Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa
File:                     34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa (raw, json)
Hash identifier:          24bmbwY3g792NlN/b+b8+AC7JKFiJ/E2c1O/qmZmx4c=
Subject key identifier:   D0:5A:E3:F8:A8:FA:22:8C:AF:6B:31:F3:1C:FB:02:85:EF:CE:5A:1A
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       4E45F3736FB6866C51DE45679A02C28EBBA9528C
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa
Signing time:             Thu 04 Apr 2024 13:05:39 +0000
ROA not before:           Thu 04 Apr 2024 13:00:39 +0000
ROA not after:            Thu 03 Apr 2025 13:05:39 +0000
asID:                     267177
IP address blocks:        45.230.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:45:f3:73:6f:b6:86:6c:51:de:45:67:9a:02:c2:8e:bb:a9:52:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Apr  4 13:00:39 2024 GMT
            Not After : Apr  3 13:05:39 2025 GMT
        Subject: CN=D05AE3F8A8FA228CAF6B31F31CFB0285EFCE5A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7a:88:b1:45:a9:a9:0e:bd:13:53:07:c8:48:
                    75:e6:43:97:26:6e:75:7a:1d:1b:c7:a1:0d:bc:d6:
                    4e:c9:c1:47:4e:29:59:a9:02:06:ee:81:59:55:01:
                    45:01:78:9b:24:7b:0a:bd:03:b9:0c:8e:46:ac:5c:
                    09:0c:fc:e9:24:2d:34:4b:15:15:d2:43:d6:42:20:
                    79:9a:72:50:17:2f:a0:cd:96:c0:af:d4:29:07:16:
                    d5:5f:ec:02:1a:a1:ad:ba:70:7a:88:c5:e9:01:d9:
                    bb:ab:43:dc:08:cf:71:00:1b:70:45:64:e2:44:87:
                    d2:ca:af:91:23:38:33:6b:26:5d:84:84:55:a1:60:
                    5c:e2:ce:db:9a:9b:6a:a4:d2:8c:06:5d:30:03:2c:
                    9a:18:65:c6:08:8d:7d:cc:b0:d5:ee:84:c4:94:ab:
                    18:fb:fd:30:d2:66:e5:4f:a8:11:41:a6:66:40:7a:
                    ec:51:c7:05:5e:6c:8e:c7:8a:01:e9:06:58:7c:45:
                    e2:5f:f8:15:b6:47:df:45:ba:aa:d2:4e:aa:86:51:
                    f5:b6:60:13:f6:df:03:3f:11:80:d6:e3:57:f9:16:
                    6a:90:31:e7:31:29:7a:5a:ff:5f:a5:d9:71:f6:b7:
                    48:1c:49:2d:55:6d:af:e9:4d:49:36:d9:67:58:8c:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5A:E3:F8:A8:FA:22:8C:AF:6B:31:F3:1C:FB:02:85:EF:CE:5A:1A
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:47:07:bc:b7:3e:37:3d:c5:39:bf:60:c0:80:bc:10:cb:41:
         0d:83:7c:89:84:8e:e1:0a:1e:b2:d5:d1:36:76:b1:74:7c:b9:
         e9:c5:fe:99:e8:74:f8:74:fe:c4:32:84:6c:d0:2a:4e:91:15:
         e0:92:e4:88:07:35:5a:ab:ad:f9:c3:02:20:f9:46:31:72:61:
         d8:bf:92:d0:79:ea:e7:15:09:19:36:ec:7a:ff:bb:4d:f9:b6:
         01:7a:ab:32:89:55:6b:a2:94:b3:4e:c4:cd:52:37:58:d9:57:
         36:14:61:b6:a1:b9:e3:a8:1e:f4:9e:3a:ed:9e:6e:04:41:f0:
         45:19:8f:2f:ef:91:a3:6f:ad:3f:7e:03:58:5e:a5:fe:e4:64:
         84:20:e5:48:00:5d:94:d0:4e:b5:7b:f2:61:85:75:29:e7:5b:
         2f:10:5b:25:34:3c:4a:2e:36:a5:29:71:ef:78:17:95:d2:23:
         5f:37:0f:21:06:72:89:e8:8d:79:cc:d9:32:02:a4:51:ea:18:
         fa:9f:73:f1:5d:6c:dd:92:11:99:c2:e5:35:fb:9a:d7:06:57:
         33:fa:6c:56:cc:4b:61:2a:a7:ab:29:ed:f5:48:43:2e:42:f5:
         21:eb:23:67:86:a6:2f:f5:4b:ee:0c:09:0b:0a:3e:62:bc:ee:
         1e:57:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:49 2024 by rpki-client on console-fra.rpki-client.org