Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa
File:                     34352e37312e3232382e302f32342d3234203d3e20323637363234.roa (raw, json)
Hash identifier:          nffQaKpwQKcAHDQH5ZcqnSmrbYDLRu6tb64Yz4ui67U=
Subject key identifier:   44:D7:73:63:17:2B:71:A0:E2:2F:DB:DC:01:D6:3B:66:42:99:92:1E
Certificate issuer:       /CN=2FDD244EC556A596E63C023656A4E5EF4723BBAF
Certificate serial:       64248E4407070EADE6623BEB1291C09D8404F150
Authority key identifier: 2F:DD:24:4E:C5:56:A5:96:E6:3C:02:36:56:A4:E5:EF:47:23:BB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa
Signing time:             Fri 01 Nov 2024 14:14:01 +0000
ROA not before:           Fri 01 Nov 2024 14:09:01 +0000
ROA not after:            Fri 31 Oct 2025 14:14:01 +0000
asID:                     267624
IP address blocks:        45.71.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/2FDD244EC556A596E63C023656A4E5EF4723BBAF.crl
                          rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/2FDD244EC556A596E63C023656A4E5EF4723BBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:24:8e:44:07:07:0e:ad:e6:62:3b:eb:12:91:c0:9d:84:04:f1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FDD244EC556A596E63C023656A4E5EF4723BBAF
        Validity
            Not Before: Nov  1 14:09:01 2024 GMT
            Not After : Oct 31 14:14:01 2025 GMT
        Subject: CN=44D77363172B71A0E22FDBDC01D63B664299921E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:c1:35:18:52:63:e5:53:95:fb:61:0f:68:
                    56:a1:b8:6f:f9:5f:12:84:98:c1:2e:60:7d:39:41:
                    74:ee:28:86:75:3c:9f:79:e8:1b:92:d3:63:65:9e:
                    dd:4c:48:77:98:87:42:f5:2c:bb:4b:87:5f:19:42:
                    db:cc:16:cd:df:c6:33:36:28:a9:ff:4d:91:2d:be:
                    07:34:6f:47:35:f7:9c:9e:b2:b2:a4:6f:ef:2b:23:
                    66:ed:0f:ae:22:1d:7b:7e:82:d9:e5:55:4b:a1:dd:
                    e1:df:c6:c1:e7:d2:fd:b4:eb:f2:2b:39:3f:aa:3f:
                    40:86:e9:3a:d2:8a:1c:cf:55:a8:43:aa:8e:22:36:
                    33:db:8b:66:5d:68:ed:75:1a:36:74:e2:3b:d8:a7:
                    51:8e:a2:c6:22:9b:0f:10:58:11:32:7f:0d:4b:fc:
                    05:e5:55:ca:61:db:3f:8a:22:5a:a9:9a:d5:ab:5d:
                    8c:2c:fd:0f:47:ac:42:cc:9e:e2:a1:7f:ea:14:50:
                    4a:b6:31:ad:ed:82:2f:ca:2d:a4:6f:11:5e:91:91:
                    eb:b5:05:40:b4:b9:ab:fa:8b:37:48:03:32:63:d8:
                    dc:2c:54:9a:8d:d8:8a:1c:96:2c:ed:92:19:67:6f:
                    08:59:99:d7:b0:49:d0:e6:f5:f6:59:d4:37:92:0f:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D7:73:63:17:2B:71:A0:E2:2F:DB:DC:01:D6:3B:66:42:99:92:1E
            X509v3 Authority Key Identifier:
                keyid:2F:DD:24:4E:C5:56:A5:96:E6:3C:02:36:56:A4:E5:EF:47:23:BB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/2FDD244EC556A596E63C023656A4E5EF4723BBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:2a:1a:ab:7c:69:f7:fa:dd:96:af:12:52:02:cd:e7:27:42:
         99:29:f7:e4:e2:7b:e6:64:49:a6:17:88:0f:07:73:21:56:30:
         63:64:f7:aa:b2:68:4b:1b:73:a1:3d:23:2f:49:8c:09:bf:7e:
         78:d1:b8:d5:df:25:8e:bd:45:69:5c:03:f5:f5:04:95:67:fc:
         69:d3:fe:e9:ce:4f:ab:ab:a6:a3:40:49:b8:a0:47:4c:93:58:
         81:70:21:9a:d4:6e:8d:11:75:3f:4f:32:6e:2a:0a:5d:38:01:
         3f:02:6b:7c:ce:b3:4d:0e:38:e3:cc:d1:04:97:e6:33:94:b8:
         dc:f0:3c:c6:d4:9b:cf:40:5b:cf:d3:35:c7:3d:bf:8c:6c:d4:
         b4:28:ac:6b:86:ff:7c:16:00:3b:0f:a1:2d:3d:4f:d6:3e:6c:
         5e:a3:c9:77:68:37:ba:f7:12:d9:3c:12:22:b8:a9:e2:78:ff:
         62:a3:40:24:34:40:6d:cb:b2:bc:24:7b:fd:22:0f:22:71:73:
         1a:92:ea:51:4c:f5:f4:22:7e:37:88:8c:1d:d9:93:cc:06:0d:
         19:9b:c0:b4:09:4b:65:f4:35:c5:b0:3f:ad:29:ac:4b:83:ce:
         50:f1:79:5f:92:61:46:21:8b:cb:33:81:ef:8d:1b:32:1a:19:
         6a:d4:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:51 2024 by rpki-client on console-ams.rpki-client.org