Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234322e302f32342d3234203d3e20323638333037.roa
File:                     34352e3233372e3234322e302f32342d3234203d3e20323638333037.roa (raw, json)
Hash identifier:          x/dNctQzL4WrXSSYkN/ZV2L79SG6N5fJLa2/07X8/lE=
Subject key identifier:   D2:05:9B:39:DD:63:F4:1E:03:87:EC:40:FC:7D:32:98:21:02:B6:7A
Certificate issuer:       /CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Certificate serial:       7EBA6B9D55B4B6247162300D87B68FBDC7842C21
Authority key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234322e302f32342d3234203d3e20323638333037.roa
Signing time:             Sun 21 Jul 2024 18:43:13 +0000
ROA not before:           Sun 21 Jul 2024 18:38:13 +0000
ROA not after:            Sun 20 Jul 2025 18:43:13 +0000
asID:                     268307
IP address blocks:        45.237.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ba:6b:9d:55:b4:b6:24:71:62:30:0d:87:b6:8f:bd:c7:84:2c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
        Validity
            Not Before: Jul 21 18:38:13 2024 GMT
            Not After : Jul 20 18:43:13 2025 GMT
        Subject: CN=D2059B39DD63F41E0387EC40FC7D32982102B67A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:14:b8:dc:13:59:4f:96:de:bd:85:2c:4c:
                    1c:78:3b:95:b8:33:80:fd:43:b1:0f:54:15:01:df:
                    61:5e:5a:33:f7:1c:24:21:9c:4e:84:75:bd:96:3f:
                    e4:73:80:18:41:73:27:12:9c:62:24:1a:61:ec:16:
                    3a:c2:f8:9c:a0:52:b1:34:9c:bb:39:d8:2c:00:80:
                    af:e7:8f:09:ea:9d:fc:c2:d1:be:d7:a7:8b:2c:75:
                    d5:61:f1:ee:83:2e:9e:75:ce:c5:b0:0e:c6:31:64:
                    7d:ca:78:16:37:ce:5b:fd:99:72:df:63:16:4f:0a:
                    82:ab:85:e2:37:f4:41:5a:af:7e:95:01:10:bb:c3:
                    51:9d:c1:30:52:95:67:0c:3d:a9:b2:92:79:74:ba:
                    16:aa:8d:b8:13:4e:e8:80:e6:9e:15:71:2e:29:6f:
                    76:86:ac:0c:4f:19:0d:38:c7:05:2b:1b:07:ca:39:
                    32:78:d2:5c:59:5e:88:d8:fb:0f:85:a8:bb:36:f3:
                    16:30:28:b6:47:cd:d1:93:e8:ce:26:12:1d:b9:b6:
                    fc:fb:e8:a5:10:78:19:04:0f:85:5b:d0:e3:83:fe:
                    0e:9d:ed:1f:46:c3:ad:fa:29:b7:66:47:13:f1:fc:
                    89:ce:f5:b1:06:bd:ac:a3:38:49:94:a9:ab:0d:d5:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:05:9B:39:DD:63:F4:1E:03:87:EC:40:FC:7D:32:98:21:02:B6:7A
            X509v3 Authority Key Identifier:
                keyid:43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234322e302f32342d3234203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:51:65:cf:fa:ca:51:71:7c:a7:7a:98:0d:df:21:68:89:55:
         18:3b:7c:78:fc:55:bc:df:04:b5:c4:ff:af:11:47:8f:db:5a:
         53:7a:fd:9c:8a:74:07:1e:ac:c0:e2:55:c0:9b:77:fb:c8:08:
         d6:eb:c7:14:03:31:4b:e4:75:fe:1e:0c:f9:82:60:5c:4e:eb:
         2a:21:39:03:38:6d:6f:d6:f9:ab:2a:d7:51:4d:53:47:0b:c8:
         85:8c:ca:5d:7b:08:83:e8:91:f4:29:90:e1:c8:69:09:6a:64:
         72:55:8e:46:a7:f4:ca:5d:cc:62:b9:3e:38:b1:6a:67:a1:8d:
         d5:3c:0f:ba:d1:08:01:f3:90:22:47:93:a7:9b:4d:38:de:36:
         48:d0:55:d1:61:93:39:02:1d:fc:d7:eb:8d:b9:71:5f:3c:52:
         bc:e2:4c:e7:a3:78:5b:38:e7:83:4c:3b:f9:77:48:4a:e7:c9:
         66:66:be:f3:d9:cc:08:4c:7f:ee:8b:8d:94:95:fc:b8:a5:df:
         39:4b:67:02:90:b0:36:99:82:9f:c5:5b:0d:de:15:4c:0b:0a:
         25:a9:ea:58:cc:48:19:00:67:8a:41:97:87:b0:46:cf:de:94:
         1d:a7:b8:75:f8:3e:2e:a8:93:b5:f5:86:54:fd:e2:16:55:17:
         dc:45:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:27:35 2024 by rpki-client on console-ams.rpki-client.org