Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/34352e3233372e32392e302f32342d3234203d3e20323638323633.roa
File:                     34352e3233372e32392e302f32342d3234203d3e20323638323633.roa (raw, json)
Hash identifier:          sNVDKLmb5ZyJKnSotFtUtjdCdog8LZbuKJm21xbvsbg=
Subject key identifier:   94:7D:DD:3E:DD:06:CD:C8:11:EC:6B:4E:43:5E:E2:9B:0B:DC:63:72
Certificate issuer:       /CN=C41C6680EE5BD7E7919B2A3D1D849805DB132937
Certificate serial:       347508846CDB05927EE35B58BF51330233A07785
Authority key identifier: C4:1C:66:80:EE:5B:D7:E7:91:9B:2A:3D:1D:84:98:05:DB:13:29:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/34352e3233372e32392e302f32342d3234203d3e20323638323633.roa
Signing time:             Tue 21 May 2024 01:44:22 +0000
ROA not before:           Tue 21 May 2024 01:39:22 +0000
ROA not after:            Tue 20 May 2025 01:44:22 +0000
asID:                     268263
IP address blocks:        45.237.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.crl
                          rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:75:08:84:6c:db:05:92:7e:e3:5b:58:bf:51:33:02:33:a0:77:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C41C6680EE5BD7E7919B2A3D1D849805DB132937
        Validity
            Not Before: May 21 01:39:22 2024 GMT
            Not After : May 20 01:44:22 2025 GMT
        Subject: CN=947DDD3EDD06CDC811EC6B4E435EE29B0BDC6372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:be:70:11:1e:07:2f:ee:4f:f2:0c:8b:ce:
                    d1:d0:4b:80:3e:cb:ec:15:97:4f:c6:a8:1d:cf:a7:
                    b6:21:fe:81:40:21:ec:47:e1:fe:85:7c:2f:60:c4:
                    3b:60:75:6c:46:a9:ca:ea:bb:b1:fb:08:6a:5c:2f:
                    30:80:4d:6c:cd:a8:55:62:52:98:a5:3d:f9:9d:87:
                    49:71:3b:68:29:b6:fb:b7:81:70:c6:d0:8b:31:ba:
                    8e:37:04:10:3e:fd:fd:09:9c:43:e1:5e:d2:5c:79:
                    45:4d:ce:e4:49:e6:b4:b2:36:07:a9:46:9b:65:de:
                    bd:a0:9e:48:21:bb:08:4d:04:ce:97:21:c6:90:94:
                    b7:75:13:4c:aa:e1:54:a8:f3:90:da:48:55:c4:bb:
                    fb:8b:98:52:5b:d0:57:ab:c5:6b:9a:9d:64:ab:63:
                    ce:c4:45:f4:13:91:a8:95:14:40:9f:28:96:56:a6:
                    a1:99:ef:20:e9:28:57:ea:f3:64:85:60:91:c0:fd:
                    5e:2a:9b:0e:a9:a6:02:67:16:f8:fb:de:73:81:76:
                    ea:83:ee:64:a0:49:d2:be:a5:fe:13:17:ed:f4:c9:
                    52:79:f9:30:ee:98:d5:14:d8:52:e4:85:76:88:79:
                    38:d0:7c:9c:5a:f0:3c:a4:47:90:4d:44:80:cc:f7:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:DD:3E:DD:06:CD:C8:11:EC:6B:4E:43:5E:E2:9B:0B:DC:63:72
            X509v3 Authority Key Identifier:
                keyid:C4:1C:66:80:EE:5B:D7:E7:91:9B:2A:3D:1D:84:98:05:DB:13:29:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/34352e3233372e32392e302f32342d3234203d3e20323638323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:31:76:b9:cc:2a:56:3a:a0:f0:e4:ad:6f:57:7e:d8:85:
         8c:a3:c7:9a:50:bc:7f:dd:8a:55:a4:d1:17:69:69:db:ee:36:
         0e:e8:a3:86:59:f8:66:00:b1:c5:8d:4a:69:f8:cd:c7:94:e9:
         2e:ec:91:7b:8e:c3:3b:ad:84:9e:d1:e5:f9:2d:88:c3:6c:d8:
         20:d3:72:75:26:ba:86:44:d3:fe:42:b2:eb:9b:9e:51:24:33:
         52:e8:6f:f8:96:3e:6d:34:d2:05:eb:77:7e:69:9f:9b:67:16:
         89:1c:f8:a4:2c:35:bf:1c:50:bb:a3:98:2a:40:6a:d7:72:8f:
         13:6b:ec:96:3d:e9:c7:b9:c0:92:59:2a:e4:c3:76:f3:62:f6:
         49:c7:97:19:9d:0a:0b:eb:11:59:99:ed:a2:ae:1e:0d:3f:d7:
         3f:b7:c0:b6:39:0e:6b:b8:c4:c8:27:d9:c4:e7:04:87:4a:44:
         d3:f7:f8:db:e5:af:f0:db:46:41:6b:0b:40:3a:bd:09:80:3b:
         c7:a7:4d:4d:f0:09:bf:a0:b5:dc:ac:be:b5:dd:ec:95:ba:c3:
         84:c0:e5:23:77:08:04:70:c7:52:f9:65:74:1a:2c:13:33:57:
         e2:6c:2a:06:ec:fa:0f:bc:3f:51:bf:bb:80:73:4c:ea:50:30:
         e5:72:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:51 2024 by rpki-client on console-fra.rpki-client.org