Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
File:                     34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier:          Uaz2PzTov1enkFZiWCIugx1qNX16/Njs1EoH7WoarH8=
Subject key identifier:   4D:DD:E6:95:66:8B:A3:D2:36:81:71:1E:2E:57:ED:7F:66:C2:46:DF
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       2B135D7132A80800C9151B35436FDF6C92443A26
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     268312
IP address blocks:        45.238.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:13:5d:71:32:a8:08:00:c9:15:1b:35:43:6f:df:6c:92:44:3a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=4DDDE695668BA3D23681711E2E57ED7F66C246DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:25:0d:77:b0:e5:02:05:3b:48:e4:86:6a:
                    c3:ab:ab:ab:a8:35:f7:0b:73:2a:f7:d3:ac:a5:9f:
                    9f:2c:3c:58:42:c5:f6:26:da:ac:b4:a2:a4:fa:4c:
                    cc:1c:a8:d4:af:11:09:39:28:89:c0:b1:89:03:06:
                    da:28:ea:db:d5:e3:6e:f7:b9:17:56:33:87:2a:bb:
                    1e:2d:e5:3b:8c:e6:23:89:3e:0f:de:d0:a1:d8:2e:
                    27:ba:56:d9:51:c9:75:86:4e:4d:92:a6:2e:fa:8e:
                    db:ac:ff:51:c5:1c:f9:f7:e5:ef:5d:46:56:a1:4f:
                    38:76:ea:f2:13:52:4b:3c:32:5b:09:a4:b1:3f:ee:
                    15:6d:e5:28:1e:a2:2c:5c:0f:37:42:d4:d4:58:5c:
                    0d:c5:49:bc:e9:67:1b:82:6d:9e:d7:7c:6d:b7:de:
                    a1:1c:90:5c:fb:6c:b6:25:57:ae:63:f8:38:43:62:
                    63:e1:26:ef:0b:b4:bc:d1:06:38:ec:c9:65:1b:64:
                    ea:c2:2f:48:ce:04:85:0b:75:dc:2c:ce:21:dc:20:
                    27:a2:23:9e:5e:a9:22:d5:81:02:e2:e3:3a:ab:76:
                    87:c6:33:30:b3:43:2a:cb:db:01:91:43:1e:71:bd:
                    d8:dc:eb:19:3c:34:71:58:8e:38:30:16:db:9b:7d:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DD:E6:95:66:8B:A3:D2:36:81:71:1E:2E:57:ED:7F:66:C2:46:DF
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:56:f6:24:f6:4b:36:00:83:ba:a7:ac:3e:c0:ce:f3:c4:3b:
         21:26:77:ad:8a:a9:7b:66:8b:fc:d0:f3:45:5d:13:de:91:3f:
         f4:56:d6:c8:83:12:0b:cc:c1:ce:49:25:3d:3c:7b:3f:51:da:
         fe:9c:ca:d7:fb:ee:31:42:02:fb:9e:85:a2:be:65:98:7c:87:
         fd:c4:d8:c7:e8:0a:26:cb:0d:4e:26:72:fe:a3:c6:e4:1a:a6:
         11:06:97:c0:6c:3e:92:fe:13:fd:db:73:df:77:61:e5:9f:d0:
         f3:3a:5d:06:67:5d:02:ee:5b:7a:d3:23:ef:c7:c5:14:7d:e8:
         a9:d2:00:cb:9f:6e:63:96:f0:4c:64:a7:18:28:c2:aa:4e:32:
         69:0e:40:41:35:61:d8:c1:fd:42:46:55:a7:a4:73:c9:4b:35:
         51:54:bd:5f:34:b8:6f:dc:62:75:fb:27:c1:ec:5b:f1:1b:5d:
         89:64:8b:b5:8e:4f:f1:58:1e:93:5f:ea:46:e4:85:90:7a:7a:
         d3:36:9b:40:17:9d:cf:99:23:d7:80:d5:2e:c2:3b:66:53:36:
         06:dd:84:e3:5c:66:8f:80:78:dc:e0:45:ed:e8:c4:b3:c4:84:
         46:b6:e3:fe:b3:ff:47:8f:c4:74:d7:a5:d2:d8:57:6a:d8:2c:
         18:bb:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:39 2024 by rpki-client on console-fra.rpki-client.org