Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa
File:                     34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa (raw, json)
Hash identifier:          grmU47/QAl0u9WCk4uzopcXzP+7tvEoatPmoF8mrWt4=
Subject key identifier:   C3:4E:5D:56:41:E5:43:9F:8B:D4:04:78:FF:2F:EF:5C:1F:7D:7C:BA
Certificate issuer:       /CN=4A2574393B503DE41274B86A7310E0272B6E4C75
Certificate serial:       6712A0BF6C5410095200FDD118CC42445A80538E
Authority key identifier: 4A:25:74:39:3B:50:3D:E4:12:74:B8:6A:73:10:E0:27:2B:6E:4C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa
Signing time:             Tue 05 Nov 2024 13:11:38 +0000
ROA not before:           Tue 05 Nov 2024 13:06:38 +0000
ROA not after:            Tue 04 Nov 2025 13:11:38 +0000
asID:                     267311
IP address blocks:        45.233.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.crl
                          rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 10:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:12:a0:bf:6c:54:10:09:52:00:fd:d1:18:cc:42:44:5a:80:53:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A2574393B503DE41274B86A7310E0272B6E4C75
        Validity
            Not Before: Nov  5 13:06:38 2024 GMT
            Not After : Nov  4 13:11:38 2025 GMT
        Subject: CN=C34E5D5641E5439F8BD40478FF2FEF5C1F7D7CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:07:62:00:1a:13:7e:e7:34:bb:ae:d6:8c:
                    be:54:78:4a:e0:85:e2:98:01:76:98:a2:1a:c4:38:
                    65:38:3e:47:d6:ef:9d:96:a4:19:b3:aa:1b:31:2e:
                    dd:a3:85:1f:85:e4:69:22:1a:0c:0c:7c:bc:69:d4:
                    b4:08:70:03:bf:57:3c:a6:86:1c:37:2b:10:cb:71:
                    c8:c1:1d:51:8c:23:ce:b3:66:32:20:5f:a5:f1:b8:
                    00:ab:8a:d8:7b:04:d7:46:c8:13:1d:cf:6c:1f:91:
                    8d:79:86:3d:e5:2b:40:3a:8b:bd:c2:f7:ce:96:01:
                    3e:6f:23:2c:0c:88:f8:b9:f2:0f:39:4d:48:2b:ef:
                    97:39:dc:ab:06:fd:f1:04:2f:7c:99:67:6b:3e:4c:
                    6f:13:83:96:52:79:5e:9f:9e:20:0b:9d:5a:14:68:
                    e7:cd:a1:3e:ef:c0:bf:3d:3c:20:7f:4d:21:76:e1:
                    9f:91:95:40:a8:dc:b6:10:e5:5b:51:cb:b1:71:c9:
                    e4:57:5f:a2:72:d4:ae:8f:94:da:bd:cb:bc:7c:e8:
                    d1:2b:2d:d0:84:43:c9:9b:fa:8b:f2:6e:25:0f:91:
                    ae:92:04:90:ee:be:63:69:e4:c5:3d:5a:22:ad:0c:
                    f8:ac:a0:a6:2d:6c:83:9e:04:a2:06:0c:2b:6f:55:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4E:5D:56:41:E5:43:9F:8B:D4:04:78:FF:2F:EF:5C:1F:7D:7C:BA
            X509v3 Authority Key Identifier:
                keyid:4A:25:74:39:3B:50:3D:E4:12:74:B8:6A:73:10:E0:27:2B:6E:4C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:18:8e:b8:61:80:e6:a9:18:24:3e:65:d3:92:39:03:06:13:
         ce:13:b5:46:7a:0f:63:2e:8e:d5:e7:13:e3:38:4d:e8:25:15:
         ae:e6:b5:fd:a2:1c:2b:0f:d1:e7:fc:67:8b:73:90:61:d5:c2:
         d6:9d:81:b3:ab:bd:08:fa:f9:fe:08:23:69:ef:11:37:7a:4d:
         03:45:82:70:cf:3b:b8:1e:5d:3c:72:f9:29:51:76:63:68:d7:
         36:f7:ed:9c:7c:aa:28:67:c8:29:0f:9a:83:0e:f3:1a:25:e4:
         ee:3e:73:59:43:48:82:2b:c8:23:c8:ba:4c:67:33:a2:c0:27:
         5c:ae:4e:8b:64:52:d8:24:be:56:37:2f:ca:ac:60:8e:15:bc:
         79:8a:38:b2:62:9e:a1:e2:0a:38:57:40:20:48:01:55:bd:cd:
         ab:24:d9:77:51:27:b0:bf:c6:d4:1a:ec:3c:5d:32:7b:7a:ad:
         1d:4e:ab:6f:79:2a:78:a0:0b:a1:5a:f5:4e:6a:91:4b:4d:e8:
         43:1d:3a:43:21:c8:3a:6c:64:6d:10:11:38:d4:dd:c0:69:e3:
         77:db:b1:cc:88:b0:1b:56:b2:7c:0a:ea:76:a8:d8:0d:54:21:
         5a:aa:71:f6:f0:9e:1c:18:89:49:9d:25:49:57:31:91:36:f7:
         73:82:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 10:53:34 2024 by rpki-client on console-ams.rpki-client.org