Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa
File:                     34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa (raw, json)
Hash identifier:          zIkSu2b5BXWwP3j/7oDDFVEcHPRoOWvm+sr/zkFpI8I=
Subject key identifier:   0B:1F:34:E8:C3:9F:09:13:54:03:62:3E:AE:2F:59:72:62:65:1E:32
Certificate issuer:       /CN=61AD0EDC55E74D73B77ED252B44E764D2028B7A4
Certificate serial:       675809F6426DFDC1A8CB77B91A9FE8514A0C2896
Authority key identifier: 61:AD:0E:DC:55:E7:4D:73:B7:7E:D2:52:B4:4E:76:4D:20:28:B7:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa
Signing time:             Thu 04 Apr 2024 02:00:16 +0000
ROA not before:           Thu 04 Apr 2024 01:55:16 +0000
ROA not after:            Thu 03 Apr 2025 02:00:16 +0000
asID:                     267125
IP address blocks:        45.228.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.crl
                          rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:58:09:f6:42:6d:fd:c1:a8:cb:77:b9:1a:9f:e8:51:4a:0c:28:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61AD0EDC55E74D73B77ED252B44E764D2028B7A4
        Validity
            Not Before: Apr  4 01:55:16 2024 GMT
            Not After : Apr  3 02:00:16 2025 GMT
        Subject: CN=0B1F34E8C39F09135403623EAE2F597262651E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:7d:84:10:ff:fc:4f:64:99:29:8b:7d:2f:
                    14:4f:b8:ac:1f:49:99:e5:89:de:3a:21:53:4c:6b:
                    70:de:be:a4:64:b3:a0:a7:45:d9:1e:7e:66:5e:dd:
                    12:45:70:4c:27:71:2d:7b:67:dc:8f:dc:17:8f:81:
                    8c:d2:3a:ea:09:04:bb:e7:a7:83:30:cb:0e:0d:47:
                    38:77:32:0d:0b:2b:21:8a:6c:57:54:4b:db:7d:ae:
                    06:fd:94:be:4b:f6:e2:03:aa:40:40:98:49:23:42:
                    79:26:bc:99:6e:e2:a2:d8:0c:f3:80:0b:59:33:db:
                    63:f4:65:b7:f0:77:6d:22:dd:c8:8c:9a:8f:57:2b:
                    a9:9e:83:87:e6:a7:74:e0:8e:38:da:d4:ef:23:6e:
                    c5:ef:33:5c:71:a8:f5:8d:15:02:28:54:59:27:52:
                    18:b2:8f:34:73:ae:e0:be:93:9d:0d:e0:6c:13:14:
                    97:71:b0:c3:04:f9:50:35:9f:d8:a8:af:8e:a5:40:
                    58:25:ad:c7:87:d7:df:4d:ba:b3:f0:c8:9c:a7:b0:
                    45:cb:36:6b:2c:28:0d:20:fd:f7:25:d7:ff:65:b2:
                    4f:76:9c:c9:14:0c:fa:91:21:49:25:19:20:9f:27:
                    90:7e:e7:65:31:69:d0:18:0a:65:01:ed:c5:c6:a6:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1F:34:E8:C3:9F:09:13:54:03:62:3E:AE:2F:59:72:62:65:1E:32
            X509v3 Authority Key Identifier:
                keyid:61:AD:0E:DC:55:E7:4D:73:B7:7E:D2:52:B4:4E:76:4D:20:28:B7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:75:87:7b:bf:21:f3:a4:d7:b2:51:56:cd:c0:03:91:b1:8e:
         4d:7f:14:d7:37:bf:22:68:49:49:ea:a4:13:d9:d7:dd:e8:fc:
         04:36:13:4e:77:14:f9:f2:7f:09:06:18:9c:fb:51:16:fa:84:
         b5:0a:39:f4:96:90:ca:6a:09:9f:7f:5f:81:73:d5:48:4c:ac:
         fd:61:a8:a6:d7:e2:5c:b7:f0:fc:b0:b3:3e:f7:39:7e:a3:6b:
         7f:a5:20:98:14:1d:b4:80:b3:05:01:04:1e:51:77:ff:96:e8:
         ee:a7:62:6b:87:84:8c:20:61:29:b0:d2:6a:42:60:0a:27:68:
         88:32:75:89:95:7c:16:c3:be:df:3f:20:6a:f9:df:dd:8e:70:
         b4:e8:b9:91:56:2e:2b:43:57:7a:e7:6f:d5:b2:d3:b1:6e:0d:
         96:bd:6c:e8:ab:86:ce:42:e5:a4:4b:ef:80:eb:48:71:e8:eb:
         69:fd:d5:7f:c5:d1:74:eb:a5:6f:ed:e2:a8:b8:8c:b8:85:23:
         8f:32:a4:7d:1e:0a:11:96:17:bb:b5:eb:9b:c9:5b:22:37:fd:
         41:69:c5:ca:c2:75:5d:50:aa:e9:9b:91:e9:96:16:6d:12:dc:
         67:8d:47:53:c3:99:ab:9e:78:33:d7:3c:a7:c4:fc:ce:4c:6e:
         8d:b5:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:35 2024 by rpki-client on console-ams.rpki-client.org