Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa
File:                     34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (raw, json)
Hash identifier:          ZLemH/UzHE4DAW8EqvM9H+l39/WbIeYTcT5zsIqw2Bg=
Subject key identifier:   E4:AB:56:45:4E:78:02:AD:EE:F3:6B:3B:A2:CF:6B:90:4B:FF:E4:CD
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       253D89F419864E816C7F6783F6B46C23ED645803
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa
Signing time:             Thu 04 Apr 2024 14:46:02 +0000
ROA not before:           Thu 04 Apr 2024 14:41:02 +0000
ROA not after:            Thu 03 Apr 2025 14:46:02 +0000
asID:                     268913
IP address blocks:        45.175.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3d:89:f4:19:86:4e:81:6c:7f:67:83:f6:b4:6c:23:ed:64:58:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Apr  4 14:41:02 2024 GMT
            Not After : Apr  3 14:46:02 2025 GMT
        Subject: CN=E4AB56454E7802ADEEF36B3BA2CF6B904BFFE4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:21:97:c7:17:33:30:37:a8:8b:e4:ab:84:
                    17:7d:4b:5f:85:c3:0d:17:f3:ea:59:4b:19:3b:5c:
                    37:30:f1:a1:e2:43:fd:de:cb:db:e4:7e:52:8e:19:
                    d9:db:2b:cc:50:6e:b9:96:78:f1:8a:05:cc:76:f9:
                    34:a0:36:4a:05:fe:70:ae:24:54:ab:61:46:82:17:
                    06:4f:72:81:55:44:d1:ac:3f:c3:69:d1:27:b7:17:
                    79:84:6f:af:93:81:cf:86:f4:eb:3e:8c:9b:28:2e:
                    20:21:ad:c6:c3:8d:fa:51:bf:cd:aa:5c:e3:13:dc:
                    df:1f:e7:1c:e3:91:6b:f6:46:22:e5:05:73:90:03:
                    36:5c:b5:b0:82:50:9f:55:3d:12:9f:b4:69:df:c9:
                    71:9d:ab:56:d2:3f:14:e5:a9:df:7a:72:42:95:6e:
                    17:fb:8d:cd:72:19:f8:1c:20:f5:e4:d6:dd:02:27:
                    79:ab:25:9c:d1:63:75:50:70:ca:20:ac:d4:c8:46:
                    00:b3:3d:b1:f9:7a:89:de:b7:c6:5e:44:29:d6:33:
                    8e:07:84:36:ab:bb:2c:3c:2c:11:3b:1d:91:0b:08:
                    bd:ed:16:56:c5:09:3b:36:89:12:b4:49:20:ac:96:
                    f2:ef:b5:e5:ba:68:b9:7c:f1:bb:1b:35:f3:40:0e:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:56:45:4E:78:02:AD:EE:F3:6B:3B:A2:CF:6B:90:4B:FF:E4:CD
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:7b:e1:4d:38:96:d8:be:58:cf:78:14:a7:f8:b5:7c:1e:
         b2:fa:90:ea:83:4d:e7:57:f3:4a:0a:eb:14:05:89:64:6c:8c:
         55:88:ba:86:65:83:de:d7:8a:5c:c7:f2:a5:88:38:21:97:8d:
         a0:bd:6f:78:f4:63:96:e9:3d:92:00:1b:87:7f:5f:ac:99:39:
         5d:f7:fb:bb:a3:fd:77:cb:19:f3:d3:d2:db:8f:ef:87:f2:d7:
         0b:24:4d:e6:d4:b0:d4:54:88:bd:b8:80:90:00:70:10:f7:dd:
         d7:d1:d0:f5:ab:c8:82:af:07:91:c5:90:f1:2e:2a:64:b8:6c:
         62:d5:24:2b:b6:5e:35:1b:2e:3b:64:8f:11:05:fd:5b:cf:b3:
         c5:0d:eb:40:6b:39:5c:03:cb:6e:be:55:38:47:ef:de:35:f7:
         89:6b:d2:ec:96:c8:1c:3b:09:82:ac:5d:9d:4a:a6:44:88:15:
         dd:c3:d9:c8:b1:5e:ad:7b:be:02:b2:ae:22:36:61:47:4a:8c:
         bd:ac:98:66:52:7a:c4:9f:bf:4a:2a:21:a4:15:91:56:58:14:
         c3:ca:28:17:e3:91:59:e7:a2:3c:b4:94:23:e3:ef:40:05:96:
         d4:60:cb:40:99:8d:55:46:19:fa:9b:56:5b:65:87:75:e0:be:
         84:06:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:44 2024 by rpki-client on console-ams.rpki-client.org