Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32342d3234203d3e20323637323531.roa
File:                     34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (raw, json)
Hash identifier:          x8/4qYtYhu4oTvhf+s0EgVdC8YbHA3C556/kgYOP660=
Subject key identifier:   1A:1D:3D:C3:1E:3D:38:B6:CA:BC:DD:F0:25:B2:BA:41:E8:AC:D0:E3
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       0A13A9CB9C7ADED83541134E10FC607601D1CD37
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32342d3234203d3e20323637323531.roa
Signing time:             Wed 03 Apr 2024 18:32:29 +0000
ROA not before:           Wed 03 Apr 2024 18:27:29 +0000
ROA not after:            Wed 02 Apr 2025 18:32:29 +0000
asID:                     267251
IP address blocks:        45.232.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:13:a9:cb:9c:7a:de:d8:35:41:13:4e:10:fc:60:76:01:d1:cd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr  3 18:27:29 2024 GMT
            Not After : Apr  2 18:32:29 2025 GMT
        Subject: CN=1A1D3DC31E3D38B6CABCDDF025B2BA41E8ACD0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:69:5d:2f:1f:1e:a8:ef:8e:5e:c2:2d:a7:
                    99:54:ef:43:b0:67:5e:7e:aa:09:c2:aa:10:7d:79:
                    0c:72:43:0f:d4:e3:44:c2:cc:8c:58:f6:d0:7c:4e:
                    20:ae:4b:cb:f5:6a:3d:e3:00:4c:17:6b:43:d9:1c:
                    4d:6f:a0:af:ce:43:51:6e:5c:bf:db:9d:a9:94:0e:
                    69:04:b7:e1:60:9c:22:ec:2c:a2:0f:65:a0:f6:bf:
                    c3:00:e3:42:38:3d:e8:30:22:3d:63:fc:27:51:84:
                    49:8d:75:83:1a:16:85:4f:0f:de:c2:76:5d:3e:7d:
                    44:e8:09:df:3b:4b:fc:5a:9d:00:cf:ff:0f:18:92:
                    02:2b:35:29:04:98:f7:06:f2:cc:a4:35:dd:8e:b5:
                    84:56:55:da:bc:aa:cb:da:a9:73:92:7c:9f:9f:e8:
                    ea:87:d6:23:99:af:ba:0e:37:b2:18:ca:c2:70:7b:
                    2d:c9:ef:9b:17:5d:76:1c:fc:99:c9:16:26:4e:44:
                    70:2f:a4:73:f3:37:e6:c8:02:0d:ea:c4:30:5d:b2:
                    6c:5a:ab:6c:46:c9:5e:39:d9:de:35:db:79:4f:ed:
                    30:b1:58:ac:04:a0:3c:9e:e3:00:c8:8a:0d:31:3b:
                    70:c2:aa:d8:1b:54:7e:9a:2d:be:4e:a5:48:df:b0:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1D:3D:C3:1E:3D:38:B6:CA:BC:DD:F0:25:B2:BA:41:E8:AC:D0:E3
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32342d3234203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:7a:31:7d:8e:af:f7:6d:d2:11:07:31:c4:fe:79:86:18:97:
         c3:5c:bd:48:d1:7a:83:ab:94:43:e2:23:38:c2:a8:e4:f5:fa:
         59:a7:d3:c8:3d:e3:14:3a:f7:3e:8c:01:ed:15:d8:70:15:f0:
         69:cf:b7:01:11:2a:45:7f:19:84:f4:f4:e3:76:02:1e:ff:9a:
         8d:9a:7c:ed:29:38:6a:d7:01:f5:71:f0:68:02:0c:5b:2f:41:
         ca:6a:c7:ef:8e:46:4e:cb:15:bb:8a:4f:2c:b5:67:0a:0d:e8:
         b4:56:9b:de:c3:75:61:b2:d8:e5:59:32:b0:38:2f:1e:f1:72:
         b1:0f:56:60:21:3c:14:e9:bf:68:d4:4b:84:c7:50:02:49:e9:
         28:a6:04:85:21:57:c1:f7:58:b9:55:0f:c0:96:d5:d8:a2:bf:
         a9:64:48:9d:81:00:67:cc:ba:ad:d4:33:30:7a:40:5f:50:65:
         7a:d0:31:d4:41:ae:24:a7:bb:53:36:be:9b:eb:04:72:0b:e2:
         bf:e2:c4:26:ce:5b:f7:c3:6b:f0:53:4e:a1:83:03:6f:d2:bd:
         08:d4:df:92:81:a8:22:47:a9:a7:a4:03:f6:ab:95:84:d8:bd:
         3c:a5:71:bf:f2:2d:90:7c:40:91:1e:70:08:77:dd:c8:08:89:
         0c:1c:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:00 2024 by rpki-client on console-fra.rpki-client.org