Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
File:                     34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier:          kQqGTP+UpXBrYT1VR/aaAxl6tr3v5DrtGVxi+0prLik=
Subject key identifier:   25:AD:70:74:44:71:0E:EF:03:32:64:9D:B0:DC:76:9E:9D:99:E9:8D
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       3F63DD1E915C21BEAD12D27D2DC462037665EFD2
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
Signing time:             Wed 03 Apr 2024 18:31:34 +0000
ROA not before:           Wed 03 Apr 2024 18:26:34 +0000
ROA not after:            Wed 02 Apr 2025 18:31:34 +0000
asID:                     268312
IP address blocks:        45.238.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:63:dd:1e:91:5c:21:be:ad:12:d2:7d:2d:c4:62:03:76:65:ef:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Apr  3 18:26:34 2024 GMT
            Not After : Apr  2 18:31:34 2025 GMT
        Subject: CN=25AD707444710EEF0332649DB0DC769E9D99E98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:fd:22:fc:c9:87:53:88:a4:0c:fc:36:26:
                    2e:87:19:f3:99:f0:7e:03:9f:5a:3f:3c:6f:f6:22:
                    85:b9:1d:0e:15:89:61:60:2b:e2:aa:8d:af:db:54:
                    e7:88:20:16:e5:70:d3:e8:d6:5d:b5:49:22:d2:ea:
                    df:b5:6e:e8:eb:0d:4c:6e:4f:fd:54:43:8d:3c:50:
                    10:59:50:3b:7e:72:9c:d8:a6:32:04:cd:58:58:81:
                    a7:07:92:9a:40:b9:ad:cb:b3:8b:86:6b:5b:db:2c:
                    5b:37:57:6d:be:8b:fe:3c:88:d7:2d:78:6d:41:c6:
                    30:e8:42:b7:44:82:f1:0a:a2:28:1e:74:a0:49:92:
                    b0:f9:0f:f6:f5:be:68:ef:d0:aa:77:33:77:d0:b1:
                    10:9c:c1:c4:d2:10:13:cf:26:c2:9c:47:80:31:3f:
                    f5:b6:bb:31:48:26:d0:ea:4f:5c:02:73:9a:cb:f5:
                    8d:d1:06:46:f8:de:ad:3b:05:dd:5e:92:15:c8:fd:
                    8d:cb:0e:03:5b:b4:58:00:bd:8b:2e:18:10:32:c2:
                    29:5b:27:27:76:00:29:2b:c5:07:2f:4d:6d:2e:a8:
                    d7:70:22:9d:66:88:97:5a:5b:9c:52:70:03:be:4b:
                    89:b8:58:0d:04:ff:68:41:6f:2e:d0:77:ef:31:11:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AD:70:74:44:71:0E:EF:03:32:64:9D:B0:DC:76:9E:9D:99:E9:8D
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:75:30:ee:29:d9:f8:dc:2e:5b:b4:78:f9:ed:27:3b:69:60:
         d5:ac:73:5f:30:e5:11:92:e5:d3:69:f4:0d:a1:54:81:32:2e:
         2f:3d:73:10:aa:97:6a:8e:8d:3c:01:27:07:04:13:03:01:31:
         6f:c2:93:5b:56:75:50:65:cb:a1:e3:c3:ea:70:7d:01:d2:ab:
         06:8a:ff:e6:cd:c4:d3:0a:af:2b:5f:ca:40:4d:5a:01:95:35:
         f8:d2:67:f0:91:a4:0b:14:05:9d:e8:6d:7a:e3:d9:b7:ae:7a:
         ce:8e:25:9f:07:7c:f2:73:8d:dc:4a:ab:bf:af:e2:34:4a:9f:
         d8:89:df:f6:fc:d2:88:34:1c:27:4e:33:7d:ff:69:ff:25:da:
         a2:5a:32:8d:bf:eb:1b:66:0f:2d:80:d5:b7:42:12:f1:c0:96:
         33:c2:a6:8d:0f:c8:f1:1d:1d:f2:69:0d:43:5d:b9:34:3a:f4:
         0b:13:da:5e:26:3d:56:df:ff:cd:35:6e:36:81:61:00:74:d4:
         9f:4d:8c:e0:80:c2:65:71:5b:79:a9:0f:7d:4e:7d:40:94:7b:
         5d:29:b4:4f:8a:6c:74:8a:dd:6e:16:e5:1b:90:f0:f6:ba:d1:
         47:4d:46:29:40:4e:f0:a2:29:15:6f:b5:af:70:74:09:3d:21:
         ac:1c:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:39 2024 by rpki-client on console-fra.rpki-client.org