Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e34392e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          6Vq0eOSeqLSo8GCPgcTRgPozatjsOOSVdnQm2Q84rEs=
Subject key identifier:   6C:42:30:01:0B:01:2A:B0:6C:A0:BB:69:A9:64:EA:31:2B:D6:6F:05
Certificate issuer:       /CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Certificate serial:       0D4EFD66B597CD7204E68B3C380913207D284A6D
Authority key identifier: B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
Signing time:             Thu 04 Apr 2024 18:19:44 +0000
ROA not before:           Thu 04 Apr 2024 18:14:44 +0000
ROA not after:            Thu 03 Apr 2025 18:19:44 +0000
asID:                     267256
IP address blocks:        45.232.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4e:fd:66:b5:97:cd:72:04:e6:8b:3c:38:09:13:20:7d:28:4a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Validity
            Not Before: Apr  4 18:14:44 2024 GMT
            Not After : Apr  3 18:19:44 2025 GMT
        Subject: CN=6C4230010B012AB06CA0BB69A964EA312BD66F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:4d:4d:ac:14:95:0e:73:d0:be:7b:f0:13:
                    b9:24:2b:89:61:ce:ae:10:21:b3:36:40:8e:db:e5:
                    8d:00:4f:9f:96:08:c5:63:e9:07:31:d0:80:1f:de:
                    37:6a:e8:28:81:17:78:ee:14:f3:c2:ca:3c:c3:2b:
                    f6:fd:79:5c:fb:34:0b:e6:61:ed:40:f6:b8:c7:bb:
                    1c:d2:c9:84:f8:86:ec:2b:9b:cc:fd:05:39:17:83:
                    dd:da:6a:20:0b:74:22:db:74:8f:12:64:2e:66:8f:
                    27:83:a9:34:b0:b1:0d:e7:92:ac:db:26:20:4c:9d:
                    22:64:a1:72:36:ab:16:44:c3:2d:4c:57:3f:48:26:
                    8f:95:3c:f1:10:d1:7b:7e:0a:bf:b6:48:02:7f:16:
                    38:53:23:32:87:c9:05:42:53:07:97:4f:9e:68:bd:
                    24:e0:c4:89:71:5c:73:bc:94:74:f7:6a:11:f0:04:
                    4f:7c:14:fc:96:96:2b:71:47:5e:70:cf:0b:09:c0:
                    aa:31:c0:71:c7:80:32:4b:28:60:dd:bc:f2:8f:62:
                    f0:63:4f:35:a4:8d:ef:02:c7:1f:ee:27:0f:31:f8:
                    b4:41:35:5c:4b:15:cd:2b:8f:32:2f:6a:98:00:02:
                    50:5c:c7:34:7b:4f:ac:0c:5f:c9:08:d5:37:5b:cf:
                    e9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:42:30:01:0B:01:2A:B0:6C:A0:BB:69:A9:64:EA:31:2B:D6:6F:05
            X509v3 Authority Key Identifier:
                keyid:B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b3:a0:fe:73:75:cc:05:d7:d8:b9:26:e9:c6:ed:8f:b5:f6:
         b4:b9:f6:c6:d3:c7:f1:a2:09:50:87:7f:e8:5c:25:0f:ea:a5:
         d1:aa:ac:82:d7:f6:2e:73:04:49:94:64:ef:2d:94:b1:5e:25:
         4f:e2:e8:58:21:00:f5:0c:8c:75:df:e6:e7:b0:4b:56:b0:6e:
         56:fd:b7:91:cc:49:a5:4d:f9:2f:0a:9d:a3:3c:c6:f5:44:9b:
         87:c3:c6:45:05:b6:ab:e7:5b:fa:14:dc:0c:97:af:88:ee:d4:
         27:be:de:33:67:e0:5b:81:04:ed:ec:2b:49:af:6d:e9:b9:93:
         f3:80:78:fd:39:52:e7:7d:81:61:74:61:17:33:1b:52:f3:8f:
         f7:84:6d:06:ff:b0:14:06:07:b2:5e:89:cf:45:68:9a:be:a0:
         5b:d0:ba:a4:c0:2b:c2:18:fb:67:2d:a5:9d:6c:23:09:9d:80:
         de:92:71:23:54:8c:4c:b1:53:34:e7:94:d5:01:60:f3:db:c5:
         0e:18:77:f4:9e:45:9d:66:3d:58:91:86:d4:c8:74:a4:40:4c:
         5b:6d:fd:72:6b:6d:2b:e8:e3:50:4b:38:48:e7:a1:8a:f5:85:
         0f:e9:2c:65:9a:89:e7:10:05:78:2b:07:9c:16:b5:16:45:04:
         67:9e:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org