Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
File:                     3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          mGEkhAHH4ibdQlilkHbx+a++vUF+YCYHsEsp1we4pE0=
Subject key identifier:   62:5F:C8:08:A0:8A:03:30:05:B9:33:3A:1A:0A:EE:13:84:14:6B:E7
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       12AF0471511A2B6799501C0D465F6EF1BB4F2722
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 04 Apr 2024 07:28:54 +0000
ROA not before:           Thu 04 Apr 2024 07:23:54 +0000
ROA not after:            Thu 03 Apr 2025 07:28:54 +0000
asID:                     263263
IP address blocks:        170.244.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:af:04:71:51:1a:2b:67:99:50:1c:0d:46:5f:6e:f1:bb:4f:27:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Apr  4 07:23:54 2024 GMT
            Not After : Apr  3 07:28:54 2025 GMT
        Subject: CN=625FC808A08A033005B9333A1A0AEE1384146BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:aa:43:51:6b:a4:1a:64:bf:94:c8:19:08:
                    21:3d:72:65:70:ff:62:48:ed:be:ef:71:85:49:e8:
                    7c:16:bc:45:f9:9e:c9:b8:a6:26:f6:32:77:b4:63:
                    d5:4d:29:d7:e1:2e:17:5d:20:67:12:18:ce:68:ae:
                    0d:c8:02:c2:ec:73:5e:e2:8f:83:10:b4:8a:79:fa:
                    6c:3f:02:db:81:70:2f:6e:21:5b:64:81:bd:5f:a0:
                    40:45:89:f0:96:e2:1a:6e:60:a8:11:2b:10:0c:5b:
                    fc:1d:e9:9e:7e:f2:5a:16:30:4f:d9:31:d6:58:70:
                    ee:97:37:35:e7:a2:b4:38:d8:10:be:2f:6b:61:ef:
                    11:bd:e4:46:3d:a8:b6:52:64:e7:36:0c:30:28:4a:
                    da:12:a9:12:8d:ec:95:81:b1:f6:62:a2:60:eb:0c:
                    83:12:03:a1:b4:fa:61:8c:32:79:c7:ae:4f:52:ae:
                    43:63:bd:58:03:0b:71:b7:d8:26:ef:87:b1:14:e9:
                    d5:b2:95:c5:36:a9:07:05:d9:0e:ae:77:39:12:3f:
                    24:74:4f:9a:99:b3:cc:05:d4:18:65:fb:48:91:01:
                    5e:5f:3f:c3:da:2d:53:96:6a:87:fe:b5:84:6c:b4:
                    e9:81:1c:b9:b9:2a:cd:84:0e:ba:5b:a0:6d:f0:c8:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:C8:08:A0:8A:03:30:05:B9:33:3A:1A:0A:EE:13:84:14:6B:E7
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:a5:ef:83:d8:db:04:93:40:91:cd:99:d6:2b:65:38:21:
         26:c3:5d:23:54:92:a9:47:c3:0d:30:ab:8c:4d:49:f7:fc:96:
         a0:fa:02:b3:5a:77:ba:75:f2:12:92:54:a5:06:2f:1b:b7:ca:
         dd:7d:d1:7c:a3:ae:86:df:66:42:9c:df:c5:c1:55:e0:49:16:
         45:1e:4f:fc:2d:49:3e:9e:63:55:d7:4f:1f:51:9c:29:3a:9d:
         aa:81:5e:ac:cd:44:e0:ae:37:ce:63:23:62:77:32:5d:e5:8d:
         d8:15:67:07:0a:bf:98:59:ad:6e:11:b1:9f:67:08:59:c9:8e:
         40:d2:ca:c4:7a:99:af:50:5b:a1:af:25:fc:8d:bb:c0:ad:e7:
         c0:98:7c:af:b6:d3:fc:46:20:68:90:65:f6:ff:0f:c4:89:a8:
         c7:31:82:ac:ed:06:e9:21:12:d7:10:e4:69:eb:af:18:af:db:
         92:f7:eb:72:5d:63:e2:f4:5b:eb:31:b0:27:1f:ff:a4:91:3c:
         df:8d:3a:1a:1c:7e:a8:d0:91:13:81:7d:f2:05:15:95:65:6b:
         d6:df:d9:a0:84:b6:8f:99:56:b6:2e:a9:db:b1:81:71:b9:19:
         6d:27:b7:06:78:5b:f9:58:e1:a0:4e:da:05:ec:c7:de:71:10:
         6e:a6:87:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:28 2024 by rpki-client on console-ams.rpki-client.org