Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa
File:                     34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa (raw, json)
Hash identifier:          nqGGKYTLxU9Q8zfuZNIRakZTafW6gGkv8DCZeiQba2Y=
Subject key identifier:   E9:B6:13:1F:43:1D:B4:9E:DD:2D:FD:60:C5:97:3C:3C:5D:83:94:E3
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       12FAF456A047BB9F47D044C5920E5E2F489746B0
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     267334
IP address blocks:        45.233.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fa:f4:56:a0:47:bb:9f:47:d0:44:c5:92:0e:5e:2f:48:97:46:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject: CN=E9B6131F431DB49EDD2DFD60C5973C3C5D8394E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:bd:51:75:44:61:78:a5:8a:2c:47:f2:ee:
                    d6:61:3f:63:e8:24:3d:16:6f:dc:8e:f1:6e:5b:63:
                    96:bc:e4:82:08:7a:f0:27:3e:df:41:cf:59:a2:37:
                    b0:9a:77:1d:37:66:17:92:10:47:ff:da:bc:ed:bd:
                    d6:c5:a2:0e:6f:08:8e:46:ae:52:20:38:5a:96:fe:
                    9a:ba:42:90:4b:7e:2d:93:df:8b:87:39:c2:fd:22:
                    cf:54:71:5e:e9:00:f4:34:34:d7:1e:58:7d:8d:1e:
                    23:5b:d4:c5:1e:06:38:40:8d:31:e1:d1:3b:cc:8e:
                    85:25:96:3f:e5:81:16:1b:95:13:da:f7:f4:e5:4d:
                    4f:df:4e:f5:75:19:08:84:92:d6:ea:56:2d:5d:31:
                    d4:5c:4a:c6:e8:85:a6:5f:6c:48:53:42:58:01:48:
                    0e:00:17:e1:b8:9c:d5:55:06:ad:f1:12:14:d7:a9:
                    05:f6:9f:9f:f0:c5:78:4d:56:0a:8c:92:6d:7a:33:
                    3b:10:5e:ee:95:e5:44:ad:35:98:a4:5f:a8:4c:30:
                    aa:41:d1:3e:46:91:ee:24:ce:bf:15:e8:cc:6f:a5:
                    0f:1a:31:f9:9c:b8:fb:2f:46:58:95:da:5f:ab:f8:
                    da:49:b3:ae:16:d3:9b:f7:1c:64:ec:cc:a3:3b:cf:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B6:13:1F:43:1D:B4:9E:DD:2D:FD:60:C5:97:3C:3C:5D:83:94:E3
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:ef:e6:a9:6f:a5:a5:08:36:ad:82:49:3a:7d:76:ed:fb:
         bf:60:64:77:94:da:a4:14:4a:f0:15:33:e5:f4:e4:bd:a0:1f:
         ba:ce:62:a4:ec:1c:67:65:21:b6:68:dc:64:44:c7:7b:d7:2e:
         61:23:78:47:18:09:7f:27:0c:49:da:ab:62:ff:8f:c1:6a:77:
         76:12:4b:07:2b:21:e2:04:ea:f1:ef:c7:ef:db:46:7f:af:f2:
         6c:27:d8:c7:7a:5d:f9:73:41:df:78:f4:14:fb:cc:96:7e:80:
         d7:d1:17:93:f5:4b:6a:59:81:e2:68:ca:3e:ac:9b:38:fc:6d:
         42:3b:99:c3:c3:fa:54:bf:2a:28:63:4f:8f:36:8b:e0:d8:40:
         75:11:b7:f9:fc:90:6d:d0:05:2a:13:91:33:98:a6:4a:19:f2:
         fa:36:a5:a3:40:20:7f:e5:fd:05:d8:d7:89:b9:51:d4:5a:3c:
         65:00:9f:29:85:71:f5:35:56:d3:96:bf:dc:42:b1:4c:6c:ac:
         ed:8f:78:cd:49:d2:ce:68:b6:97:72:45:a4:54:19:82:a4:ca:
         4d:3b:fa:5b:f6:4a:eb:a3:e7:bd:08:27:31:1b:38:a7:e3:98:
         59:9b:d5:7c:bf:f6:6e:c1:b8:3d:13:2e:9e:bc:20:07:6d:d3:
         13:72:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org