b:4e:
                    e4:58:f8:7d:91:ac:d7:82:04:be:83:f3:dd:2e:18:
                    7c:93:41:f8:24:7a:cf:08:20:77:4c:d3:b5:87:39:
                    94:74:df:e4:db:ff:11:b5:6c:77:cc:82:0c:e2:32:
                    d1:da:e3:74:4d:c5:f8:fc:96:6b:4f:ef:4d:16:d4:
                    f2:4a:79:36:ca:75:e5:54:cc:37:ed:a9:91:bd:23:
                    0f:96:c1:2f:f2:03:39:62:7f:45:4d:1f:98:bb:31:
                    8f:b7:cd:fb:7d:28:69:da:15:8c:32:bc:ce:a9:ae:
                    3a:ff:79:4d:b2:11:66:41:08:29:84:af:4a:41:4d:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DB:3F:63:BB:37:3E:71:FD:C3:D2:A2:6F:26:30:59:5D:EB:7C:95
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:73:64:29:fc:b1:d7:60:d8:f3:da:5e:4e:22:8a:16:81:19:
         4a:ca:89:b9:c0:5c:59:93:ce:0a:5c:c6:69:61:be:a5:78:f3:
         19:57:10:ea:3f:19:c7:5e:ef:f3:cb:57:ba:9e:dd:c9:af:85:
         db:0c:9b:71:42:ab:4e:89:c8:86:35:bb:99:03:f5:a0:30:71:
         05:55:0d:fd:93:42:3a:e7:d7:27:a1:bb:6a:33:db:2d:f5:d9:
         00:53:57:d2:c6:16:d8:1c:6d:54:20:a5:70:24:3a:5e:a2:73:
         8a:29:3e:97:15:e6:da:cb:f9:67:97:21:a6:00:88:c7:76:c7:
         19:c1:8c:aa:ec:d3:17:3e:29:31:2f:be:84:74:38:69:2b:31:
         75:58:15:e1:2e:12:03:35:eb:0c:c7:cf:7a:be:37:02:75:3d:
         84:bc:75:4d:46:ba:41:a0:31:cb:39:79:c2:a7:8b:3c:b8:69:
         92:b1:68:a9:1f:b0:39:b4:bf:08:c1:49:93:66:ed:68:ec:9d:
         72:25:b6:c1:72:8a:43:7d:82:a7:8b:07:a3:7a:0f:0a:41:7e:
         63:3f:e7:8a:38:c6:72:ad:d4:ff:51:c5:ed:86:47:eb:23:7b:
         03:c1:ce:a8:f3:9d:fd:6a:ab:40:5d:54:b8:53:51:8c:31:67:
         3c:d0:d6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 04:34:34 2024 by rpki-client on console-fra.rpki-client.org