Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa
File:                     34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier:          03tUioisypN7Gz1rDUdJTZYqJEBS+xGUiFCymO2EEVw=
Subject key identifier:   C6:8E:72:88:3D:B9:11:E0:C5:AB:87:6E:B5:81:01:1E:C1:F2:78:85
Certificate issuer:       /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial:       2535AF7A97A3E9CAFD62523E89A7CF337E398400
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa
Signing time:             Thu 04 Apr 2024 09:21:24 +0000
ROA not before:           Thu 04 Apr 2024 09:16:24 +0000
ROA not after:            Thu 03 Apr 2025 09:21:24 +0000
asID:                     267222
IP address blocks:        45.229.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:35:af:7a:97:a3:e9:ca:fd:62:52:3e:89:a7:cf:33:7e:39:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
        Validity
            Not Before: Apr  4 09:16:24 2024 GMT
            Not After : Apr  3 09:21:24 2025 GMT
        Subject: CN=C68E72883DB911E0C5AB876EB581011EC1F27885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:4e:d0:53:3c:87:bc:24:9a:1f:5f:b3:e1:
                    38:04:17:60:17:d7:eb:97:7c:35:da:16:1f:20:82:
                    3c:4d:f2:7b:e1:71:5a:8e:ab:00:92:69:b8:28:7a:
                    48:5d:e5:b3:9b:77:5f:92:d6:81:3c:4f:99:1b:cf:
                    0c:31:4c:31:e4:b4:61:45:fd:ab:ad:5a:4f:cf:81:
                    63:16:af:1a:52:91:f4:e9:79:42:e8:70:fe:9e:bf:
                    5f:2d:24:2c:a4:f9:d8:45:5a:ec:fd:72:2a:e4:da:
                    25:89:f4:8b:a7:3a:67:2e:4e:9b:79:5e:f3:f9:66:
                    6c:a3:1e:83:15:43:28:56:91:e2:2c:7d:65:1b:4f:
                    d3:e3:de:99:69:b5:2d:0c:0d:33:37:ed:23:db:bc:
                    e9:cc:e5:49:50:cf:ad:da:45:76:ce:8d:d2:26:15:
                    90:c6:75:fc:6b:d9:90:0c:ef:bd:48:d4:f2:32:79:
                    1b:c0:49:e3:6d:60:86:f9:48:c3:18:78:f7:ac:b8:
                    51:82:2f:d4:f8:5a:32:d3:9d:8a:76:90:35:a3:80:
                    0c:c8:e2:a7:3c:a9:8e:dc:e5:2e:a4:32:0d:8f:2d:
                    16:04:b3:4e:90:49:6e:53:c6:d5:0f:51:ae:70:ea:
                    a2:ac:78:27:c5:86:f8:a1:e2:e8:44:60:ed:73:aa:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:72:88:3D:B9:11:E0:C5:AB:87:6E:B5:81:01:1E:C1:F2:78:85
            X509v3 Authority Key Identifier:
                keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:3d:c8:95:e9:cc:c2:cb:c5:75:02:40:ac:a9:b1:30:d0:59:
         22:c7:e9:89:94:eb:0f:db:2d:51:d1:57:4a:b5:84:14:8e:a6:
         6c:94:20:c9:1d:3b:4f:9f:77:94:0f:f8:e5:a1:40:31:f2:89:
         d6:cd:73:05:03:81:e4:60:00:1e:29:e7:56:98:57:b7:0f:45:
         4c:e9:27:b2:91:35:a8:db:54:79:0e:14:73:0f:08:8f:69:fa:
         0c:5a:0f:9f:d0:ad:67:23:31:d1:1b:1c:1a:e9:b1:96:40:44:
         20:1a:a7:51:2a:ed:05:57:f1:2c:b5:40:5d:27:fa:cb:62:b5:
         12:9e:cb:87:4f:a6:93:94:04:a8:d5:db:0d:5f:7b:4e:2e:66:
         ac:75:ac:2e:5d:de:06:ad:0f:7d:31:a7:ea:5d:8e:99:c8:7a:
         ab:12:af:b3:c8:b5:ac:0c:da:a4:4b:16:82:d8:0f:b7:89:b2:
         22:ec:07:25:25:fe:ac:00:f6:6d:82:f4:f7:d9:db:9d:1f:9b:
         fb:56:a2:c2:22:c2:f6:b1:c3:b6:de:25:2c:b0:5d:dc:c1:cc:
         af:43:44:30:b4:5f:f6:20:a1:e2:51:eb:68:cf:f3:e0:71:08:
         1d:db:2b:53:eb:c9:d9:e5:60:5e:57:23:c8:ad:82:75:ef:23:
         76:45:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org