Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          XXw65yj8IZSTydnxyO7NGHhlMnbzgc9GRufzZ5lwdqE=
Subject key identifier:   89:7A:35:F3:2D:5C:EA:F1:F2:AE:D5:9E:2F:B6:34:8D:49:65:F6:4D
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       0D94963306898387B6B7DF38726CAAB932010222
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:00 +0000
ROA not before:           Thu 04 Apr 2024 08:37:00 +0000
ROA not after:            Thu 03 Apr 2025 08:42:00 +0000
asID:                     268296
IP address blocks:        45.237.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:94:96:33:06:89:83:87:b6:b7:df:38:72:6c:aa:b9:32:01:02:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:00 2024 GMT
            Not After : Apr  3 08:42:00 2025 GMT
        Subject: CN=897A35F32D5CEAF1F2AED59E2FB6348D4965F64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:5d:0b:07:20:b2:4b:d1:60:03:f8:22:57:
                    d7:d3:34:42:ba:95:a0:b2:f3:2f:fc:04:84:1b:67:
                    06:b0:83:9f:f9:73:f1:4f:a6:32:0d:20:95:13:85:
                    4d:ae:be:4a:83:fc:72:68:9d:8b:0a:b1:7a:06:03:
                    3f:2a:b3:34:ec:68:19:b5:1f:a3:52:f1:3a:ea:ee:
                    15:44:40:3c:4e:4e:10:7c:6c:9c:26:82:ff:28:32:
                    a4:bf:43:31:82:6e:25:57:2a:7b:cc:a1:9c:0b:99:
                    42:1e:7a:90:fb:91:e4:02:55:04:7f:a1:c4:35:a3:
                    88:4c:ce:ad:49:4d:9e:6a:1f:27:fc:de:3a:f2:4a:
                    6f:36:b3:e6:5d:51:17:e0:e2:58:d7:a2:ae:0b:64:
                    bb:a2:b6:d9:bb:97:32:f7:77:eb:b9:69:93:d0:1b:
                    6a:08:8b:ad:7c:0a:9e:2d:40:2e:6c:d3:13:0a:89:
                    19:6a:f8:a0:fb:6c:24:7d:60:da:0a:cb:09:59:13:
                    32:08:c0:df:e5:fe:08:26:21:db:81:26:16:79:bb:
                    21:5e:37:91:76:b1:e9:5a:9f:cc:c3:e9:d7:ec:bb:
                    07:b6:78:9b:95:df:06:7c:78:ff:a5:d8:43:bd:b3:
                    e9:c2:e6:04:c7:3e:ed:47:1c:51:d3:0f:60:8d:94:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7A:35:F3:2D:5C:EA:F1:F2:AE:D5:9E:2F:B6:34:8D:49:65:F6:4D
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:bf:c2:ff:e1:3b:9b:b3:ff:f1:48:66:49:ee:6c:2e:ef:c7:
         01:2c:46:2c:50:01:a1:64:59:17:7e:86:6e:52:c6:b2:6f:55:
         ae:fe:bf:33:d5:cb:14:fc:92:46:c5:fc:6b:09:04:00:8b:21:
         ed:63:d2:68:93:3e:67:3a:79:6d:c1:21:27:95:b9:d9:b7:45:
         a5:5f:4b:82:9a:4c:24:50:9a:8a:7e:23:03:13:0d:6b:e5:d3:
         71:8a:55:07:10:16:2e:24:39:b9:5e:1b:f7:4f:8c:d1:28:79:
         d7:87:ca:be:80:2f:63:62:d0:41:d6:3e:98:83:08:7f:83:96:
         db:1f:93:90:14:a2:bc:f2:11:ba:22:1a:4d:3e:12:e5:13:73:
         09:b9:c0:09:07:e4:cd:6a:95:e1:83:f1:88:47:d3:f0:5e:8d:
         f3:d9:aa:21:12:a0:e7:87:6a:8e:de:30:fe:5c:15:4b:e7:dd:
         0b:8a:b2:a1:c5:c5:84:d4:79:95:19:2f:96:98:2a:e0:c4:c0:
         d1:c3:f5:3b:ec:98:36:be:ff:02:c3:66:51:3a:95:2e:c6:cf:
         cf:77:e8:52:18:09:d4:9c:9a:8b:20:82:ba:48:ce:a5:d1:c1:
         e0:ed:b7:f1:00:6b:2d:da:60:7e:dd:2e:80:d0:c0:a8:9c:34:
         34:58:3b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:06 2024 by rpki-client on console-ams.rpki-client.org