Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32332d3233203d3e20323637363735.roa
File:                     34352e3232342e3233382e302f32332d3233203d3e20323637363735.roa (raw, json)
Hash identifier:          f3qRTvWnjkVeWSvEV2D5iCQ/Diq0xGGL0NBlVqwpWvs=
Subject key identifier:   1B:DD:F1:D7:D3:3D:32:F5:56:39:3D:01:24:38:95:DD:FB:DD:91:D4
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       4FA649E4C18A32FE4C19450DA900A0532B9A95C6
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32332d3233203d3e20323637363735.roa
Signing time:             Thu 04 Apr 2024 18:16:21 +0000
ROA not before:           Thu 04 Apr 2024 18:11:21 +0000
ROA not after:            Thu 03 Apr 2025 18:16:21 +0000
asID:                     267675
IP address blocks:        45.224.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a6:49:e4:c1:8a:32:fe:4c:19:45:0d:a9:00:a0:53:2b:9a:95:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Apr  4 18:11:21 2024 GMT
            Not After : Apr  3 18:16:21 2025 GMT
        Subject: CN=1BDDF1D7D33D32F556393D01243895DDFBDD91D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:a3:97:84:4f:14:9d:4b:24:5c:51:b6:43:
                    a3:27:2a:74:72:58:db:39:91:c9:e6:cd:e2:38:f5:
                    c7:ef:f5:37:d7:49:b9:19:54:60:f0:59:99:ca:f8:
                    9f:4f:58:d1:e0:a3:92:7b:0c:e0:1d:20:9b:df:8f:
                    cb:df:eb:7a:bc:99:54:a4:66:47:95:be:10:46:95:
                    90:86:f3:8a:27:1c:b7:d2:76:21:30:15:fd:e8:de:
                    05:4f:68:02:1f:98:1e:87:15:53:03:e0:62:84:43:
                    f7:e4:59:8c:0b:9b:84:4a:7e:27:27:f9:45:fd:33:
                    bd:6f:d8:0f:b5:7c:cd:0f:55:4e:c5:e5:4b:de:fb:
                    75:89:d2:13:0f:37:b5:94:09:76:e7:f9:4f:d8:99:
                    37:b2:90:1e:5b:b5:b6:1e:a9:e9:66:5a:02:75:29:
                    0b:54:7f:12:3e:43:98:e1:9e:95:2f:97:4e:18:c8:
                    0a:e8:08:89:37:19:d8:ff:df:85:3d:5e:e2:4c:c3:
                    cb:23:40:ec:f7:b6:bc:47:03:0a:d4:f4:65:14:cb:
                    d6:2b:1e:7f:f0:b0:8c:49:5e:17:f1:e2:e4:97:d4:
                    88:73:55:05:1c:48:76:45:e5:7a:c5:0e:8c:74:f3:
                    49:cb:f9:64:02:59:16:1a:a8:c1:7e:aa:a6:71:fd:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DD:F1:D7:D3:3D:32:F5:56:39:3D:01:24:38:95:DD:FB:DD:91:D4
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32332d3233203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:6a:2c:ac:18:cd:33:46:91:4d:21:8b:29:8b:c7:dd:60:9a:
         75:23:60:79:eb:d1:aa:73:24:0a:9e:53:80:25:82:75:a9:48:
         c0:ce:2d:42:37:13:d8:8e:f3:fe:d6:e9:43:b4:3b:ff:be:03:
         e9:14:7c:b1:50:7d:b1:ba:7a:64:ff:6e:c3:23:18:32:d9:f7:
         6b:c4:18:00:84:08:31:1c:18:39:a9:f5:74:7b:b4:b4:0c:5f:
         e9:1a:8f:ef:0a:9b:fe:c8:05:42:8f:a8:92:2a:63:42:b3:4e:
         1a:58:7c:c7:33:a0:22:e3:8d:06:13:a6:29:a8:2b:42:71:18:
         b9:c5:a6:b9:ff:a4:13:12:d4:30:a6:b5:58:c3:92:9a:d9:0a:
         f3:70:a1:28:32:a4:d2:b5:70:c0:29:24:cf:8d:6a:d5:8e:b7:
         18:57:5f:a8:0f:7a:76:8c:bb:ab:18:3f:e2:4b:a3:20:c6:de:
         66:77:f8:39:53:0e:e9:d3:5a:0f:74:9f:64:27:5a:12:9a:cf:
         a6:51:46:e4:ca:29:11:87:be:45:a1:15:31:1e:11:55:99:0f:
         d0:f2:91:4c:60:eb:f7:ac:90:85:1d:ef:49:3a:a1:a3:f8:e3:
         d8:fb:8d:f7:4f:98:50:a6:93:4a:3d:a5:ba:ef:42:9f:9c:53:
         f6:12:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:45 2024 by rpki-client on console-ams.rpki-client.org