Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa
File:                     34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa (raw, json)
Hash identifier:          mPkyRMI9L6SXPfdlJBfeoINk8oX6YU3mzfY71feAhw0=
Subject key identifier:   D4:19:A1:62:7F:53:F0:4E:23:95:E2:30:DA:35:F3:6F:02:42:85:A5
Certificate issuer:       /CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Certificate serial:       40858373D00B4D4C06932817AB33E112F7722DAA
Authority key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa
Signing time:             Sun 21 Jul 2024 18:43:13 +0000
ROA not before:           Sun 21 Jul 2024 18:38:13 +0000
ROA not after:            Sun 20 Jul 2025 18:43:13 +0000
asID:                     268307
IP address blocks:        45.237.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:85:83:73:d0:0b:4d:4c:06:93:28:17:ab:33:e1:12:f7:72:2d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
        Validity
            Not Before: Jul 21 18:38:13 2024 GMT
            Not After : Jul 20 18:43:13 2025 GMT
        Subject: CN=D419A1627F53F04E2395E230DA35F36F024285A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:9d:0a:75:b9:9a:68:7f:72:db:95:c0:87:
                    c0:0b:88:70:7a:3d:c8:30:cd:8c:23:0c:5c:b6:a3:
                    48:ab:90:8a:e9:24:68:7b:45:67:c8:49:5b:9e:ae:
                    97:2e:90:0c:90:b5:3b:d9:75:80:a0:c2:8e:d6:7c:
                    7a:de:c8:d4:8a:6d:d6:8a:5c:f1:19:f6:de:30:d3:
                    17:2c:72:d6:81:8b:b7:96:4c:7a:a8:26:30:9c:22:
                    60:29:bb:7c:6b:ed:9b:4c:29:8d:f4:02:be:d2:d8:
                    83:3d:e9:f5:af:3a:7c:75:a4:17:79:0a:dd:82:c4:
                    6c:fc:31:30:e8:cc:83:d5:04:62:75:5c:ea:0d:b6:
                    23:a5:fd:5f:c7:67:5f:12:76:c1:be:9d:4e:fe:65:
                    cd:46:bc:a7:42:64:a8:59:e4:15:2a:f0:88:0a:5e:
                    0d:82:97:f8:e7:f7:c5:cd:e6:92:82:72:2d:88:56:
                    95:4c:5a:6d:f3:74:aa:09:7d:89:29:f4:8a:96:1e:
                    e4:99:6c:70:e2:56:5f:60:bf:13:13:c2:0b:40:08:
                    da:88:4c:78:84:45:61:0d:6b:29:4d:34:a7:9a:22:
                    3f:82:61:33:ce:73:0d:93:95:ac:d4:a8:1b:5e:d9:
                    dc:ac:75:98:32:e6:d7:a0:67:12:3f:a3:46:df:26:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:A1:62:7F:53:F0:4E:23:95:E2:30:DA:35:F3:6F:02:42:85:A5
            X509v3 Authority Key Identifier:
                keyid:43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:6d:98:3e:b0:db:1b:88:0a:4c:ff:3e:01:03:81:95:52:
         2c:f8:28:af:60:b9:42:1e:29:78:65:04:5d:26:4d:76:72:42:
         18:c8:ac:06:60:3f:dc:3d:45:46:d3:97:b2:07:36:68:bc:48:
         22:dc:16:4f:f4:6f:68:6f:73:19:60:d9:fa:c9:e9:f9:a6:64:
         cc:41:06:88:ba:6f:bd:dc:3f:38:99:7d:ba:84:73:66:dc:aa:
         ad:41:94:1b:11:22:8c:7d:e5:2b:4f:8b:fb:ed:09:07:f3:35:
         dc:fc:b9:d8:f2:c6:b3:fd:7c:04:c5:15:3d:b7:e4:c2:a2:7d:
         b8:2f:2b:5f:d2:81:af:90:03:ad:83:6c:1b:27:f8:35:c9:34:
         06:15:32:e4:bc:e7:3e:c8:fd:c6:32:ba:a7:9b:49:62:53:48:
         b0:ca:c0:01:ac:73:0a:41:17:61:1e:a9:70:57:45:88:ab:72:
         34:ab:15:13:65:1e:8b:8f:6f:bf:30:20:e1:05:35:41:71:3e:
         98:c6:58:e7:5d:96:47:92:d0:76:44:46:33:b1:5e:3e:46:da:
         ae:2d:39:fc:71:b2:73:b8:89:84:11:a1:d9:39:4b:6d:5e:58:
         6d:bb:cf:c0:7b:d8:d5:12:a5:ef:ce:67:d8:01:b1:83:f5:24:
         19:2d:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:27:35 2024 by rpki-client on console-ams.rpki-client.org