Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa
File:                     34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa (raw, json)
Hash identifier:          u38y4XtgEd6DmrkYBSxlKIxSkIrJKVR+1At4DpNtk+s=
Subject key identifier:   4E:72:DA:C5:E5:00:A6:7B:A0:2B:01:F9:8A:80:A6:5F:1B:C2:D0:FA
Certificate issuer:       /CN=F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A
Certificate serial:       59928A7942E913DC8B31A0743892285F49560A1E
Authority key identifier: F3:2E:3E:7C:A4:FB:14:20:8F:BA:D4:D9:1D:24:DA:67:9A:98:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa
Signing time:             Thu 04 Apr 2024 15:03:29 +0000
ROA not before:           Thu 04 Apr 2024 14:58:29 +0000
ROA not after:            Thu 03 Apr 2025 15:03:29 +0000
asID:                     271609
IP address blocks:        45.183.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.crl
                          rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Jun 2024 15:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:92:8a:79:42:e9:13:dc:8b:31:a0:74:38:92:28:5f:49:56:0a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A
        Validity
            Not Before: Apr  4 14:58:29 2024 GMT
            Not After : Apr  3 15:03:29 2025 GMT
        Subject: CN=4E72DAC5E500A67BA02B01F98A80A65F1BC2D0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:d3:da:5a:17:8c:d9:ce:b0:54:e0:f6:9f:
                    05:56:2f:a7:81:ad:4b:0f:35:85:da:03:82:ec:0b:
                    5a:78:b4:51:d9:d8:35:81:14:18:e9:cd:bb:f6:3d:
                    30:1b:cc:26:5b:2e:b7:19:1a:50:5d:a2:51:6f:52:
                    90:e2:26:c3:f7:f6:ee:66:e5:78:15:4b:0f:32:62:
                    56:a1:b8:e4:3c:37:1b:8d:6c:95:3c:52:3b:02:57:
                    50:ca:8a:44:1e:88:97:b3:ba:ab:8f:02:ac:e3:5e:
                    d8:8b:a0:da:1c:74:ca:9f:22:bd:ad:81:ef:58:50:
                    29:31:2b:98:bd:6e:99:f1:75:48:25:2a:9e:d2:0b:
                    c5:2c:0e:3a:cf:f1:bc:7e:10:20:80:6b:32:af:8e:
                    cc:5f:0c:93:89:82:80:a1:1b:9e:91:91:f5:1d:1f:
                    5d:b4:a5:1c:ec:12:65:bd:56:ce:6b:82:30:71:75:
                    8d:80:f3:fd:cb:80:a9:98:be:93:64:b0:ff:8a:90:
                    87:58:7a:5d:aa:f6:bb:15:8b:55:2d:e4:5d:55:f4:
                    ee:42:aa:d9:dc:cc:ed:87:ac:9d:fa:a8:15:3c:55:
                    61:b5:f2:de:91:bb:87:a8:ab:9d:4d:f1:11:a8:36:
                    71:94:60:04:f9:e8:f9:8a:f1:33:b7:d7:0e:17:dd:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:72:DA:C5:E5:00:A6:7B:A0:2B:01:F9:8A:80:A6:5F:1B:C2:D0:FA
            X509v3 Authority Key Identifier:
                keyid:F3:2E:3E:7C:A4:FB:14:20:8F:BA:D4:D9:1D:24:DA:67:9A:98:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:d7:d6:b6:d3:b5:0a:6d:1d:61:68:e2:fd:e5:80:84:bb:
         b9:51:97:0b:04:34:5f:e6:f4:14:41:40:59:ed:16:80:e3:9b:
         27:91:7e:5b:71:d3:be:50:f0:0c:32:d2:e1:15:29:d5:27:77:
         b2:0c:ec:aa:f3:92:de:ed:fe:15:04:85:1c:43:86:7f:98:8d:
         70:ec:0f:01:6f:09:0e:3f:65:ed:7b:f0:1c:00:fe:9f:64:bc:
         1a:6e:7a:b9:4b:c2:84:b6:80:18:5c:b1:85:c9:f4:ea:5d:93:
         e2:af:f0:82:39:9e:29:0c:ef:1b:71:b0:c8:ad:27:6e:42:42:
         f2:d3:93:f8:6c:43:31:d2:c1:dd:0d:55:0f:5f:04:c5:2a:45:
         4f:d0:7c:0e:75:46:5a:ec:10:36:f0:2f:22:d6:0f:1c:8a:c3:
         95:6e:14:17:68:1e:19:70:07:4d:19:89:cf:e9:7d:63:02:15:
         99:78:ba:0d:08:16:ea:58:2b:ff:e0:a3:81:19:0d:bc:aa:dd:
         85:5e:c0:c3:ef:ca:7e:b3:8b:1c:10:c6:04:42:5a:ea:72:92:
         76:d4:3b:bb:6c:ac:7a:fb:5a:39:57:b9:58:89:1a:0d:4e:76:
         14:ef:cd:cd:0a:db:44:bd:ad:e0:19:f6:6c:ae:8e:52:e7:0c:
         4e:05:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 14:05:28 2024 by rpki-client on console-ams.rpki-client.org