Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          y8oqZngjveN6ZjtlRgFie/CANBZi9NAO5fSsBf4iTn4=
Subject key identifier:   CF:B0:BD:EA:89:E5:18:EB:DB:30:00:59:65:7A:1B:09:D1:3F:9A:4F
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       116DBB69FE4DDBF21215144B21890EB0DF6A5091
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 04 Apr 2024 18:16:22 +0000
ROA not before:           Thu 04 Apr 2024 18:11:22 +0000
ROA not after:            Thu 03 Apr 2025 18:16:22 +0000
asID:                     267675
IP address blocks:        45.224.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6d:bb:69:fe:4d:db:f2:12:15:14:4b:21:89:0e:b0:df:6a:50:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Apr  4 18:11:22 2024 GMT
            Not After : Apr  3 18:16:22 2025 GMT
        Subject: CN=CFB0BDEA89E518EBDB300059657A1B09D13F9A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:af:aa:07:f3:e6:08:3d:2f:ad:8f:f3:5c:
                    b9:30:b2:e7:48:dc:68:15:06:be:d1:66:f7:7d:34:
                    56:bd:b1:60:7a:01:60:d1:16:af:d2:d9:2e:4b:24:
                    03:65:8a:bf:89:ee:86:7c:bf:92:b5:ad:cd:47:e2:
                    e7:02:ca:3f:25:85:64:66:5b:5f:9b:b4:91:4a:cb:
                    35:74:5f:8b:41:ba:94:a9:9c:51:9b:45:8f:67:47:
                    f7:74:f9:38:dc:de:eb:01:32:cc:29:6a:1c:c1:e5:
                    07:b8:62:3f:4c:77:24:97:40:96:47:bd:19:72:39:
                    2b:15:4e:15:ba:d3:11:2f:ff:91:22:05:5b:29:45:
                    19:3d:c0:42:6d:4b:7d:1c:7b:c2:e3:c4:b7:8d:1b:
                    98:6f:6c:34:c6:f7:1e:23:f4:30:34:6a:7c:ee:b1:
                    ef:fa:17:04:70:03:76:77:a1:94:5c:1e:d3:d3:ad:
                    b7:3f:58:e1:6f:0c:b2:1f:fc:c6:76:36:7a:ff:f4:
                    1f:8c:43:8c:47:bc:4c:d2:1d:f7:62:33:73:cd:46:
                    de:1b:da:44:d8:69:26:be:73:08:74:7c:ad:7a:09:
                    e4:4b:25:68:e8:1a:5d:aa:85:92:0c:59:0a:e3:ec:
                    00:00:a1:5b:c1:0e:93:3c:64:47:c4:ec:98:3c:87:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B0:BD:EA:89:E5:18:EB:DB:30:00:59:65:7A:1B:09:D1:3F:9A:4F
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:50:2a:e8:3d:c1:d1:04:e2:ee:3c:fa:8d:7c:fd:a5:a7:64:
         e2:ef:12:e8:7a:f6:d5:e3:f0:04:a4:18:c0:cd:a8:8a:0c:6b:
         60:10:8d:1c:07:ba:fa:3c:82:67:0f:b9:fa:1b:ed:50:d6:c4:
         61:f2:d1:9c:03:a8:f1:0a:a2:e5:6b:d3:f0:53:32:dc:57:3b:
         d0:11:0a:b8:9e:a5:2b:b8:7d:73:d8:d2:77:8b:c3:12:39:19:
         01:f6:fb:8b:3c:b7:2e:b9:d0:0d:00:fd:97:23:df:e2:b2:6e:
         91:8c:72:81:24:cc:91:4b:a1:b9:5f:6d:7f:c2:6a:a5:20:04:
         a2:2e:61:5e:16:cf:ba:0e:3c:75:1b:d7:c7:f1:a1:31:bf:08:
         28:73:0f:5a:4e:5d:97:5b:b6:83:ec:ba:8c:a0:89:e2:7c:57:
         a7:d4:e7:86:c5:07:68:2f:71:43:f2:9d:9e:9e:5f:8b:5a:f8:
         de:01:78:2e:b4:2d:26:6d:7b:41:79:4b:39:ba:ae:28:fb:d6:
         ff:79:dd:21:8e:27:68:f2:4e:6a:18:99:e4:99:b6:db:89:de:
         05:59:c9:ce:65:b9:15:77:45:f5:18:c8:21:ff:a9:a1:5f:ec:
         cd:da:30:12:84:c1:65:0b:03:f8:e1:d9:39:77:06:ed:b3:35:
         73:ca:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:45 2024 by rpki-client on console-ams.rpki-client.org