Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/34352e3137342e3136342e302f32322d3234203d3e20323632353330.roa
File:                     34352e3137342e3136342e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          YxQqQ+rkTO7GE/PJRYCSTIP9p4I2kHSy55jIuU1Cz68=
Subject key identifier:   F8:33:36:42:09:39:80:A2:FB:D9:82:27:4B:6F:91:96:C7:D2:16:FE
Certificate issuer:       /CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
Certificate serial:       18841F1973CBAF38E075738A5671E7A9DDD5A4B4
Authority key identifier: 33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/34352e3137342e3136342e302f32322d3234203d3e20323632353330.roa
Signing time:             Thu 04 Apr 2024 11:45:22 +0000
ROA not before:           Thu 04 Apr 2024 11:40:22 +0000
ROA not after:            Thu 03 Apr 2025 11:45:22 +0000
asID:                     262530
IP address blocks:        45.174.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:84:1f:19:73:cb:af:38:e0:75:73:8a:56:71:e7:a9:dd:d5:a4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
        Validity
            Not Before: Apr  4 11:40:22 2024 GMT
            Not After : Apr  3 11:45:22 2025 GMT
        Subject: CN=F8333642093980A2FBD982274B6F9196C7D216FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:aa:48:50:d7:f2:a4:80:d1:74:0e:c0:33:38:
                    8f:88:d8:98:36:59:83:a7:14:87:4c:2a:04:9a:3e:
                    64:73:69:f7:d4:fb:b2:56:1a:1f:45:66:66:1f:1f:
                    e9:c5:e4:ec:66:cc:1c:d7:0d:8e:2b:59:c0:03:10:
                    02:33:a5:57:e3:5a:04:8e:1a:32:63:38:08:0d:31:
                    49:d0:79:f5:d5:fc:31:ee:41:1a:1e:03:6a:5b:57:
                    5e:79:59:cd:7c:2f:76:ae:32:12:1e:73:19:d3:7d:
                    d0:92:9c:12:53:72:0c:dd:aa:a6:f9:51:bb:33:4a:
                    d6:de:fd:a9:a2:2e:30:aa:44:bf:a8:e3:10:57:27:
                    a2:8b:31:5f:f4:41:aa:e8:58:d6:95:54:95:f7:ba:
                    41:27:24:0e:30:6b:dc:3e:15:7a:4b:e5:0c:85:7a:
                    1b:4a:e0:d7:c5:a3:f2:32:73:71:9f:c5:d1:9d:8b:
                    48:da:42:0f:dd:ed:df:b1:cd:c3:45:61:5d:6a:cb:
                    2c:4c:47:f1:60:84:41:cc:1e:9a:e6:c0:a9:6b:85:
                    8e:2d:74:9a:4b:d5:0b:a6:8e:54:ab:c1:65:02:3e:
                    9c:cf:e7:d8:b1:6e:01:85:e5:e5:fd:ca:28:66:b4:
                    e5:15:f9:e9:49:e8:75:a4:55:fc:75:e2:a4:8d:6e:
                    f6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:33:36:42:09:39:80:A2:FB:D9:82:27:4B:6F:91:96:C7:D2:16:FE
            X509v3 Authority Key Identifier:
                keyid:33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/34352e3137342e3136342e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:6b:7b:37:63:1b:17:cf:04:40:a4:ca:5a:f0:dc:e3:3c:46:
         5f:d1:73:a9:74:2d:ff:e2:77:a0:50:88:b3:a7:17:c9:01:d7:
         3e:6c:ec:09:88:a1:6c:6c:ac:4f:a6:86:4e:da:26:82:39:e5:
         32:ae:63:6a:ed:7e:13:08:78:10:75:4f:8a:de:d1:8c:18:6e:
         00:7b:28:4c:8b:c6:0a:45:fa:a8:8f:7d:75:60:3a:bf:db:b8:
         c1:01:1b:4d:f4:26:4d:03:82:01:d2:b7:d0:40:40:52:38:a2:
         ed:5d:38:54:41:dd:72:c6:99:ad:c3:86:4f:18:4e:93:82:81:
         ab:41:3f:a1:2b:fa:a6:c3:9c:af:71:02:f3:90:cb:67:81:6f:
         9e:24:05:0a:78:18:a3:58:8d:ba:a2:c2:96:69:fd:3b:c2:09:
         f1:af:72:64:4b:88:3b:cb:01:f5:30:30:3e:ac:93:39:9e:ff:
         be:85:89:2e:46:2c:3f:ad:47:34:ce:5d:f8:28:c6:88:89:70:
         f2:33:e9:51:a5:11:56:00:21:74:d2:f2:da:af:f0:b9:52:ba:
         0c:32:85:97:32:5c:8a:3b:4a:98:a8:8f:90:27:bc:81:c9:c0:
         d2:b4:75:34:62:42:1f:e1:16:f5:8a:1d:78:5f:41:1e:7e:8e:
         39:a5:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:09 2024 by rpki-client on console-ams.rpki-client.org