Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32342e302f32332d3234203d3e20323637393530.roa
File:                     34352e3136362e32342e302f32332d3234203d3e20323637393530.roa (raw, json)
Hash identifier:          HCdU9xYwp8R8hH/ObH4erGBBjaICKlWg7gD0t39Ajyg=
Subject key identifier:   B4:5E:29:F1:F2:BC:06:BC:33:70:3C:66:4D:5E:AF:34:45:2A:47:3E
Certificate issuer:       /CN=DBCD6820E048E145381B6BF0329F650ED78C7452
Certificate serial:       3CFB4B18F53C299E4820D6DB589EA04ECE32B062
Authority key identifier: DB:CD:68:20:E0:48:E1:45:38:1B:6B:F0:32:9F:65:0E:D7:8C:74:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32342e302f32332d3234203d3e20323637393530.roa
Signing time:             Thu 04 Apr 2024 22:36:40 +0000
ROA not before:           Thu 04 Apr 2024 22:31:40 +0000
ROA not after:            Thu 03 Apr 2025 22:36:40 +0000
asID:                     267950
IP address blocks:        45.166.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.crl
                          rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fb:4b:18:f5:3c:29:9e:48:20:d6:db:58:9e:a0:4e:ce:32:b0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBCD6820E048E145381B6BF0329F650ED78C7452
        Validity
            Not Before: Apr  4 22:31:40 2024 GMT
            Not After : Apr  3 22:36:40 2025 GMT
        Subject: CN=B45E29F1F2BC06BC33703C664D5EAF34452A473E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:d6:44:54:3e:3e:e2:d0:07:ac:1f:aa:03:
                    6d:61:af:2a:d7:b3:51:73:af:44:b7:e3:a1:02:97:
                    62:7e:53:85:4e:f4:fc:b3:c1:3e:8e:91:89:35:c1:
                    a9:f7:21:de:b2:f2:60:79:6b:11:4f:fa:9d:25:69:
                    7e:97:3c:8b:3b:73:0a:e8:81:da:44:10:ca:0c:57:
                    5a:2c:8f:34:3f:33:1a:19:00:56:d6:ca:9f:0f:82:
                    dc:12:4c:f2:73:61:f7:1e:29:91:00:15:80:c5:e2:
                    ba:ec:fc:17:f7:16:55:a2:3c:fa:1d:65:57:10:52:
                    b8:17:87:3c:31:af:53:80:6e:c7:09:c4:9e:ce:fc:
                    76:35:4d:39:3f:08:17:b4:df:c0:c0:db:6f:36:53:
                    95:41:e8:dc:3c:8c:02:e0:19:64:74:7b:72:c9:ea:
                    6d:ec:85:f5:24:a3:39:64:6a:62:99:7c:40:ab:de:
                    18:85:96:14:20:73:8a:19:28:4b:37:f8:b7:cb:7e:
                    46:d8:a7:a9:2a:e5:10:a0:6d:3b:56:66:ad:f0:a1:
                    60:c7:ef:d4:aa:b6:19:14:98:e7:93:cb:fc:03:ef:
                    03:38:e2:42:09:85:12:23:be:bb:9f:01:ad:a5:c0:
                    58:45:45:7b:81:6e:f4:6b:8d:d3:c9:be:2e:4d:3f:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5E:29:F1:F2:BC:06:BC:33:70:3C:66:4D:5E:AF:34:45:2A:47:3E
            X509v3 Authority Key Identifier:
                keyid:DB:CD:68:20:E0:48:E1:45:38:1B:6B:F0:32:9F:65:0E:D7:8C:74:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32342e302f32332d3234203d3e20323637393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:35:aa:a0:b2:38:1e:70:c9:c1:a5:e8:7e:77:8c:fe:f2:
         88:1f:38:e4:7d:62:4c:43:13:22:86:12:a5:55:67:f5:b4:2a:
         7c:7a:64:34:68:b4:61:cf:c2:c5:98:2a:bb:03:a6:ca:24:73:
         2b:47:5b:bd:3e:96:af:a5:97:e7:7e:a1:2f:86:cd:bc:4b:18:
         de:d3:a5:0a:cd:a7:60:df:4f:39:b4:8a:66:f0:e3:e6:8e:6c:
         65:84:09:05:4e:15:79:01:c8:3d:55:a5:43:4c:09:26:17:96:
         70:76:67:7c:cb:b7:1b:13:8e:d9:5c:08:f4:67:04:91:ec:1f:
         43:e8:af:79:c9:fc:24:88:d0:3a:6a:17:94:c4:34:0d:c1:5a:
         bc:8c:90:c2:64:6a:11:41:80:cc:12:7a:f0:4b:22:c1:a0:18:
         5f:b6:ee:e1:2c:00:bd:6f:db:80:81:a7:83:d3:ee:1d:9f:41:
         d5:4a:f0:59:cd:33:0d:7e:94:b5:05:d4:c8:4b:53:1a:ff:8a:
         78:0e:03:87:0e:d7:46:03:4c:dd:a3:f1:49:9f:bb:b3:a9:a4:
         ac:b1:fe:c1:a8:58:5e:6b:9f:c5:34:ab:24:f2:e1:79:75:a3:
         19:13:95:9e:29:9b:32:49:73:9c:3d:a8:13:a9:a0:61:11:13:
         54:a2:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org