Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35312e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          sJcRk+NyMeZAgRjGuC18dE/bzNeuWxlWgyczDp83dMc=
Subject key identifier:   9D:B3:39:D9:63:13:4A:27:F3:14:69:C5:45:C2:3F:63:77:4A:56:18
Certificate issuer:       /CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Certificate serial:       4A4476787B5CC9F8FD72560E842C39D9C9784430
Authority key identifier: B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
Signing time:             Thu 04 Apr 2024 18:19:45 +0000
ROA not before:           Thu 04 Apr 2024 18:14:45 +0000
ROA not after:            Thu 03 Apr 2025 18:19:45 +0000
asID:                     267256
IP address blocks:        45.232.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:44:76:78:7b:5c:c9:f8:fd:72:56:0e:84:2c:39:d9:c9:78:44:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Validity
            Not Before: Apr  4 18:14:45 2024 GMT
            Not After : Apr  3 18:19:45 2025 GMT
        Subject: CN=9DB339D963134A27F31469C545C23F63774A5618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c6:99:2f:f9:7e:8d:36:67:fb:88:b7:ef:64:
                    12:db:e3:0e:37:f7:39:6f:06:0c:b3:cb:12:fa:7c:
                    e0:22:50:56:b7:ff:0f:2a:b1:6c:1b:42:1a:a6:0b:
                    da:c3:de:c5:3d:d2:a6:8b:5a:29:9e:81:62:dc:b1:
                    62:c2:1a:f1:8f:91:11:0c:1c:2f:e1:f6:70:0f:5e:
                    f1:fa:26:62:a4:98:cb:e6:12:1d:f9:3e:25:a4:26:
                    3b:57:91:ef:6e:3f:54:6b:e6:47:23:e1:8c:d2:b3:
                    e7:76:61:21:28:5d:f5:7a:0f:4c:ae:e8:6e:44:4f:
                    b2:44:08:92:1b:34:a2:38:31:d6:36:e2:39:0f:de:
                    e4:cc:be:70:a8:4a:f5:17:4f:ec:69:ca:fb:61:1a:
                    36:98:67:c8:c3:b5:f3:11:ba:cf:08:8e:16:4d:85:
                    a4:26:ff:60:ae:41:91:8f:48:94:16:6d:7b:c0:e0:
                    76:2a:6f:10:40:f0:e8:0d:20:a7:12:da:91:b0:ca:
                    32:6f:2a:c7:17:47:ef:e6:8a:20:91:d8:ca:62:ed:
                    6d:cc:d8:a3:f7:0e:c7:1b:48:87:d6:44:42:75:cd:
                    e6:08:65:15:0f:31:82:ca:c5:97:80:a3:d4:04:f0:
                    2b:75:43:e9:de:16:75:1e:43:44:38:5e:f2:89:09:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B3:39:D9:63:13:4A:27:F3:14:69:C5:45:C2:3F:63:77:4A:56:18
            X509v3 Authority Key Identifier:
                keyid:B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:1d:60:74:c2:01:30:41:69:8a:b2:1c:b5:67:21:55:d7:
         7c:0b:07:f1:c0:4d:f9:68:07:b0:a1:46:20:44:a0:2f:6b:38:
         44:30:b2:3d:3e:db:f9:d9:5d:25:4f:57:b0:76:ce:7a:61:7c:
         ee:ac:3e:df:bd:34:22:89:62:27:ee:ff:d2:26:94:f6:a4:3c:
         71:18:16:eb:8b:7d:89:74:f8:fd:e9:b5:e6:0c:5a:f7:7d:ad:
         d8:48:60:72:d0:a4:76:2d:08:8b:e7:e3:bd:86:bf:04:65:b8:
         2e:fb:29:bc:82:6c:22:1f:33:b4:ee:99:49:fb:91:8a:61:be:
         fa:40:8c:35:51:e7:46:99:0f:94:dc:26:a5:cf:dd:01:eb:76:
         ce:c1:d5:6c:05:e7:b1:bd:2e:68:3e:c5:3e:b8:9f:62:69:31:
         fc:01:83:6e:20:99:39:d9:8b:b0:65:52:dc:f7:c6:c8:6a:e5:
         d8:c2:7a:20:c7:bc:d9:97:95:bc:03:4d:4b:cd:04:5a:d2:6c:
         06:d2:75:83:5d:a9:3e:2b:33:fd:85:59:b3:3b:29:c7:a1:79:
         f0:bb:17:09:3d:d2:2b:42:05:43:5d:c2:ce:aa:74:55:a9:46:
         8b:8e:f7:82:b8:24:d8:2c:a2:8a:b1:95:80:9c:85:fc:b2:1b:
         30:28:73:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org