Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
File:                     34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa (raw, json)
Hash identifier:          u3ekFAwfhV68Loo42PSTKRJXIvtiGlQ+cTT9RieyTSo=
Subject key identifier:   D1:63:17:7E:83:21:0D:0F:BA:72:0A:F8:F9:64:55:32:DF:C4:8D:20
Certificate issuer:       /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial:       19D1EA225AA90DE47B339BB1F067554468E7A47B
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     268092
IP address blocks:        45.168.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
                          rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d1:ea:22:5a:a9:0d:e4:7b:33:9b:b1:f0:67:55:44:68:e7:a4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject: CN=D163177E83210D0FBA720AF8F9645532DFC48D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:8b:18:31:25:12:df:fa:31:fc:5f:89:65:
                    90:f1:0b:da:a8:83:30:3f:e0:02:0e:52:08:95:5a:
                    e5:9c:50:84:67:ad:54:b6:7e:4e:88:2d:b7:c8:ca:
                    1b:27:37:50:ed:66:9f:e3:e3:34:62:ba:84:33:ca:
                    ee:7a:95:c6:46:d0:07:e6:48:53:7a:81:05:df:7a:
                    86:ef:08:2a:e2:05:a5:eb:cc:74:ff:62:78:48:55:
                    76:a0:f8:18:32:74:d9:27:ee:6b:c5:97:59:49:7e:
                    ce:80:90:cd:9c:5b:2f:0b:ca:49:70:78:bb:06:53:
                    80:d9:25:80:61:0e:b3:f6:f8:d7:5b:ee:9b:c0:27:
                    e2:95:ed:84:94:8c:9d:88:56:06:1b:47:ae:f6:ad:
                    49:a0:90:f2:fb:d0:0d:a2:8f:c1:64:a1:3a:93:d8:
                    ee:ae:12:78:77:7f:4d:ce:42:37:6f:a7:d7:67:95:
                    ae:08:e1:d9:a4:43:dd:fb:0f:16:40:a3:7d:d5:57:
                    58:ce:19:19:29:ea:6e:eb:81:fe:12:21:32:2b:78:
                    48:84:6b:85:7d:37:d2:1f:25:c9:ff:30:ba:2e:57:
                    1e:93:f1:ae:be:1a:f5:93:b0:d8:7f:ca:4c:4e:1f:
                    b7:26:fb:86:95:9e:3b:a3:e3:23:2c:2a:76:4b:cf:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:17:7E:83:21:0D:0F:BA:72:0A:F8:F9:64:55:32:DF:C4:8D:20
            X509v3 Authority Key Identifier:
                keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:b9:3d:90:58:88:dc:df:bb:9e:98:4c:64:9a:47:cb:e0:
         3a:ba:df:d5:30:88:71:cf:c7:75:00:55:50:c3:56:12:43:2d:
         2a:5b:ce:26:1c:7a:d2:b2:8a:68:23:d6:c9:44:1d:aa:23:a9:
         0c:42:bb:47:bc:d1:c6:ef:38:12:a3:fe:43:67:62:b9:7a:74:
         c2:f3:1a:2c:3e:ec:a8:f4:dd:a2:0e:a9:ba:6b:3f:1f:b5:70:
         92:88:38:f1:1a:f2:58:6d:b4:6d:67:c3:a4:c4:71:17:82:32:
         b4:95:24:87:5e:54:3d:d8:5d:01:df:b7:e3:b8:e4:c2:62:7b:
         9f:e9:14:15:9d:15:f9:e7:e4:62:64:96:ca:3c:7d:3a:e1:33:
         36:36:fd:d7:bc:c8:7b:0f:e2:5c:d5:cf:39:1a:61:7d:cf:ec:
         87:0f:6a:ec:43:ff:55:09:e5:5b:4f:07:3d:75:56:ea:4c:91:
         0c:42:e5:38:26:21:dc:9a:21:ef:33:00:15:a5:5a:4f:d5:23:
         b5:03:c1:4c:95:f4:90:51:98:35:8b:c2:bb:d4:ae:28:10:3d:
         7f:3f:d2:4c:f2:bb:62:9f:02:18:d7:04:b8:41:14:69:81:03:
         18:49:35:75:ea:0a:9d:aa:7a:e3:5b:a2:8c:ab:c9:4a:1b:22:
         21:85:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org