Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37332e302f32342d3234203d3e20323637323531.roa
File:                     34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (raw, json)
Hash identifier:          lV6dpYBF+UGIN0Zj7J9E69TkJzqBygSmd2nGIuF+xF0=
Subject key identifier:   42:83:36:76:63:5A:05:64:4A:AC:D8:15:27:1C:59:46:50:DC:89:B1
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       0EA0A33EA10D4D0DCD5ED24C1B87485ACC16DA6C
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37332e302f32342d3234203d3e20323637323531.roa
Signing time:             Wed 03 Apr 2024 18:32:28 +0000
ROA not before:           Wed 03 Apr 2024 18:27:28 +0000
ROA not after:            Wed 02 Apr 2025 18:32:28 +0000
asID:                     267251
IP address blocks:        45.232.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a0:a3:3e:a1:0d:4d:0d:cd:5e:d2:4c:1b:87:48:5a:cc:16:da:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr  3 18:27:28 2024 GMT
            Not After : Apr  2 18:32:28 2025 GMT
        Subject: CN=42833676635A05644AACD815271C594650DC89B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:06:ec:7d:ae:3f:82:60:ba:de:db:50:28:8e:
                    bd:8a:5c:ae:48:95:be:40:cd:f6:9d:3a:f0:1d:9e:
                    2d:8f:a1:9b:45:3c:70:40:93:dc:cc:98:63:63:45:
                    e2:bd:8c:0f:1a:64:87:4a:3c:98:e8:13:84:aa:64:
                    ce:a3:f4:72:04:8a:78:42:d2:21:35:80:e6:23:b6:
                    b3:30:bb:15:7b:19:d6:25:f4:52:76:84:c2:ba:7b:
                    dc:ab:7f:7e:41:94:64:32:bc:87:28:f0:ed:b2:4c:
                    bf:33:58:d0:e1:2a:fe:c9:80:fb:6a:4a:ec:80:6d:
                    e0:66:a3:89:ca:67:fc:bd:bf:75:33:ee:e2:2c:8f:
                    92:c1:53:85:ba:2b:24:37:23:e6:f8:35:fa:fb:6b:
                    18:eb:ff:77:54:71:3b:29:54:98:5a:e9:da:b2:60:
                    1b:42:8d:86:9f:c8:ab:8e:72:75:09:15:6b:5e:a1:
                    2c:28:e0:ef:56:8b:df:96:8a:28:2c:71:26:3e:99:
                    c7:42:51:6f:c9:f7:bb:a6:74:6a:66:80:ed:ed:d5:
                    9b:51:86:6f:29:ee:9c:11:87:05:2b:6a:78:79:ae:
                    c6:83:33:5a:e6:b3:c3:2d:92:ed:f2:ad:27:c8:af:
                    8c:ef:f7:e0:97:e4:79:0b:5d:2d:b3:9f:13:de:26:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:83:36:76:63:5A:05:64:4A:AC:D8:15:27:1C:59:46:50:DC:89:B1
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37332e302f32342d3234203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:b7:b3:9c:f4:e1:6f:f9:e7:31:ce:38:ce:0b:8f:d2:b2:90:
         c6:44:fb:4e:45:b2:58:25:7c:ce:ad:79:90:14:d2:9c:17:d3:
         1b:76:39:45:14:2b:1a:2b:ac:7d:5c:e1:0a:26:6b:a9:ac:e8:
         60:07:5b:1c:bb:fd:65:b8:17:8d:ab:77:de:a2:1c:13:89:02:
         63:8c:3e:61:08:bc:39:0f:fa:a8:95:f7:d9:bc:98:9b:db:47:
         02:97:4e:96:fc:6f:05:41:bb:bf:60:41:70:49:49:62:a9:cb:
         f7:b2:5e:58:9b:57:aa:f5:52:3c:ab:3a:7a:ce:0c:fa:c3:f7:
         83:74:07:85:d8:46:98:8a:40:30:c1:ba:fd:c4:2b:07:e1:d7:
         8d:32:16:c3:38:24:c3:ce:e7:5b:3e:1c:a0:6c:d8:c4:b7:a6:
         86:8f:55:15:fe:ec:c5:a4:d0:cd:b8:d3:9b:2b:9e:18:d0:66:
         37:f0:b7:fb:d8:80:bf:d6:91:e1:c3:dc:fb:96:48:d7:9c:6b:
         68:8a:d9:ba:1e:a4:15:5c:3b:f6:de:7d:19:d6:86:b1:ff:a7:
         ed:98:40:d4:08:b5:80:d3:38:73:61:50:4b:8a:39:dc:6b:a8:
         4b:d0:3e:d6:05:8f:84:69:78:d6:03:28:4c:99:ae:be:32:50:
         cd:d8:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:00 2024 by rpki-client on console-fra.rpki-client.org