Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130332e302f32342d3234203d3e20323638323639.roa
File:                     34352e3233372e3130332e302f32342d3234203d3e20323638323639.roa (raw, json)
Hash identifier:          4quFmrcg1IjZXz+AYBhMI2+9HWX63/25BuZrMxO11C8=
Subject key identifier:   05:72:86:CB:89:69:1E:15:8B:5D:A7:59:B8:A1:D6:45:A2:A8:40:5A
Certificate issuer:       /CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Certificate serial:       441B85E7F9817360F9BF500CA2D36F37A62A1023
Authority key identifier: B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130332e302f32342d3234203d3e20323638323639.roa
Signing time:             Thu 04 Apr 2024 19:08:49 +0000
ROA not before:           Thu 04 Apr 2024 19:03:49 +0000
ROA not after:            Thu 03 Apr 2025 19:08:49 +0000
asID:                     268269
IP address blocks:        45.237.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl
                          rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1b:85:e7:f9:81:73:60:f9:bf:50:0c:a2:d3:6f:37:a6:2a:10:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Validity
            Not Before: Apr  4 19:03:49 2024 GMT
            Not After : Apr  3 19:08:49 2025 GMT
        Subject: CN=057286CB89691E158B5DA759B8A1D645A2A8405A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:32:10:ee:66:ae:36:8f:a4:8a:b4:71:8f:
                    db:79:32:b1:3d:a0:04:e3:cf:c6:96:dd:3f:a7:2b:
                    cd:a1:95:97:19:94:0e:19:a1:e3:dd:c6:af:5d:27:
                    09:b5:74:f6:63:61:67:56:d4:15:ae:54:59:c1:0b:
                    c3:7d:88:d0:78:77:52:90:46:9b:0c:ba:f1:89:7d:
                    92:84:35:97:f9:84:5a:e3:01:c7:e8:e0:0c:da:28:
                    c8:38:90:56:c1:94:ca:96:ed:45:88:1c:5d:e1:c9:
                    4d:b9:e7:88:79:3b:a5:1d:54:ab:e3:0b:86:a3:ff:
                    08:d1:6e:4a:22:8e:49:6f:18:c6:93:37:51:4d:e2:
                    1f:ce:c5:1d:c3:6a:fe:d2:6b:49:3c:c7:43:da:8e:
                    cb:ae:f5:b8:3c:df:db:3e:68:2e:d7:8f:cf:f2:f6:
                    35:22:82:f4:5d:37:0d:13:41:40:78:30:24:13:3f:
                    8d:9a:91:8a:7e:be:ee:a9:8f:25:4d:67:8e:1a:1d:
                    e7:4b:9f:d3:de:85:3c:3b:f7:68:c7:7d:ba:46:6a:
                    bf:56:d1:d9:bb:94:9f:69:f3:d5:f7:2b:09:f4:72:
                    4e:ea:8e:6a:c0:7b:a8:dd:57:10:f5:b7:3c:7e:1f:
                    17:d5:31:b4:5b:c7:76:5a:7a:77:f7:07:e9:5a:85:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:72:86:CB:89:69:1E:15:8B:5D:A7:59:B8:A1:D6:45:A2:A8:40:5A
            X509v3 Authority Key Identifier:
                keyid:B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130332e302f32342d3234203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:38:6a:a0:75:7e:95:26:e6:de:9d:57:6a:1b:cb:97:ef:83:
         9a:22:5a:b5:6e:0d:8e:a6:ac:c6:3b:3e:36:7a:2f:00:bb:74:
         7c:d7:bd:f2:1a:ce:4f:f4:a8:41:5d:2d:94:9f:2f:d2:f0:83:
         02:72:67:80:2b:2f:a5:1e:d3:aa:44:5e:93:64:e5:51:d7:14:
         42:d9:3c:b1:ab:ae:ae:e9:bf:57:b9:68:ec:40:cd:84:09:1d:
         90:17:b3:f6:34:d3:2b:59:b7:29:fd:11:de:16:03:66:24:62:
         1f:4d:05:68:5f:18:b4:d7:42:57:be:d1:e4:2e:37:ed:a1:5c:
         e6:b1:08:cc:18:5f:30:80:a3:47:a5:83:f3:37:c2:43:0f:73:
         7b:b1:bd:b8:f0:83:b2:b9:01:a5:3f:4f:0c:98:b0:04:8e:ea:
         10:3e:14:26:69:36:9b:6b:ed:e5:51:62:72:1a:71:27:71:3b:
         e6:1b:ea:b0:1b:91:57:3a:ca:b1:d3:b0:6a:d3:16:ed:72:fe:
         1f:39:d9:99:2f:5c:b0:3d:71:89:da:5e:59:09:e7:ec:f9:8c:
         dd:8d:f1:b4:aa:48:35:f3:eb:ea:73:7a:8c:a3:ea:df:f9:16:
         85:3a:42:8b:f1:bf:24:c3:30:31:ca:97:4e:45:97:03:00:f5:
         4c:bb:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:21 2024 by rpki-client on console-ams.rpki-client.org