Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa
File:                     34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (raw, json)
Hash identifier:          D/KFo0Tmo4o2j6Ty6F9nmPDZGIWfU74MszSeTXVyYbI=
Subject key identifier:   24:F0:EB:63:66:E4:59:F7:0C:BB:00:A3:17:E2:52:C2:53:BB:D8:ED
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       1A5D8C2380E35C3F8CBEA57ED5CAE08F76B12AF7
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa
Signing time:             Wed 03 Apr 2024 18:32:29 +0000
ROA not before:           Wed 03 Apr 2024 18:27:29 +0000
ROA not after:            Wed 02 Apr 2025 18:32:29 +0000
asID:                     267251
IP address blocks:        45.232.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5d:8c:23:80:e3:5c:3f:8c:be:a5:7e:d5:ca:e0:8f:76:b1:2a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr  3 18:27:29 2024 GMT
            Not After : Apr  2 18:32:29 2025 GMT
        Subject: CN=24F0EB6366E459F70CBB00A317E252C253BBD8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:e4:99:7d:f1:87:c8:37:c5:eb:bb:3f:8c:
                    4f:a6:5e:08:f1:5a:9c:fd:65:c3:15:a4:6f:bc:d5:
                    b7:cd:b8:75:c2:ee:20:a1:d0:89:5b:8b:ff:e0:8d:
                    5d:bb:9b:b0:39:66:6f:89:63:dc:62:6c:29:cc:d5:
                    78:05:1a:b9:56:c1:41:cf:ba:d7:d9:1c:5b:34:ac:
                    69:ca:4b:fe:24:4c:ec:07:cc:31:0a:51:c4:d9:f8:
                    7e:0f:32:a8:13:41:77:37:18:1b:c3:7a:b3:c0:76:
                    18:d3:38:84:f6:a7:37:b5:7c:77:d3:fe:b6:a7:bb:
                    c3:fe:5d:32:ab:04:f5:87:7a:f5:07:7d:20:83:5d:
                    6b:6f:35:a7:3c:b6:07:8f:cc:61:aa:48:7a:53:ef:
                    17:a2:19:59:dd:23:01:55:6e:73:1d:c4:74:bc:85:
                    c3:76:97:0a:25:df:e0:d2:6d:54:26:f3:5a:84:66:
                    7c:d0:ac:3c:ce:7f:b7:6d:30:7e:d4:8e:f9:be:98:
                    8c:b5:a7:8a:d3:2a:e0:25:71:92:6b:cf:d7:50:98:
                    10:b4:d6:c9:f5:a5:a0:1a:c3:5d:29:48:71:ac:19:
                    4c:33:a1:c2:e4:dd:d4:09:1d:97:03:b9:ed:7a:de:
                    68:56:84:1d:93:66:ee:99:19:10:ea:00:2a:a8:33:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F0:EB:63:66:E4:59:F7:0C:BB:00:A3:17:E2:52:C2:53:BB:D8:ED
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:99:1f:cf:f0:4c:57:46:e3:d5:24:9b:28:ca:3d:b8:93:
         60:c6:51:e9:a6:ff:29:d4:23:e0:ae:50:91:03:88:09:2b:ac:
         dd:6b:fc:1d:ae:f2:90:3c:7c:d4:c2:27:ed:c3:da:d9:77:08:
         60:1f:46:4f:00:ba:5c:fb:cd:2f:34:d2:7a:70:41:b5:77:c4:
         22:d2:04:45:b0:33:76:de:e6:25:e6:c5:92:95:46:7f:9c:18:
         0e:4d:e0:df:98:21:c2:21:6d:34:ec:ef:8d:12:d0:4d:11:fe:
         95:b8:f9:e8:e3:d1:99:a5:d8:e5:1b:94:3e:1c:94:d3:a7:35:
         12:84:a1:c4:84:9a:ea:8f:e4:25:dc:36:2f:68:b3:04:9c:c9:
         d6:02:c0:8a:e8:c8:6c:69:68:db:5c:44:f9:1c:52:b6:54:11:
         40:13:e9:6f:f7:8e:64:ba:3d:60:ec:b0:ee:b8:da:37:91:d5:
         67:e5:61:8a:8f:ed:59:14:24:f2:d1:d4:50:16:f3:06:1a:1c:
         84:09:75:a6:96:df:ab:30:3b:3d:02:53:13:3f:47:31:de:52:
         a5:93:68:3d:07:aa:0a:60:ae:e8:b3:6c:14:dc:0b:6e:0a:31:
         21:e6:4e:09:9a:28:fe:17:7e:70:bc:f2:b8:39:0a:d4:0b:c4:
         00:fd:08:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:00 2024 by rpki-client on console-fra.rpki-client.org