Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33392e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33392e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          nQl2CFS20ZskN6Qa1gesg674KXJzN04H1J0om5naKeM=
Subject key identifier:   4B:85:3A:AB:CD:41:DD:65:98:7C:C1:37:FB:D9:D4:E9:E2:D2:9A:21
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       0BCAAF3FBF7BCDC761DCB808F4D9A2800706C990
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33392e302f32342d3234203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:20 +0000
ROA not before:           Wed 15 May 2024 14:28:20 +0000
ROA not after:            Wed 14 May 2025 14:33:20 +0000
asID:                     268790
IP address blocks:        45.173.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ca:af:3f:bf:7b:cd:c7:61:dc:b8:08:f4:d9:a2:80:07:06:c9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:20 2024 GMT
            Not After : May 14 14:33:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:51:b5:7f:72:31:c6:c5:6e:17:61:6c:a3:
                    97:4c:ed:69:9d:a4:3f:e9:20:42:7b:ed:db:c5:76:
                    3d:e6:d6:86:6e:66:e4:ee:5b:ec:0b:f0:6b:e7:e4:
                    f2:92:65:e0:f5:3b:2c:94:b6:25:fc:27:48:5b:30:
                    6a:3c:0a:19:41:e6:cb:62:d5:f5:de:35:b0:71:cb:
                    c6:ea:b2:7b:47:03:b0:2e:37:e2:40:83:e3:8a:c3:
                    92:a3:48:25:f9:ca:55:32:ee:2d:b8:bc:5d:37:97:
                    3e:9e:c9:fd:38:d8:e9:d4:1d:97:24:00:ef:d8:d5:
                    80:74:62:c6:71:3c:7e:93:53:ba:a4:48:2b:ae:24:
                    0d:d3:82:62:49:34:81:23:ec:d1:92:5d:8d:8c:61:
                    6f:d1:ca:45:e9:8f:3f:84:f7:76:b3:e9:fa:a8:4f:
                    f4:62:92:03:5a:e2:da:b3:15:9e:9d:ab:1c:ca:2c:
                    0a:3a:b2:4e:c8:36:bd:62:5a:98:7a:9c:13:a0:c4:
                    16:23:d5:fc:b2:5d:eb:84:6f:ff:17:46:4e:a5:ac:
                    49:87:e0:df:85:a9:ff:10:da:3a:82:94:ed:c0:26:
                    a7:14:77:e4:6c:bc:b3:5b:b9:0a:a3:c1:6d:f9:ea:
                    86:50:b1:b2:d8:79:b0:75:14:6f:36:5f:e6:2d:65:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:85:3A:AB:CD:41:DD:65:98:7C:C1:37:FB:D9:D4:E9:E2:D2:9A:21
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33392e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:63:0f:5f:eb:b6:dc:8f:f8:f4:ac:b6:77:02:c5:96:8c:d0:
         e5:60:14:60:a5:c9:97:7a:e0:40:74:fd:fc:64:27:98:f4:4b:
         1f:39:24:ed:63:fb:18:7a:21:e1:b1:95:06:39:73:37:1c:da:
         18:50:9d:c3:0a:ba:39:b9:e1:84:b4:1c:72:7f:43:43:89:6d:
         2c:f0:44:db:03:aa:b8:78:29:c6:f0:e6:e9:a2:c9:b7:6b:a0:
         b0:06:8e:b5:3f:82:f4:a6:76:f1:d2:81:44:ac:87:9d:71:da:
         1b:b5:fb:44:71:02:5a:39:bf:65:b7:5e:45:b6:da:46:ac:00:
         e3:dc:c4:98:79:10:e2:f9:f0:f1:c5:13:57:0f:08:f0:91:46:
         a8:65:f3:85:c2:46:33:50:d9:8c:33:fb:3e:98:b6:f5:da:05:
         93:84:b1:ff:83:65:00:36:30:90:34:94:af:f9:af:d8:02:3f:
         08:91:6f:c3:0d:31:8d:2b:6b:0e:05:62:f4:87:2b:71:2f:9a:
         f5:ce:6e:11:ec:1e:98:fa:72:eb:57:8f:eb:9a:41:ac:26:60:
         ba:47:ba:84:62:05:52:80:d2:cd:d1:94:a4:36:33:6b:d9:58:
         51:9b:3d:8d:92:21:cc:c4:3b:d9:53:c6:ad:f6:d9:ef:b7:83:
         65:1c:b5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org