Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
File:                     3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          dfNJywTZoAy80Sx8tuG5OoVrg2ZoMdvaI8AiichNfZQ=
Subject key identifier:   0B:CB:C8:2A:D1:56:D4:B7:0C:C5:6F:DE:BD:A0:5E:04:09:D9:44:33
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       5447D330282F51B3063A24982F104475C1DF3F2C
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
Signing time:             Thu 04 Apr 2024 07:28:55 +0000
ROA not before:           Thu 04 Apr 2024 07:23:55 +0000
ROA not after:            Thu 03 Apr 2025 07:28:55 +0000
asID:                     263263
IP address blocks:        170.244.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:47:d3:30:28:2f:51:b3:06:3a:24:98:2f:10:44:75:c1:df:3f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Apr  4 07:23:55 2024 GMT
            Not After : Apr  3 07:28:55 2025 GMT
        Subject: CN=0BCBC82AD156D4B70CC56FDEBDA05E0409D94433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:8c:c2:c5:0a:eb:8d:b2:33:25:f8:55:8c:
                    d5:cf:1a:9e:6b:e6:68:87:bb:f3:14:72:7f:01:e7:
                    24:61:37:d2:00:22:21:21:56:2f:73:29:9e:ba:e1:
                    f0:85:a8:7c:55:8f:22:8e:f4:f8:c9:a5:7b:a3:f3:
                    10:92:36:34:db:48:57:fe:77:1c:de:83:dc:8b:4b:
                    8d:6e:25:73:b3:2b:57:c2:d7:2a:14:72:51:bb:34:
                    a0:42:50:bf:cf:ad:b3:bc:d7:de:4f:36:44:ce:e5:
                    9d:b6:75:f6:5a:f3:d7:9f:d4:e2:dc:41:08:b0:a6:
                    d1:c3:f0:ca:88:da:db:9a:19:21:3d:a4:b0:4e:7b:
                    53:ca:76:9a:e7:76:3e:d3:dd:eb:2c:49:a7:75:8a:
                    f9:27:89:b5:6e:1c:97:b3:74:98:be:b0:99:ad:58:
                    23:49:30:eb:5c:42:74:8b:3f:67:a0:92:bf:35:2e:
                    59:40:a2:01:78:c2:86:d3:28:f8:e4:49:46:a3:5d:
                    0c:3f:7a:50:b5:f3:b1:e0:ec:ac:76:01:36:d9:35:
                    ee:52:47:94:7a:aa:fd:2f:00:d2:cb:f2:21:56:74:
                    9b:85:5c:df:ec:7a:36:31:a0:c3:8f:65:41:1d:36:
                    53:ad:49:d2:4b:a6:c1:c8:81:62:80:fb:7a:d3:29:
                    45:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CB:C8:2A:D1:56:D4:B7:0C:C5:6F:DE:BD:A0:5E:04:09:D9:44:33
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:00:ac:ad:32:b0:71:56:f6:5a:be:a9:e8:96:6e:c3:9a:b3:
         5d:3e:f7:59:31:6e:a7:57:49:f2:d3:51:dd:49:d6:2c:b1:9c:
         00:7e:00:3e:bb:e8:f6:93:90:23:ed:31:17:c3:3a:3f:d8:c0:
         6b:d0:77:19:99:34:a0:42:4f:f6:a0:2a:99:23:03:65:e5:c3:
         90:b1:03:43:d6:5a:6e:2c:70:75:a9:9a:da:a0:1f:c5:40:bd:
         63:f5:bc:6f:b0:41:15:9c:61:92:88:ee:1b:29:9a:47:a4:6a:
         a1:00:10:6d:23:cf:33:6d:6f:2b:e2:0d:1c:ec:97:83:db:1d:
         a1:dd:97:cd:d9:c1:7a:62:85:67:98:6e:ef:a9:d3:51:d5:66:
         82:62:fa:49:5f:23:aa:81:39:0b:e2:cc:b0:2d:89:7e:c7:26:
         8a:52:e1:4e:3a:69:b7:7b:dc:37:52:28:c5:1f:6a:46:c3:02:
         1b:eb:94:5e:3b:03:c5:5e:91:75:1e:d4:b4:3c:0a:20:9d:48:
         f4:12:ee:85:75:7c:21:13:d3:96:9a:75:c5:0c:82:64:ea:c0:
         9c:aa:87:ff:bb:3d:18:1f:a0:2d:f0:7d:bb:21:5c:dd:a7:40:
         12:c8:83:3b:a3:5c:3f:2b:f8:d3:01:8b:bc:55:b3:d7:52:3b:
         86:d6:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org