Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
File:                     34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (raw, json)
Hash identifier:          DXDLv4VUTGmvyej3Tfd0i/uJHnSiCmLsyQx4XLyMpuM=
Subject key identifier:   30:1D:C2:BF:C3:85:A6:79:33:34:F1:8A:3D:8C:02:CB:8B:36:EA:A9
Certificate issuer:       /CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Certificate serial:       088ED293A003D35DA7EE60370938A7469E0F99A1
Authority key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
Signing time:             Thu 04 Apr 2024 00:02:21 +0000
ROA not before:           Wed 03 Apr 2024 23:57:21 +0000
ROA not after:            Thu 03 Apr 2025 00:02:21 +0000
asID:                     268746
IP address blocks:        45.171.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:d2:93:a0:03:d3:5d:a7:ee:60:37:09:38:a7:46:9e:0f:99:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
        Validity
            Not Before: Apr  3 23:57:21 2024 GMT
            Not After : Apr  3 00:02:21 2025 GMT
        Subject: CN=301DC2BFC385A6793334F18A3D8C02CB8B36EAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:9a:71:f1:d9:db:10:72:48:79:21:8b:58:
                    82:0d:f0:11:e6:a2:e5:c0:4d:16:d2:e7:67:26:d6:
                    62:d2:52:59:f7:58:0e:06:1c:18:8b:24:69:8e:37:
                    78:73:10:d4:1b:3f:bb:90:f8:7e:4b:2e:99:ed:64:
                    4a:e4:97:b7:2d:70:2b:68:e9:63:a6:0c:3a:91:d6:
                    86:15:2b:2b:10:be:ea:71:a2:3b:c0:00:58:ea:67:
                    70:c4:c2:6c:38:2b:7d:90:4a:c1:a2:c4:d0:54:7d:
                    10:1b:d8:ba:8f:e7:84:42:5c:66:b3:26:15:b2:ed:
                    db:46:9b:4a:2b:b7:c6:46:25:a9:12:2b:d9:c3:a8:
                    89:55:da:33:1d:41:9d:88:9a:2b:34:43:a3:44:a8:
                    c1:85:3c:d3:bf:43:36:c7:af:fb:91:84:da:4c:6c:
                    12:74:0b:97:d4:e7:3c:a7:a7:e5:2c:49:2d:8f:89:
                    52:13:cf:df:fe:3a:3d:b5:db:60:b2:5d:7f:32:03:
                    0a:1b:fd:b7:6f:e0:33:e6:26:ec:f8:40:07:9f:8b:
                    e6:0a:27:48:54:36:5b:e2:cc:83:0f:c0:86:36:d8:
                    ec:d3:8f:e0:18:72:40:84:cd:e4:87:62:f1:6b:62:
                    0e:ef:3f:c3:c6:e2:69:ff:55:b6:1c:c3:09:c4:e7:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1D:C2:BF:C3:85:A6:79:33:34:F1:8A:3D:8C:02:CB:8B:36:EA:A9
            X509v3 Authority Key Identifier:
                keyid:D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:07:f7:4a:9e:18:0a:b8:43:c8:d5:0a:cf:32:57:38:0d:5b:
         7b:4c:4a:3f:92:a2:75:c4:01:78:85:42:dd:05:a5:d1:b4:ea:
         3d:8e:4a:f7:95:59:fc:10:6e:c0:95:15:9d:85:6a:af:54:ee:
         0d:1a:a9:68:85:3c:a7:73:30:94:38:d3:0e:05:b4:f1:2f:3f:
         ef:8a:d8:3d:78:9e:ba:81:f8:8a:dc:2a:1a:18:8c:73:09:75:
         f9:76:ff:47:a1:aa:75:c8:cc:c9:04:aa:f0:d1:45:e6:c4:d2:
         5d:9b:24:f0:0c:72:0b:7d:97:a6:2e:04:2d:35:a2:81:bb:82:
         0b:d7:f3:5c:ec:56:8c:a1:09:42:41:38:b2:33:20:95:d4:66:
         45:77:42:aa:45:db:e6:80:3c:63:75:96:c8:ae:69:2b:e9:a2:
         cc:c2:b7:ca:77:e8:78:67:ca:c7:f0:7a:3b:a4:5a:ca:4b:8d:
         91:12:f6:0c:db:f9:1f:3d:d7:70:01:c4:5e:54:02:c9:99:e5:
         76:c0:77:8c:7e:ca:a6:97:59:1a:b1:d1:a8:32:d9:6e:1c:22:
         01:d2:9a:6c:9d:33:54:2a:28:dc:c6:cb:92:ce:d9:5f:8c:29:
         36:79:2b:aa:c0:b7:16:61:9a:00:2e:9d:16:7a:ad:4d:3d:06:
         bf:47:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:45 2024 by rpki-client on console-fra.rpki-client.org