Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa (raw, json)
Hash identifier:          tP9Ggrfrze/si5pVV4O/3uCx1ZPql2+fY8ChHtghLEM=
Subject key identifier:   20:AA:8C:15:C6:F5:4D:36:9C:44:9D:8A:A0:EE:39:85:13:EB:93:8F
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       625A2518A95E36E17565550F626514851409D8E3
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:00 +0000
ROA not before:           Thu 04 Apr 2024 08:37:00 +0000
ROA not after:            Thu 03 Apr 2025 08:42:00 +0000
asID:                     268296
IP address blocks:        45.237.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5a:25:18:a9:5e:36:e1:75:65:55:0f:62:65:14:85:14:09:d8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:00 2024 GMT
            Not After : Apr  3 08:42:00 2025 GMT
        Subject: CN=20AA8C15C6F54D369C449D8AA0EE398513EB938F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:44:de:46:57:4d:40:00:de:f4:be:fb:1b:
                    29:c7:a2:96:f4:63:a5:85:9e:a2:c7:d8:ba:77:5e:
                    3d:66:28:a2:96:62:0a:9f:27:41:98:4f:a4:c0:67:
                    0c:ff:e0:8c:f8:07:83:e0:28:87:7b:99:ee:8d:79:
                    6f:a0:8e:af:2b:64:87:10:1e:d7:73:f1:48:ac:65:
                    0a:f9:e3:74:b8:04:cf:2c:f6:7d:ae:96:6b:32:7b:
                    ae:f0:6e:df:3c:03:34:b9:1d:2b:fb:af:a5:e5:94:
                    44:e1:8a:88:15:a7:04:7f:bf:fc:d1:9f:2e:f4:89:
                    f7:fd:fa:e6:61:71:31:3d:73:36:f5:e8:15:13:7a:
                    4d:f8:55:0a:5b:66:e9:22:08:d1:15:3e:eb:00:82:
                    eb:a3:50:ac:1a:91:ee:76:34:c6:7d:1c:a3:25:df:
                    18:31:42:6f:f6:cb:af:a5:fe:2d:36:77:37:d1:db:
                    6d:c4:3c:e8:d5:38:39:86:0a:35:92:71:b7:bc:23:
                    98:c3:c7:bb:0a:65:92:ae:9d:76:29:5a:c7:db:a7:
                    44:91:50:29:89:0c:74:50:5b:72:1b:2e:bb:d9:66:
                    8a:40:f8:3a:3c:0e:35:07:0c:ad:87:2b:5e:c9:7f:
                    49:58:8f:7b:0e:1f:97:62:b8:99:98:5a:fa:76:06:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AA:8C:15:C6:F5:4D:36:9C:44:9D:8A:A0:EE:39:85:13:EB:93:8F
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:f5:6d:e1:4b:a9:b2:4c:57:a1:75:37:5c:a5:86:4e:a6:
         82:ca:6a:ce:0b:01:5f:e6:4c:73:b3:a9:61:2c:70:c4:fb:64:
         12:34:1d:60:62:5d:e9:05:18:87:c4:ff:19:89:d1:85:fa:65:
         94:dd:6b:5d:de:f1:39:83:3d:1b:52:1a:09:7f:72:8e:2f:19:
         bb:5a:9c:50:0f:66:73:e3:32:b6:b1:e9:e7:43:20:05:29:f7:
         6b:2d:44:98:28:3c:cd:b7:af:92:5b:f3:5a:72:bb:46:5e:62:
         44:03:cd:29:29:1d:ad:74:d9:1f:67:ef:b8:18:5a:6e:e2:3e:
         3d:c2:c8:01:ae:d7:80:76:e3:d7:0d:47:81:5a:c4:ce:e2:3d:
         b9:96:11:b1:53:86:26:bd:10:24:6f:fa:74:c0:ec:7e:08:9e:
         f0:17:33:30:32:b4:77:c9:06:ab:9c:b1:ae:26:f0:ef:8e:51:
         54:96:03:22:e4:ef:f4:c6:59:f9:90:7d:b7:09:b4:96:77:19:
         64:95:3b:fa:6a:84:09:9e:09:f2:7a:12:4f:76:f9:9c:0b:b2:
         e6:77:9b:0d:f3:8e:bd:86:2e:9c:26:fc:18:2c:c6:7b:07:a0:
         dc:bb:55:93:70:69:ba:cf:00:62:c3:70:5c:ea:77:5d:3e:16:
         c9:cb:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:58 2024 by rpki-client on console-fra.rpki-client.org