Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          Jz33xvG6we5J3bnsKrH98ypAOErqqAzqTauBNpJzjdQ=
Subject key identifier:   75:75:2A:C7:FD:95:CC:6F:9D:73:DB:4C:5C:90:02:27:CE:CF:C2:68
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       31FD9CBF3431F25A6C760309A98F25CCDFDD40D3
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     267334
IP address blocks:        45.233.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fd:9c:bf:34:31:f2:5a:6c:76:03:09:a9:8f:25:cc:df:dd:40:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject: CN=75752AC7FD95CC6F9D73DB4C5C900227CECFC268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:c3:f2:53:ee:d3:e2:39:7a:95:ec:30:6c:
                    25:58:f1:5b:d2:4a:46:e0:e2:c3:97:eb:c9:e0:62:
                    1c:a9:6e:8e:95:d9:a4:60:59:67:4d:43:f6:69:2a:
                    26:ed:3e:6e:7b:0a:87:b0:27:22:19:cd:03:db:ae:
                    b6:b3:e1:42:e8:74:c8:15:4f:ef:05:a5:db:12:a7:
                    b3:aa:47:a7:e5:12:88:02:f7:a5:05:15:b2:e3:40:
                    4d:ce:07:23:88:59:57:db:47:4e:7c:54:f2:88:d6:
                    41:ed:4a:f1:d6:98:4e:80:58:de:66:ce:85:de:d2:
                    50:56:fb:70:8d:6d:60:c1:e5:24:66:6e:f8:c1:33:
                    c7:19:48:93:46:a4:ae:78:77:e6:d8:aa:e4:65:55:
                    99:df:04:39:67:74:75:20:11:6c:8f:bc:3f:f0:23:
                    57:67:61:20:65:d7:54:f2:31:de:f0:a5:8e:56:e7:
                    bb:8e:43:a8:3e:0b:f0:ad:d5:13:24:3f:6b:e7:65:
                    24:2b:d2:47:3f:08:70:cb:a4:18:b2:b9:02:88:52:
                    3d:2b:74:10:4e:ef:79:ec:75:80:37:93:a7:d7:0c:
                    2c:38:9f:eb:0e:99:56:64:9c:dd:2d:38:f5:e4:87:
                    e5:93:17:f2:9e:a3:f9:1b:88:ac:de:66:ed:2d:0e:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:2A:C7:FD:95:CC:6F:9D:73:DB:4C:5C:90:02:27:CE:CF:C2:68
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d7:07:06:33:c6:57:9b:23:b0:dd:b4:1c:08:9b:31:50:ed:
         d6:6a:3e:5e:58:a2:76:8e:3b:f0:8d:ae:b9:de:bd:e9:6f:ea:
         9c:d4:e4:2f:b6:36:3d:5f:e7:61:88:94:d1:40:e4:b2:a0:b9:
         e6:e7:99:74:d6:54:b6:7c:8e:10:3e:cc:ea:c7:83:7d:0d:7e:
         55:37:f5:9e:e7:9e:d3:6a:e8:d2:2d:fc:53:33:d3:6b:38:8c:
         e0:04:30:b2:9d:67:3e:c4:8d:9c:dd:df:8e:a6:d6:ab:1c:32:
         a8:e6:01:37:4e:70:a3:4d:51:d6:8b:35:b1:ba:14:ab:e0:b5:
         b8:fd:e0:a3:21:5d:68:35:bf:d3:5f:b6:62:14:75:97:b1:58:
         3f:30:f9:f0:1f:be:00:40:16:61:1d:b5:12:3e:38:a5:c8:fa:
         16:95:61:94:29:a7:7e:84:38:84:a7:10:49:0e:1c:7f:4e:23:
         ea:9f:d5:c2:df:12:8d:56:74:38:5f:7b:63:09:09:82:7e:e1:
         a8:1a:5c:80:27:7c:c7:19:3b:78:b5:22:49:de:45:0f:e4:e8:
         b7:51:3a:73:45:1b:ba:81:c7:52:e6:ba:66:ab:a5:45:5c:b1:
         a3:8b:46:0e:f1:8d:9e:32:e3:b7:b5:6f:32:d3:81:f6:fc:39:
         63:f6:6d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:36 2024 by rpki-client on console-ams.rpki-client.org