Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/34352e3233362e3230342e302f32342d3234203d3e20323638323435.roa
File:                     34352e3233362e3230342e302f32342d3234203d3e20323638323435.roa (raw, json)
Hash identifier:          QItFrvpBfLwEKTy2GIyRGA5TUlv6SZYIOj1uOuHozMs=
Subject key identifier:   E6:6E:32:88:33:B3:19:50:71:5A:C5:64:56:31:C6:9B:CD:B4:58:C4
Certificate issuer:       /CN=59C244038ED88595EC22E2B1EA066AE712A58F17
Certificate serial:       5D471631FC073DC0A757C26263AB432DA8AE9AFC
Authority key identifier: 59:C2:44:03:8E:D8:85:95:EC:22:E2:B1:EA:06:6A:E7:12:A5:8F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/34352e3233362e3230342e302f32342d3234203d3e20323638323435.roa
Signing time:             Thu 04 Apr 2024 06:00:14 +0000
ROA not before:           Thu 04 Apr 2024 05:55:14 +0000
ROA not after:            Thu 03 Apr 2025 06:00:14 +0000
asID:                     268245
IP address blocks:        45.236.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.crl
                          rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:47:16:31:fc:07:3d:c0:a7:57:c2:62:63:ab:43:2d:a8:ae:9a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59C244038ED88595EC22E2B1EA066AE712A58F17
        Validity
            Not Before: Apr  4 05:55:14 2024 GMT
            Not After : Apr  3 06:00:14 2025 GMT
        Subject: CN=E66E328833B31950715AC5645631C69BCDB458C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:77:20:f1:7f:f7:f4:0b:1c:f6:ea:86:03:e0:
                    b9:86:4c:c0:44:25:26:9f:d2:00:2c:c5:3c:5f:6c:
                    28:5c:99:36:17:63:b1:02:ab:55:d1:c7:57:aa:a6:
                    04:4d:17:91:cc:32:92:c2:c9:72:1b:5b:ef:41:9a:
                    13:87:45:0e:23:4d:cd:91:e0:62:b1:d4:60:de:2e:
                    96:c4:cc:77:50:c2:66:36:4e:2f:b9:3d:1e:3a:bb:
                    de:bb:b9:9a:ad:ba:6d:6b:9f:31:34:c7:0c:e2:08:
                    6e:b1:bb:8c:96:63:66:10:f2:2f:72:02:28:aa:8e:
                    d2:e4:68:56:ad:7d:10:09:8a:64:f0:36:3e:b7:22:
                    b3:a6:33:32:bf:c4:28:1c:7b:d4:5d:e7:6a:55:01:
                    02:17:35:8e:6a:aa:4f:d8:cc:31:f2:77:80:59:4b:
                    d8:1f:52:67:db:a0:20:20:6c:b0:4c:fe:15:c6:62:
                    41:46:8d:34:b5:c0:0a:32:06:be:3a:fa:26:d3:4a:
                    d7:e8:71:6b:e3:86:d1:1c:38:2d:d0:e6:bb:17:4b:
                    00:33:95:a7:2c:6f:db:36:3e:0b:c0:1f:6a:5f:59:
                    de:47:6f:74:cd:1a:f1:c7:93:41:58:f9:54:c7:ab:
                    6f:1c:0a:8f:e2:ba:8d:e8:2b:f3:46:7a:b2:12:54:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6E:32:88:33:B3:19:50:71:5A:C5:64:56:31:C6:9B:CD:B4:58:C4
            X509v3 Authority Key Identifier:
                keyid:59:C2:44:03:8E:D8:85:95:EC:22:E2:B1:EA:06:6A:E7:12:A5:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/34352e3233362e3230342e302f32342d3234203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:bb:c3:7c:6f:e4:c4:e9:b0:a9:43:6d:b2:2f:dc:b5:3b:20:
         6f:56:4b:7b:9f:f9:da:e0:85:9e:33:a7:21:24:ae:e6:69:e8:
         46:3a:56:5a:a7:c9:32:2f:e7:d8:ca:2d:b7:ad:ac:07:05:c6:
         44:10:59:ba:39:b5:5d:aa:39:5b:2d:b5:62:7a:29:9c:f4:e9:
         17:3a:12:70:4b:80:22:ba:d3:52:31:99:86:8e:4f:48:40:bd:
         2b:32:52:43:33:85:9e:ce:9a:34:b2:18:13:60:78:67:30:a9:
         06:40:b3:cf:3b:02:56:6a:ce:a3:17:1e:09:6e:12:f7:12:34:
         d5:76:f5:cd:ec:fe:b8:e1:92:d8:24:5c:3d:cc:32:f5:78:ac:
         0b:8e:07:91:6b:49:6e:58:b6:9e:bf:29:ae:9e:5e:6c:97:2f:
         ce:f1:3f:d1:00:52:53:9f:eb:c6:82:26:9d:19:10:a7:07:b7:
         a4:ac:eb:e0:57:92:b4:95:4f:a2:bc:31:da:c8:13:bb:c0:76:
         64:07:79:b5:39:94:1d:17:4d:7a:08:45:8a:50:0c:b0:b6:a2:
         92:b4:4a:80:c3:6f:00:0e:cc:b5:8a:3e:3b:82:93:39:2a:72:
         fe:bc:86:ae:12:b4:ce:aa:e1:30:bc:f6:fe:4f:88:a3:f8:26:
         14:91:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org