Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa
File:                     34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (raw, json)
Hash identifier:          hOax3uctNdjpQ78bHzgtSAdW6BImUcEh2z33GpKFiVI=
Subject key identifier:   BC:BB:59:B6:17:83:5E:1C:A4:3B:2D:EB:7E:97:04:B4:31:B4:D6:F2
Certificate issuer:       /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
Certificate serial:       4B891D5E502BB185A1DA4B6CBAD8270B8388A76B
Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa
Signing time:             Thu 04 Apr 2024 10:48:51 +0000
ROA not before:           Thu 04 Apr 2024 10:43:51 +0000
ROA not after:            Thu 03 Apr 2025 10:48:51 +0000
asID:                     267229
IP address blocks:        45.231.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:89:1d:5e:50:2b:b1:85:a1:da:4b:6c:ba:d8:27:0b:83:88:a7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
        Validity
            Not Before: Apr  4 10:43:51 2024 GMT
            Not After : Apr  3 10:48:51 2025 GMT
        Subject: CN=BCBB59B617835E1CA43B2DEB7E9704B431B4D6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:72:87:cb:56:52:67:70:d9:d5:58:6f:2a:
                    0e:25:08:4f:e5:94:6e:b5:ef:af:da:da:4b:53:bf:
                    e3:9e:a8:06:3c:63:75:0a:b8:69:08:a7:6e:38:7a:
                    2d:ca:04:eb:0a:a7:59:d7:5a:b0:eb:1c:bc:29:92:
                    d8:e4:d6:86:54:3f:d6:20:b6:6e:f6:38:e8:ae:dc:
                    b9:95:6a:d9:81:27:04:c7:a6:14:39:51:9e:68:89:
                    ee:73:07:0f:a5:5f:43:da:5f:e2:6f:f3:d8:a3:be:
                    e8:30:38:9d:31:90:58:74:27:f9:b0:e3:59:46:e2:
                    c7:a1:0c:bf:e0:39:f3:2a:db:bf:31:2d:ed:07:5b:
                    40:11:b6:8b:85:a9:96:43:61:da:66:6c:68:a8:3c:
                    10:15:ca:6e:2a:a4:c7:84:09:f3:88:9a:eb:be:ff:
                    dd:a3:08:b2:a1:47:05:0c:ad:64:3e:b4:0a:16:bd:
                    83:96:82:17:55:da:92:4c:05:b2:e6:72:03:1e:df:
                    8e:8b:7a:b3:48:35:70:1c:7c:34:42:46:7c:d8:1d:
                    c9:0d:f0:66:8a:51:46:ce:8e:9b:2f:f5:c9:7c:f7:
                    2a:9c:72:06:ac:4c:91:18:8b:f7:4d:27:1a:6d:9f:
                    51:2b:89:0d:14:20:e3:36:8a:59:43:5e:3f:48:14:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BB:59:B6:17:83:5E:1C:A4:3B:2D:EB:7E:97:04:B4:31:B4:D6:F2
            X509v3 Authority Key Identifier:
                keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:70:90:fe:5b:9a:59:60:69:a7:9c:20:76:4b:ab:c4:c1:c4:
         b7:3b:ee:c9:83:df:22:ec:71:4b:00:55:a6:8f:8a:ea:41:81:
         f2:39:37:60:4d:02:92:d1:c0:26:a1:ea:93:23:a0:f4:e2:bf:
         cd:5f:f3:8b:95:71:6d:6f:8d:a7:8f:03:bb:18:f7:bf:79:81:
         7c:59:fe:fc:1b:bf:7f:0d:16:ce:65:fe:93:4c:06:89:be:e9:
         93:f1:cb:de:f1:23:b5:a5:b9:fa:0e:26:cd:da:f2:f0:1d:2f:
         6d:af:75:2f:58:32:8f:fc:7f:a0:e7:24:cb:f0:dc:6c:f4:e4:
         61:fe:74:92:cf:14:73:6d:29:94:b5:0c:ef:9d:7d:3a:f7:2d:
         74:ff:54:17:a8:c9:c4:24:3a:0f:ca:a3:f6:a9:c4:34:4a:d0:
         eb:cb:65:e5:87:51:af:de:90:83:e6:15:33:61:1f:ba:d2:1a:
         21:fc:72:41:25:54:69:dd:15:1a:76:51:35:32:f8:a3:1f:dc:
         27:1d:28:2a:63:a9:8a:2e:62:49:4f:16:8d:f3:e5:04:76:a5:
         86:44:1b:5c:17:e6:ad:3c:f1:d9:87:19:56:ab:5d:30:8a:b9:
         3b:f0:98:73:9a:7b:d2:4f:65:3c:2e:d8:91:b6:18:32:88:fa:
         28:33:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:23 2024 by rpki-client on console-ams.rpki-client.org