Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
File:                     34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa (raw, json)
Hash identifier:          TXxQk3JhUqnAacLpDfkZIU87cViV/srO5TM8L1oLKlA=
Subject key identifier:   19:E5:5E:1C:CA:87:84:34:60:B7:DB:89:4A:0B:15:42:DF:96:6D:6C
Certificate issuer:       /CN=A47835DE736948FACF597EB9C6B08AB544AE9C2A
Certificate serial:       3C9DE44753092F75116295160B833676934392F5
Authority key identifier: A4:78:35:DE:73:69:48:FA:CF:59:7E:B9:C6:B0:8A:B5:44:AE:9C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
Signing time:             Thu 04 Apr 2024 02:56:25 +0000
ROA not before:           Thu 04 Apr 2024 02:51:25 +0000
ROA not after:            Thu 03 Apr 2025 02:56:25 +0000
asID:                     267657
IP address blocks:        45.224.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9d:e4:47:53:09:2f:75:11:62:95:16:0b:83:36:76:93:43:92:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47835DE736948FACF597EB9C6B08AB544AE9C2A
        Validity
            Not Before: Apr  4 02:51:25 2024 GMT
            Not After : Apr  3 02:56:25 2025 GMT
        Subject: CN=19E55E1CCA87843460B7DB894A0B1542DF966D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8a:a7:fa:da:f0:5b:6d:04:cb:06:eb:2e:21:
                    c5:a3:b4:50:ce:81:f5:9e:b0:fb:11:57:4f:42:f5:
                    92:d1:4f:ee:d2:4b:f2:50:5c:34:f7:e8:26:47:43:
                    1e:1c:75:56:0d:b1:06:fd:fa:67:65:4d:83:b3:33:
                    33:d1:19:e0:11:53:cf:75:36:94:9c:9d:ba:a9:2a:
                    77:91:ce:1d:e6:dc:e3:e1:7d:ff:16:18:46:a5:2d:
                    4c:4c:ed:14:a9:c8:bd:50:67:e5:27:1d:b9:0f:c7:
                    f9:fc:c6:e9:e7:6a:97:40:c2:de:86:07:1c:72:2d:
                    b5:1b:02:e2:8a:71:d9:73:60:bb:64:b0:38:45:8d:
                    a7:f9:5e:b2:4a:34:df:39:f4:80:2b:6b:07:8a:69:
                    a4:48:64:12:18:2b:65:1a:ed:3c:e5:a9:d9:03:f4:
                    7f:fb:4f:61:9d:ca:7d:7d:69:e4:1d:ea:d5:29:d4:
                    43:1e:15:8b:83:98:ef:0a:e0:56:55:cd:33:0f:19:
                    50:1d:2f:0d:83:f7:26:7f:33:84:e0:3f:47:24:9a:
                    de:69:8f:62:3f:6d:f2:f6:20:0f:63:71:d0:17:44:
                    96:fa:7a:4e:e7:3f:44:ea:59:2f:7d:67:bc:75:9f:
                    48:11:87:b4:56:bc:47:23:3c:8c:33:c8:2d:e4:4e:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E5:5E:1C:CA:87:84:34:60:B7:DB:89:4A:0B:15:42:DF:96:6D:6C
            X509v3 Authority Key Identifier:
                keyid:A4:78:35:DE:73:69:48:FA:CF:59:7E:B9:C6:B0:8A:B5:44:AE:9C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:02:70:68:fd:65:16:72:31:56:f6:eb:72:bf:f3:4d:4c:59:
         37:22:25:78:ba:d4:0c:68:8b:ba:07:c5:50:20:ec:0d:11:93:
         eb:41:d3:83:01:15:5c:e0:85:89:16:cc:fc:45:0b:06:c3:70:
         ce:93:89:7c:d1:79:e5:1a:73:39:40:da:39:51:be:49:5e:51:
         ac:57:82:89:9e:d6:95:40:40:a6:d8:df:fb:eb:09:58:87:ce:
         46:5d:38:7e:46:36:2c:b4:64:13:a5:d2:51:02:6e:a4:e0:69:
         05:69:ee:3a:ce:41:79:3b:e5:a2:70:52:96:02:83:77:15:f8:
         47:47:46:e3:f2:e5:62:f4:31:09:11:9e:ed:0c:7f:63:4e:4a:
         6a:2a:f4:0f:bb:b8:a0:96:70:dd:43:ca:2a:b9:24:ff:a4:d5:
         78:9a:21:13:1f:7d:b4:6c:04:67:be:bf:8e:16:35:33:6b:de:
         03:4d:98:c4:72:c0:82:f3:c5:fe:f4:92:2b:3f:86:9e:58:d8:
         24:37:32:0a:fd:ee:c9:d9:31:48:65:9a:a9:3f:e9:de:71:df:
         f1:f2:f6:76:f1:a3:f1:b7:d4:4a:2d:4f:6a:13:ed:43:93:ac:
         4b:f6:30:f6:cf:6a:7e:b5:1d:08:3c:0e:d1:79:0c:78:ea:c4:
         06:bc:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:44 2024 by rpki-client on console-ams.rpki-client.org