Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34382e302f32332d3233203d3e20323637323536.roa
File:                     34352e3233322e34382e302f32332d3233203d3e20323637323536.roa (raw, json)
Hash identifier:          VeOHM1tWITfbWSvaHY4jAl1uveCIJbQ5rhiGmgxYV+I=
Subject key identifier:   66:90:4F:9C:DA:A3:A6:95:0B:1C:C5:FF:B8:23:FC:2C:FA:32:9A:05
Certificate issuer:       /CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Certificate serial:       61F8DB1C9979FEC756D2C075D4850E00545980C0
Authority key identifier: B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34382e302f32332d3233203d3e20323637323536.roa
Signing time:             Thu 04 Apr 2024 18:19:45 +0000
ROA not before:           Thu 04 Apr 2024 18:14:45 +0000
ROA not after:            Thu 03 Apr 2025 18:19:45 +0000
asID:                     267256
IP address blocks:        45.232.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f8:db:1c:99:79:fe:c7:56:d2:c0:75:d4:85:0e:00:54:59:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Validity
            Not Before: Apr  4 18:14:45 2024 GMT
            Not After : Apr  3 18:19:45 2025 GMT
        Subject: CN=66904F9CDAA3A6950B1CC5FFB823FC2CFA329A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:a9:0a:42:f3:6b:09:cc:6c:c7:b1:4a:2d:
                    77:49:a6:8e:5f:ef:e7:01:65:f7:7c:09:c1:c1:db:
                    32:1f:17:4a:42:63:23:9b:68:45:cb:7f:7f:ad:f6:
                    af:72:8e:a2:d1:ac:7c:cd:da:7a:e2:59:f8:67:97:
                    e7:e8:74:16:a9:1b:88:60:f8:5c:34:c7:47:94:eb:
                    48:d2:91:50:4d:07:fa:e0:c4:2e:af:2a:d9:20:38:
                    65:53:d2:44:5f:86:fb:8f:21:94:cf:42:ea:32:7e:
                    5c:fe:4e:ea:38:fd:31:47:b0:b1:7b:09:8f:8c:24:
                    9c:95:0b:5b:5d:67:e1:5c:36:70:2f:84:79:40:c3:
                    f4:27:56:4f:8a:15:4e:eb:2e:b5:65:9c:0e:8b:ac:
                    29:3e:bd:1b:de:30:c6:ea:d2:3b:aa:68:17:d5:a7:
                    b9:d4:33:76:93:f6:ea:53:94:f5:6f:55:a5:09:51:
                    53:c8:d8:6c:45:5d:c1:17:9e:ad:ed:b7:bf:07:8e:
                    d9:0f:da:31:da:b9:cc:1a:bd:08:5a:5c:c9:8f:70:
                    9d:cc:e8:0a:db:bb:58:2d:37:8e:99:2a:d0:99:24:
                    17:99:ef:0e:9e:22:39:76:20:50:6e:ee:0d:b0:ae:
                    38:16:94:80:8b:8d:1e:37:86:d6:e8:ed:e3:c7:17:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:90:4F:9C:DA:A3:A6:95:0B:1C:C5:FF:B8:23:FC:2C:FA:32:9A:05
            X509v3 Authority Key Identifier:
                keyid:B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34382e302f32332d3233203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:e6:1f:bf:5d:e4:b6:68:7b:f1:db:b5:fc:09:9d:05:fe:3d:
         53:f8:c9:c8:66:b3:cd:4f:ba:39:07:13:08:91:0f:fc:96:24:
         6b:ea:b3:57:47:d6:a3:3d:b3:d5:85:cf:9c:a5:f4:4e:80:35:
         70:36:7c:b4:43:bf:4e:4f:99:5d:d3:af:7c:c4:59:d2:38:8d:
         1a:49:36:05:37:07:fa:58:00:e2:84:16:90:d1:b6:f0:ac:f7:
         ff:87:33:ea:e9:5c:93:54:39:fe:9d:fd:2f:50:5c:de:7a:87:
         c8:6c:0e:3c:9f:00:41:cc:ed:8a:15:79:b7:5f:34:70:5e:8b:
         bb:84:fb:e9:44:a5:93:4b:44:f2:07:56:bf:4a:16:f0:cd:a0:
         20:02:d5:5e:a9:4b:b1:7d:6f:fb:5d:ec:43:de:62:10:1a:33:
         79:b6:1b:15:19:25:cc:e9:ec:1e:fe:16:a9:2f:2d:ce:b1:fe:
         ef:d5:2b:43:b0:fd:b0:de:43:be:4d:2b:ef:3a:9d:97:af:5f:
         2a:74:88:81:e6:fd:a3:2e:e3:f5:fe:9e:42:e3:6d:20:f8:a3:
         c4:b0:f6:3c:55:8a:e3:b5:24:c8:01:53:79:db:ad:02:ac:ad:
         97:ff:79:1c:01:8c:1c:b4:61:25:52:82:bf:ad:ed:2b:f2:25:
         50:59:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org