Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130302e302f32342d3234203d3e20323638323639.roa
File:                     34352e3233372e3130302e302f32342d3234203d3e20323638323639.roa (raw, json)
Hash identifier:          X3iT56FMiYGP3qDEMcrLV5UYpOixepz6OI3Ud+jhmSc=
Subject key identifier:   1C:27:D1:21:B8:74:AA:3E:07:C7:25:8B:89:C6:8A:D5:E2:9A:BD:A1
Certificate issuer:       /CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Certificate serial:       5854642A79A07E60CE66971F3AD7CCE5270C7321
Authority key identifier: B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130302e302f32342d3234203d3e20323638323639.roa
Signing time:             Thu 04 Apr 2024 19:08:48 +0000
ROA not before:           Thu 04 Apr 2024 19:03:48 +0000
ROA not after:            Thu 03 Apr 2025 19:08:48 +0000
asID:                     268269
IP address blocks:        45.237.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl
                          rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:64:2a:79:a0:7e:60:ce:66:97:1f:3a:d7:cc:e5:27:0c:73:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Validity
            Not Before: Apr  4 19:03:48 2024 GMT
            Not After : Apr  3 19:08:48 2025 GMT
        Subject: CN=1C27D121B874AA3E07C7258B89C68AD5E29ABDA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:56:64:66:66:fd:f5:2b:31:c0:80:77:b9:
                    d8:29:e3:cc:14:04:81:05:f3:86:0d:23:77:96:97:
                    6c:1a:dc:7c:a4:7d:82:ae:88:56:cc:ce:a1:43:09:
                    49:40:1b:d4:3b:f5:ed:31:b7:38:1b:00:95:1d:80:
                    de:23:35:37:1e:cb:dd:44:2c:c7:d6:9b:b2:48:c2:
                    55:53:32:d7:b9:9e:b7:01:78:c0:52:3c:12:87:7e:
                    a0:6d:04:eb:0d:74:03:70:1d:d4:3f:11:27:da:f1:
                    0d:30:ad:f1:41:70:66:ff:25:14:ea:da:7a:60:90:
                    19:5c:be:cd:75:f9:aa:8c:68:e0:98:ff:8f:82:f6:
                    8a:fe:90:c1:53:72:f4:ab:7d:65:2f:34:66:a4:97:
                    6c:c6:1b:02:63:1d:0b:83:57:b6:c2:37:85:2a:41:
                    68:07:82:91:b2:3e:29:39:f6:ae:5c:78:6a:09:08:
                    f6:d8:11:e3:48:a4:09:7c:0b:e7:37:a6:4b:a6:6a:
                    38:3b:29:b3:8e:e4:a9:a0:77:c6:33:5f:ce:e6:c0:
                    5b:b2:ff:78:ac:28:a8:84:5c:ea:9e:4a:03:24:d3:
                    5a:d4:e9:50:f1:73:7d:cd:a4:52:e3:b9:87:82:22:
                    4c:33:49:6a:59:78:b2:ee:e1:78:28:71:8b:bc:37:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:27:D1:21:B8:74:AA:3E:07:C7:25:8B:89:C6:8A:D5:E2:9A:BD:A1
            X509v3 Authority Key Identifier:
                keyid:B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130302e302f32342d3234203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:55:cd:9f:77:2b:b1:47:bb:e0:72:7b:6e:1f:61:93:57:c0:
         82:ec:ff:8f:87:85:93:e5:00:49:12:50:90:07:2f:34:a1:03:
         58:8f:82:d9:9a:74:71:49:38:b8:8e:14:22:00:9b:c2:4b:d6:
         06:d9:74:44:98:23:40:24:f8:85:96:78:aa:3d:72:09:8b:e5:
         3f:1a:02:31:40:64:71:db:49:13:6d:c8:a4:64:97:e3:66:fa:
         47:af:4c:9b:14:4a:7f:c8:22:58:ad:64:e5:03:0b:73:2f:db:
         53:69:df:dd:8c:69:71:66:86:0b:8f:f8:24:aa:07:ba:10:e3:
         79:f0:a9:62:31:ca:64:d4:bd:8d:56:be:be:b5:9c:33:34:f7:
         42:db:d9:bf:2e:48:0e:ce:cd:cd:a9:10:8f:5d:2a:dd:fe:f0:
         ca:c6:bf:10:d0:bf:78:70:3e:97:8d:50:61:bd:ee:71:19:74:
         4b:f3:0b:a0:44:1a:fe:c5:d6:48:5c:81:0c:6d:41:68:8e:c1:
         18:82:5c:ee:33:a7:74:59:ad:9b:f4:34:71:14:d9:29:8c:b8:
         74:1a:db:c8:19:fb:95:20:a0:fe:6f:2d:3b:5b:cf:3b:0e:aa:
         86:1f:03:cc:42:df:09:4c:00:5e:d4:cc:f5:37:d1:ff:a0:a1:
         46:5b:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:21 2024 by rpki-client on console-ams.rpki-client.org