Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          uR0F2nhpYAIq1VtiwqKF4pzlOLFH8Rd01ZWSuS5m7yU=
Subject key identifier:   50:02:16:6A:F2:74:3E:C1:02:1A:F5:10:E4:A4:1D:7C:FC:85:74:A0
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       3B85514E0E4A096A64DF6B0D26E8AC3DCA0D8251
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     267334
IP address blocks:        45.233.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:85:51:4e:0e:4a:09:6a:64:df:6b:0d:26:e8:ac:3d:ca:0d:82:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject: CN=5002166AF2743EC1021AF510E4A41D7CFC8574A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:2d:47:81:99:20:00:e6:86:e1:b7:36:db:
                    d9:0d:da:96:cc:c4:80:40:91:32:d9:17:57:b8:9c:
                    89:87:7d:e2:df:e6:48:d8:9f:f4:88:0d:e1:d2:3b:
                    a8:7d:84:7a:44:40:0b:83:d5:89:e2:80:65:df:8c:
                    76:5e:8b:b4:03:e5:c9:98:44:6d:87:70:c9:d4:50:
                    e7:24:b5:3c:0f:4c:43:19:ce:d9:e0:fd:91:55:af:
                    43:d0:cf:1b:ce:f7:58:40:62:e6:77:fa:a6:24:7e:
                    f2:61:77:ed:1b:4a:f2:95:85:88:fa:76:9d:8a:8d:
                    89:59:20:67:2c:f1:81:aa:a7:bb:63:bc:e3:48:f2:
                    bb:63:ae:f3:60:32:e9:d4:ed:da:68:68:d6:dd:ba:
                    ea:00:52:2a:9e:af:b3:c9:98:75:47:27:46:e1:78:
                    ce:79:d9:f5:78:8d:b8:32:35:2a:69:de:8c:8a:b6:
                    9d:02:2b:83:a0:45:6f:4e:b1:82:00:b1:c1:e4:ea:
                    b6:61:1c:29:ad:a8:af:75:d9:43:70:96:38:72:f3:
                    22:70:f1:1c:19:3d:46:24:b4:a3:55:bb:00:43:56:
                    85:b9:5f:73:61:72:c4:1b:c1:63:bc:75:1a:a2:43:
                    6d:54:5d:3d:d4:28:78:a1:b2:8d:3d:08:c9:82:95:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:16:6A:F2:74:3E:C1:02:1A:F5:10:E4:A4:1D:7C:FC:85:74:A0
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:70:44:0c:69:a6:76:30:44:12:b9:01:a2:37:22:3f:07:79:
         b5:ba:24:04:0c:b7:c0:b7:61:f0:67:c2:85:6e:ae:e7:33:68:
         d2:0c:fd:6c:61:27:ee:06:76:00:c1:b5:10:3e:bd:54:df:58:
         83:e9:99:1c:5d:ac:b7:e0:3e:f3:76:ab:d4:87:81:6c:7a:5a:
         d5:a6:85:bc:a8:70:d7:2a:55:e6:46:ac:4e:06:33:9d:19:d7:
         6b:f4:4b:81:8b:33:26:19:1b:f8:35:06:5c:dc:5f:c3:fd:4d:
         0c:86:75:68:e3:e6:f1:4a:43:bc:c3:70:4f:3c:16:68:69:d9:
         f6:c2:32:af:8c:23:ee:d1:25:48:3a:f7:6b:08:41:91:8d:84:
         ed:09:67:a0:e1:03:2a:c5:c0:04:71:67:0c:28:33:c4:37:04:
         91:4c:3d:37:75:78:e4:f6:3e:8d:f6:73:28:85:61:9f:3d:a2:
         c3:c8:23:bf:0c:d1:66:33:dc:6d:eb:9a:d9:81:98:b0:c4:0a:
         9f:4d:e2:1f:a9:ba:d9:d9:29:55:0f:7d:73:07:28:10:59:05:
         40:38:06:e8:f6:2d:e5:e6:9e:ca:05:49:e3:57:a8:26:0b:7f:
         be:95:c2:ab:77:0d:09:90:3f:c2:c7:12:1c:39:be:d9:ec:38:
         ef:0d:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:22 2024 by rpki-client on console-fra.rpki-client.org