Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/37322e34342e32332e302f32342d3234203d3e20323636313636.roa
File:                     37322e34342e32332e302f32342d3234203d3e20323636313636.roa (raw, json)
Hash identifier:          DXrJ1p2WOh6R3vGrPFuyuByzry5jUV8SMnkw1onQ0d0=
Subject key identifier:   CD:90:CF:87:8D:A3:E1:E5:27:65:76:B5:A6:B6:EB:31:C6:B1:D6:43
Certificate issuer:       /CN=51F43471391884073640DD1CEA3309A015FDE379
Certificate serial:       35410E43276C2EF45B88C3AFA115A7A896F4C5
Authority key identifier: 51:F4:34:71:39:18:84:07:36:40:DD:1C:EA:33:09:A0:15:FD:E3:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/37322e34342e32332e302f32342d3234203d3e20323636313636.roa
Signing time:             Thu 16 May 2024 17:30:38 +0000
ROA not before:           Thu 16 May 2024 17:25:38 +0000
ROA not after:            Thu 15 May 2025 17:30:38 +0000
asID:                     266166
IP address blocks:        72.44.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.crl
                          rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 13:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:41:0e:43:27:6c:2e:f4:5b:88:c3:af:a1:15:a7:a8:96:f4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F43471391884073640DD1CEA3309A015FDE379
        Validity
            Not Before: May 16 17:25:38 2024 GMT
            Not After : May 15 17:30:38 2025 GMT
        Subject: CN=CD90CF878DA3E1E5276576B5A6B6EB31C6B1D643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:2d:63:fd:4a:82:03:52:fd:dd:d2:c0:ac:
                    37:79:cc:c4:92:cb:db:18:be:e6:a1:4e:af:6d:c6:
                    a8:cf:7b:b8:1c:3a:ea:07:d6:f0:68:cd:45:23:0e:
                    1a:38:65:eb:c6:15:14:6e:3a:0c:1a:ae:ab:d6:bd:
                    94:0d:3a:83:7e:33:1a:d6:df:74:75:68:2d:96:87:
                    d8:49:52:32:f5:8c:f3:45:e3:26:6f:58:3f:53:da:
                    d6:41:cd:0b:b7:65:dc:05:ff:c6:68:51:49:5c:9b:
                    a3:e3:66:ad:8c:c8:8b:17:36:01:30:35:8a:ee:a0:
                    fb:68:d2:86:69:95:dc:4c:4e:28:04:a3:a7:f1:f1:
                    1d:a4:02:b7:8a:be:5f:a9:fd:68:2c:ca:42:e5:f9:
                    7e:df:e4:88:b7:b8:8a:25:80:43:7b:84:3b:de:51:
                    3a:d4:b9:7c:d0:1e:b3:9a:4c:7d:2f:a6:53:cf:5f:
                    5b:7e:44:d6:f5:67:e0:e9:57:8e:46:54:74:73:24:
                    d0:1d:e9:16:50:5c:92:d1:4d:bb:65:ca:51:c4:33:
                    fa:af:69:1c:32:23:2f:f8:a3:3b:c9:32:8d:ab:f0:
                    ec:e1:95:21:4d:0e:6d:e7:a4:c9:46:d4:0f:c6:d0:
                    e1:1f:8d:5e:ca:58:12:25:9f:78:3b:27:68:7c:79:
                    44:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:90:CF:87:8D:A3:E1:E5:27:65:76:B5:A6:B6:EB:31:C6:B1:D6:43
            X509v3 Authority Key Identifier:
                keyid:51:F4:34:71:39:18:84:07:36:40:DD:1C:EA:33:09:A0:15:FD:E3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/37322e34342e32332e302f32342d3234203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:24:7a:ca:e2:7f:a9:24:43:9b:2a:61:61:fa:eb:a4:79:35:
         1e:b4:97:8a:77:2f:c1:12:77:d7:cf:72:31:5a:d9:2d:ff:6a:
         ac:9f:04:a6:5a:bc:99:73:9c:8f:c4:8b:ac:e9:a9:a8:6e:b5:
         ed:1f:fd:65:d6:05:ab:c5:8b:c2:d0:2b:b0:d2:dc:df:e2:38:
         66:fd:d1:12:26:42:f6:48:2c:6f:89:30:ab:31:fc:bf:02:be:
         c5:26:af:87:e7:8e:2f:2e:c7:82:86:9a:f6:11:97:eb:32:6e:
         dc:90:ea:4e:1f:3d:ff:97:42:2f:e8:16:91:f0:95:37:c8:0c:
         5d:2a:43:91:a3:39:c0:72:7d:65:1a:72:48:d2:e9:b4:42:29:
         b5:81:bb:1e:35:e4:d1:e1:e8:9f:6e:2b:57:ed:3b:56:bd:d1:
         a4:dd:b1:59:9c:38:00:a4:b2:32:b0:2c:8a:89:c7:e8:91:e3:
         93:0d:54:9a:79:57:8c:66:ba:67:33:77:2d:0f:a3:51:40:46:
         22:e4:8b:0f:38:5c:b3:24:30:98:e7:ff:25:56:cc:e8:00:d6:
         b0:ce:9f:53:1a:38:b5:4f:3e:df:67:0e:b0:bd:e0:b8:f6:87:
         47:b0:dc:2c:ff:7c:8a:c1:8e:45:ce:70:aa:09:5a:1b:d4:94:
         61:fd:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 13:20:07 2024 by rpki-client on console-fra.rpki-client.org