Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32342d3234203d3e20323638333132.roa
File:                     34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (raw, json)
Hash identifier:          +v178MZU+UUpFzYiLNIhTgl1DEVxsRZfsU+sx/qYA4M=
Subject key identifier:   37:CB:80:7A:F4:C8:26:5A:70:87:18:8C:9F:4E:3C:49:5C:09:FB:F2
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       011FA250DDA37B3F2F1A2C2C0FC69C40F2556DF6
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32342d3234203d3e20323638333132.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     268312
IP address blocks:        45.238.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1f:a2:50:dd:a3:7b:3f:2f:1a:2c:2c:0f:c6:9c:40:f2:55:6d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=37CB807AF4C8265A7087188C9F4E3C495C09FBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:fc:22:46:b2:86:b9:c1:a9:b4:42:be:02:
                    6d:82:bd:03:47:3e:14:b1:f8:5f:78:9b:22:fe:f2:
                    bf:9b:bf:8b:2a:f1:99:8b:eb:b4:5f:5f:56:ce:ae:
                    89:0f:e9:b3:49:40:8b:9f:d3:fd:d7:37:4e:94:48:
                    4a:4b:fe:6b:c8:64:9f:71:49:e8:88:32:0b:aa:03:
                    42:6e:84:c8:8b:48:6f:58:c1:cf:a1:6a:ed:aa:b2:
                    67:e4:58:2a:03:68:21:ef:21:5a:d0:25:2e:ec:aa:
                    a5:25:18:19:4f:5d:55:ca:49:6a:e6:b5:a2:94:da:
                    e1:d1:7f:1b:cd:2e:61:e5:a6:17:eb:d8:06:8b:67:
                    b8:c9:11:ec:cc:85:0e:a1:9d:42:41:5d:e6:e1:9f:
                    4c:e9:5b:36:b0:91:c7:08:99:61:05:5c:1b:03:c4:
                    40:72:8b:e1:02:ea:e9:ee:c7:46:67:0a:2b:64:45:
                    c6:94:24:d1:8d:da:be:b1:73:3b:95:3f:68:f3:a2:
                    65:9e:83:de:0e:4a:c4:94:e2:62:8c:c0:3b:82:a3:
                    e9:05:7c:0f:dc:59:92:41:8b:b4:d2:7d:f6:b8:3b:
                    83:f2:e0:6d:3f:f2:16:04:72:7d:08:81:40:7e:c3:
                    83:04:f2:11:66:5a:ce:e9:b5:fa:07:17:86:54:d3:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CB:80:7A:F4:C8:26:5A:70:87:18:8C:9F:4E:3C:49:5C:09:FB:F2
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32342d3234203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:31:cc:7e:84:17:7c:4f:21:e4:ea:ee:3c:f0:4e:33:4a:eb:
         7d:88:1f:39:ba:45:8d:7b:4a:4d:c3:c8:b5:a2:ef:26:c3:ee:
         cf:9d:a2:22:9d:43:3e:98:5c:f3:61:63:f2:08:5f:f7:76:4b:
         d3:b9:e7:70:91:39:4b:96:91:8a:80:9c:2a:fb:94:1d:fe:29:
         80:2e:cd:02:30:e0:4e:5d:5c:1b:90:d3:85:35:3d:1d:12:2d:
         68:f5:47:b8:d0:d7:19:3f:10:54:e9:b1:97:36:38:17:5f:83:
         cb:cd:51:c7:ba:6f:fc:ad:d6:64:e9:53:a6:08:a0:f6:34:7d:
         68:7d:e1:7b:5c:ae:d1:1d:af:d6:cd:ce:b4:37:b4:89:84:34:
         cf:4f:bd:54:14:aa:72:3c:09:fd:e6:3d:2f:68:db:3d:39:19:
         65:e9:84:13:f1:2d:d6:09:df:b1:8c:91:fc:b8:b5:81:e5:13:
         54:55:b9:3d:52:40:72:9f:cf:80:5f:1b:f2:c1:49:94:44:31:
         f1:77:39:0a:f2:a4:70:f0:00:4a:3e:90:95:e6:6c:70:62:66:
         51:61:c3:82:4c:3a:0b:18:ea:df:1b:05:ec:fa:16:77:61:2c:
         a8:93:10:77:74:70:19:55:b8:a3:9e:1d:f2:5f:2e:72:dc:bf:
         ea:7c:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org