Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (raw, json)
Hash identifier:          1f3FFKzrzVsQrOo9aMKkJW5qgWsYMG+zRtJe8SfEHjI=
Subject key identifier:   11:FC:15:E2:88:9E:EF:42:48:82:E5:70:D8:B1:37:CC:BB:D3:6D:11
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       43D18C84E9186E5E8100BCC869E8D8B517B355F8
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     267334
IP address blocks:        45.233.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d1:8c:84:e9:18:6e:5e:81:00:bc:c8:69:e8:d8:b5:17:b3:55:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject: CN=11FC15E2889EEF424882E570D8B137CCBBD36D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:58:43:24:68:08:ee:d5:e9:bb:a7:51:3d:
                    60:86:65:1e:d7:f3:51:8d:e6:b2:5c:86:cf:8b:c9:
                    70:bc:9a:6c:49:c6:c9:ae:80:f8:45:a8:13:36:39:
                    6b:79:a9:f7:d4:24:5e:9f:82:b4:31:1d:c3:65:22:
                    11:a9:4c:73:5e:df:e8:29:ba:14:79:70:5f:ca:ef:
                    ca:80:ec:1e:0b:a3:25:72:78:07:00:4a:91:ce:c7:
                    cb:b2:cd:e7:fc:19:76:28:aa:a9:e3:e2:20:0f:3b:
                    a6:f2:0e:e6:57:65:68:ac:ce:64:71:9b:b9:1a:12:
                    99:98:1e:7a:07:a9:95:84:25:97:a7:d6:e3:49:64:
                    d9:09:3f:e3:7a:4f:9f:40:c4:35:6f:f1:41:b8:ac:
                    b4:d2:2a:b8:4a:b7:d5:88:fb:2e:e7:a8:62:41:28:
                    c3:75:2d:48:87:17:38:55:84:a5:dd:54:d0:ec:c7:
                    45:48:89:31:b2:4d:14:1a:89:92:0f:a9:b2:eb:fc:
                    4b:79:d8:07:0b:14:ac:37:bb:99:51:37:e8:ea:ce:
                    38:39:c4:2a:01:e1:cd:72:e1:2e:80:4f:99:f3:8b:
                    54:d0:66:2e:cd:ef:57:41:85:33:09:b3:31:55:b9:
                    8b:8a:50:3b:81:fc:23:8c:0f:07:0f:5a:1c:56:ec:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FC:15:E2:88:9E:EF:42:48:82:E5:70:D8:B1:37:CC:BB:D3:6D:11
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:2c:45:e2:bb:f5:c3:3e:68:13:f9:d6:29:df:61:e7:c1:81:
         38:4f:2e:95:23:ac:87:ff:d6:f0:94:d5:c9:d3:45:c1:f4:bf:
         d5:20:5b:86:e5:49:f8:8b:38:00:5f:61:5f:37:47:12:d8:3d:
         a7:21:ba:8b:79:d8:7c:03:07:31:48:d5:6d:05:9f:38:24:ef:
         8a:ae:1d:66:a9:03:bd:81:d2:51:de:09:44:94:50:72:ff:ab:
         1f:c1:d5:5f:78:40:db:ca:50:26:12:a6:69:25:a5:e3:0f:9e:
         e5:4e:13:d5:47:d7:54:5a:e1:c1:8a:08:76:0c:d9:0c:aa:92:
         06:89:9f:7e:76:79:58:c8:87:52:62:b5:29:26:2a:15:07:1c:
         84:8f:e9:d8:4b:20:6e:54:42:42:49:5e:21:85:af:c9:cc:c7:
         47:fc:6b:e0:83:a5:21:e2:fb:a9:97:ba:fc:77:a9:08:f9:9a:
         56:64:8d:80:c1:b5:3f:06:53:08:3e:b8:45:19:af:9b:b8:bf:
         2c:7a:1c:e0:52:7c:d2:05:af:06:5a:fa:16:89:5c:54:26:57:
         41:d9:19:b0:56:63:88:64:11:b0:d7:1a:6e:f9:a8:0f:e7:11:
         85:dd:07:2e:c8:20:be:30:80:15:3b:20:30:fe:2d:1d:15:fc:
         12:51:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org