Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa
File:                     34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa (raw, json)
Hash identifier:          QZ5khfUsi+958aQWGDgPg73WI3YSLxtj7k0lBaXzKQ0=
Subject key identifier:   E5:44:F4:FC:16:13:48:4D:73:21:A4:61:91:2E:21:56:57:CC:46:12
Certificate issuer:       /CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
Certificate serial:       3DE66986C5396184F46530368BA07A236F47F2A5
Authority key identifier: D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa
Signing time:             Thu 04 Apr 2024 22:50:20 +0000
ROA not before:           Thu 04 Apr 2024 22:45:20 +0000
ROA not after:            Thu 03 Apr 2025 22:50:20 +0000
asID:                     268479
IP address blocks:        45.161.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.crl
                          rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e6:69:86:c5:39:61:84:f4:65:30:36:8b:a0:7a:23:6f:47:f2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
        Validity
            Not Before: Apr  4 22:45:20 2024 GMT
            Not After : Apr  3 22:50:20 2025 GMT
        Subject: CN=E544F4FC1613484D7321A461912E215657CC4612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:68:d5:0b:32:e3:12:73:bb:d5:98:8f:0e:
                    1a:97:6b:3f:81:4b:95:3a:f0:7f:e9:35:ab:a2:cb:
                    ab:56:42:be:25:88:80:e6:7e:99:58:94:19:a2:dd:
                    05:91:c5:fc:26:a5:56:37:12:8b:d5:50:a6:8e:81:
                    0f:1c:7f:78:07:03:99:5f:a1:46:f2:79:7c:a4:ba:
                    9c:63:71:5b:a4:4f:a0:dd:7d:aa:6b:0a:e1:bd:5a:
                    8b:70:81:e8:49:eb:8d:a3:1a:69:1e:ee:2e:9d:79:
                    d3:0b:e1:ee:f7:9a:e0:33:6b:87:a2:88:af:7d:93:
                    11:69:5f:6f:c2:e5:9d:a2:92:c6:94:80:fe:d9:26:
                    52:f3:2f:c5:ca:3c:19:1e:4e:6a:30:b8:4f:4e:cf:
                    fa:10:f8:82:83:10:5d:4f:70:2a:42:2d:9f:47:d8:
                    a1:e2:d6:40:d4:0e:38:4f:56:63:4c:5b:23:a5:0c:
                    43:01:93:cb:81:4c:27:fe:01:7c:65:4c:6c:f8:24:
                    c0:fd:fe:c9:6a:ba:27:2e:6b:d7:cd:2b:3a:fe:cb:
                    f6:78:1c:30:ff:33:c6:ee:72:f2:e5:30:ec:92:64:
                    ec:e1:1d:f5:4d:0e:64:bb:86:0a:6a:bb:86:96:1f:
                    33:04:96:73:0c:72:e1:34:05:53:89:14:64:96:b4:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:44:F4:FC:16:13:48:4D:73:21:A4:61:91:2E:21:56:57:CC:46:12
            X509v3 Authority Key Identifier:
                keyid:D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:a9:df:5c:75:76:54:d2:31:3e:7c:5d:a7:eb:d5:72:a1:
         b8:0a:35:2c:fd:bc:bd:e1:ba:07:9c:51:61:8a:ba:27:41:3d:
         45:00:b2:b1:72:8f:54:b4:d9:89:9b:6c:3a:22:d9:3f:32:21:
         c1:ac:6b:fe:c2:45:61:ff:87:ae:6e:6a:a0:d5:0d:91:95:83:
         2b:96:69:69:ef:e5:10:2f:ca:1b:c1:6a:96:68:91:da:f9:7e:
         48:3d:38:06:84:a8:65:a0:d2:b9:e9:4f:02:e4:11:5e:6d:bc:
         58:88:2a:b5:af:e6:25:76:0b:6b:e2:9b:47:2c:01:b2:75:cc:
         64:e9:a2:4e:84:0f:7d:6e:a0:62:f4:0e:a7:1c:54:6c:f8:ba:
         c4:4f:1d:e0:30:45:de:be:6f:71:2d:92:da:f6:00:6e:6e:d3:
         db:cc:d4:a5:dc:e2:60:80:b8:9d:ae:29:44:46:62:f9:2f:06:
         fd:de:ae:d9:d0:e8:ab:c6:92:88:7b:2a:56:f5:a8:25:ca:14:
         e3:12:e6:d6:94:00:fa:c2:fc:fc:a4:a5:1d:25:31:2a:92:e8:
         2c:de:92:81:16:a3:0e:62:51:25:e2:17:bf:d9:60:e7:de:84:
         9c:35:a8:41:b1:c3:56:d2:bd:95:3d:87:bb:8b:0a:a3:d0:89:
         05:13:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org