Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa
File:                     34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (raw, json)
Hash identifier:          VpdcX5K/PgtOLgBv06n7D60IeLP2Cqz5thyEgjmgUeI=
Subject key identifier:   50:02:58:7E:18:47:38:7E:11:E2:3A:5E:B6:35:9D:7A:3A:99:A1:B5
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       32BE89EFE0AABDBB750D54754FB5F611C85648B7
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa
Signing time:             Wed 03 Apr 2024 18:32:28 +0000
ROA not before:           Wed 03 Apr 2024 18:27:28 +0000
ROA not after:            Wed 02 Apr 2025 18:32:28 +0000
asID:                     267251
IP address blocks:        45.232.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:be:89:ef:e0:aa:bd:bb:75:0d:54:75:4f:b5:f6:11:c8:56:48:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr  3 18:27:28 2024 GMT
            Not After : Apr  2 18:32:28 2025 GMT
        Subject: CN=5002587E1847387E11E23A5EB6359D7A3A99A1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:f4:c4:51:a5:b5:4d:f1:db:fc:b5:d6:32:
                    3d:37:e3:60:7f:9a:e4:f1:b1:0a:6f:29:ad:85:f1:
                    a2:66:9b:e7:ed:0e:79:5f:a1:5d:f2:31:69:27:c5:
                    ec:94:94:95:fa:a7:c8:ab:4e:1d:8e:96:aa:7f:45:
                    da:b8:90:e5:4e:2a:57:26:09:90:d8:97:4c:9e:96:
                    e5:34:01:b7:b6:e4:86:28:2d:d6:02:7f:7e:3d:09:
                    d9:66:13:ea:ad:31:67:e2:9f:16:8d:f8:c2:a9:69:
                    ce:2a:1b:72:05:57:50:71:66:b0:d3:54:ab:3c:ed:
                    78:13:5c:ec:6a:da:d7:ef:d1:6b:69:4e:1e:ea:2a:
                    b4:a9:9d:64:7e:3b:d2:c3:6f:cf:61:2c:ae:0a:11:
                    ff:fc:a9:2f:37:4c:9c:3c:d9:65:c2:3c:a1:22:08:
                    bd:e9:c9:1b:54:95:12:f3:c1:f2:23:7f:af:17:11:
                    7e:02:7d:1b:46:ed:99:7f:dd:f7:be:da:1b:14:c7:
                    f5:37:2e:96:e2:4a:37:6a:76:63:41:03:37:d1:fa:
                    79:70:b3:b9:40:2b:7b:59:f4:b1:64:c0:65:58:32:
                    8a:c6:ad:53:1c:22:27:27:d1:2f:86:1f:8b:59:48:
                    1d:2d:80:d8:6e:15:e3:dd:29:32:51:a5:7b:87:7e:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:58:7E:18:47:38:7E:11:E2:3A:5E:B6:35:9D:7A:3A:99:A1:B5
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:29:da:a2:2e:9a:a0:dd:1b:00:21:6c:0e:29:da:94:56:
         ad:2a:95:6f:47:f7:17:f1:25:cb:1c:cb:ef:03:7c:34:42:7c:
         9d:5c:b5:bb:19:3b:90:ba:bb:ef:a2:70:80:f2:45:d8:04:24:
         50:eb:c0:39:c6:3c:1f:df:db:44:b6:af:4c:90:b8:73:8b:bd:
         67:32:99:ac:26:19:fd:7a:30:31:e3:14:dc:5e:fd:81:27:87:
         b5:19:5b:71:e9:e9:0f:3f:df:38:18:ed:65:8d:ac:48:3b:f0:
         1d:7b:9e:a8:da:c2:c9:07:77:5b:89:fa:51:d9:e5:ec:46:cb:
         67:84:a6:d9:46:7d:35:a6:63:7e:38:02:b9:e0:c9:d5:6a:e6:
         38:d0:d5:ad:97:a6:61:41:86:36:08:40:65:f7:30:0c:c8:f7:
         4e:5b:0c:13:5b:a4:73:13:e7:94:c4:a6:02:c5:9d:df:d0:3d:
         7e:16:01:8a:dd:f3:8e:6c:ce:78:ab:e1:bb:39:d1:e3:f6:5e:
         26:ca:df:bf:80:44:51:b4:98:45:24:ba:03:39:05:b5:7e:ff:
         ff:87:2e:bc:f5:4e:42:2f:ba:12:60:f4:74:3d:15:48:e1:4e:
         4b:1b:2a:43:93:ba:c1:09:d9:15:df:91:5e:65:1f:f1:38:c8:
         c2:17:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:00 2024 by rpki-client on console-fra.rpki-client.org