Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/34352e3232352e382e302f32322d3234203d3e20323636393731.roa
File:                     34352e3232352e382e302f32322d3234203d3e20323636393731.roa (raw, json)
Hash identifier:          7Ld7NLe6QBSbnm+EhbGI3arvX7PQSoU09nxL8X8tv+4=
Subject key identifier:   A1:BF:AD:15:D4:22:A5:93:B5:9A:E3:03:B5:D8:28:D2:B6:B1:E7:14
Certificate issuer:       /CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
Certificate serial:       09FC1F2506153D4EFA59E2EF34F4E598826EF964
Authority key identifier: 24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/34352e3232352e382e302f32322d3234203d3e20323636393731.roa
Signing time:             Wed 03 Apr 2024 21:00:44 +0000
ROA not before:           Wed 03 Apr 2024 20:55:44 +0000
ROA not after:            Wed 02 Apr 2025 21:00:44 +0000
asID:                     266971
IP address blocks:        45.225.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl
                          rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fc:1f:25:06:15:3d:4e:fa:59:e2:ef:34:f4:e5:98:82:6e:f9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
        Validity
            Not Before: Apr  3 20:55:44 2024 GMT
            Not After : Apr  2 21:00:44 2025 GMT
        Subject: CN=A1BFAD15D422A593B59AE303B5D828D2B6B1E714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:e6:00:68:52:2f:1b:1d:e1:1b:e6:20:a8:
                    59:57:f0:82:a6:0e:01:23:0c:5f:80:21:7d:f2:58:
                    ca:e1:75:a9:f7:0d:5b:ac:73:e9:84:57:4c:1a:6d:
                    94:4d:f6:7a:6f:70:e2:1e:8f:65:11:de:f9:75:42:
                    5a:b3:f0:71:fb:41:31:7f:e1:ba:96:66:65:8a:13:
                    99:fb:fd:bb:9a:49:77:38:fc:16:8e:2a:72:43:f1:
                    ad:67:c2:b4:e6:a9:7f:48:04:f3:75:6e:5e:df:18:
                    6d:07:d2:64:f1:5d:e4:e0:89:73:db:ec:97:3a:fb:
                    31:ad:4e:01:71:97:60:ef:c3:af:c4:2a:ea:c0:e0:
                    78:27:5b:b5:48:5e:e9:e8:d6:62:13:03:c6:60:3d:
                    2d:66:96:88:a2:61:e9:16:79:ae:0a:2e:b8:73:a8:
                    ea:dd:b1:80:a1:53:c3:57:4d:ce:3a:e7:ab:7e:8c:
                    9e:7e:3b:1c:1e:43:04:cc:09:36:75:84:a6:f8:68:
                    51:bf:a4:82:13:33:66:7e:3a:0a:ac:11:0e:c6:b1:
                    4a:96:c4:2f:74:75:77:97:8a:af:5b:b0:14:31:0f:
                    4e:4f:17:c0:08:c3:c1:e2:f0:7f:ab:45:12:0d:c6:
                    49:d0:18:e8:07:27:4f:af:82:6d:61:57:5f:e7:d2:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:AD:15:D4:22:A5:93:B5:9A:E3:03:B5:D8:28:D2:B6:B1:E7:14
            X509v3 Authority Key Identifier:
                keyid:24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/34352e3232352e382e302f32322d3234203d3e20323636393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:aa:3a:84:f2:26:ed:b6:e5:6f:92:65:9b:26:53:9f:f5:02:
         52:37:f5:24:e4:18:7c:5f:5a:12:55:02:d2:40:f2:ef:97:af:
         95:8f:19:8c:35:2c:82:68:43:a9:8b:7d:b9:f0:e2:f2:4d:48:
         0a:ca:f8:3b:1f:5c:cc:c3:a2:0a:37:d1:2e:d4:0b:4a:07:d5:
         8d:42:d4:83:94:2d:82:d6:c4:a2:51:da:b1:95:ee:c1:96:e0:
         6c:40:ec:4f:bb:86:97:c7:2c:69:51:47:87:c8:7e:09:91:db:
         4e:53:cc:b7:10:8b:7e:81:79:8c:d2:af:b6:04:99:8f:ad:16:
         62:35:7b:45:c6:da:ad:87:d5:53:8a:f9:bf:fa:0f:6c:8b:3b:
         e9:5a:de:b3:d3:4f:27:df:45:40:50:dd:1e:51:e0:67:c6:7e:
         ec:6f:09:93:67:16:fe:89:8c:5b:31:34:e5:d8:47:0d:3b:50:
         c3:da:06:86:0e:28:bd:ac:28:03:6c:14:d9:c2:96:83:34:09:
         75:21:81:e9:07:77:d7:10:ca:6e:0c:49:1b:22:54:cc:25:72:
         a1:1c:2d:98:5d:a1:da:c2:b2:e1:ec:b7:ff:e0:0d:9a:16:ad:
         b9:ed:8e:a2:f3:1a:8a:87:73:3f:d1:cc:ad:69:83:66:86:08:
         f7:97:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:30 2024 by rpki-client on console-fra.rpki-client.org