Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
File:                     34352e3233382e342e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          JqzxExFHfbZ7ivzV67MRZuU1Kk4qmkubiQqqt4+LJEc=
Subject key identifier:   94:BD:EE:48:9E:EC:2C:EA:EF:BD:02:F7:2B:54:6D:2A:8F:C1:FF:D1
Certificate issuer:       /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial:       6C16939F21F3C9A3F56A16C6B3B74D378AA3020A
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
Signing time:             Thu 04 Apr 2024 19:57:47 +0000
ROA not before:           Thu 04 Apr 2024 19:52:47 +0000
ROA not after:            Thu 03 Apr 2025 19:57:47 +0000
asID:                     268308
IP address blocks:        45.238.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 23:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:16:93:9f:21:f3:c9:a3:f5:6a:16:c6:b3:b7:4d:37:8a:a3:02:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
        Validity
            Not Before: Apr  4 19:52:47 2024 GMT
            Not After : Apr  3 19:57:47 2025 GMT
        Subject: CN=94BDEE489EEC2CEAEFBD02F72B546D2A8FC1FFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a8:4a:9a:9c:6c:c2:94:34:98:a9:ad:b2:d1:
                    a0:42:8a:3a:bf:d1:e9:3a:30:6a:ef:c1:0a:92:f9:
                    4e:49:80:8e:14:61:44:ee:2b:39:70:3a:d6:94:8d:
                    71:8e:66:7e:14:77:ef:4c:f8:87:eb:53:8e:45:27:
                    1a:62:d2:c5:4b:6b:2e:45:79:17:d7:72:0e:dd:40:
                    89:49:7e:e2:b1:bd:0c:25:04:9e:d0:b7:fd:5b:6a:
                    95:f6:53:d1:ae:77:e9:da:be:31:ca:5c:fa:14:99:
                    64:e5:d1:23:81:08:fe:ee:47:d2:32:bc:05:26:9a:
                    d0:a5:a1:6f:1d:5a:6f:3b:38:d2:d3:18:33:ad:a2:
                    eb:3a:4f:30:9f:a0:6e:e3:13:56:6c:1a:a0:5e:f8:
                    49:0e:08:de:00:2a:7c:24:49:f5:ff:aa:07:c8:11:
                    b1:20:26:e1:b7:80:db:0a:fc:38:74:4a:7d:1d:1e:
                    93:af:c2:ce:49:08:55:0e:61:bc:4c:a9:e8:b1:51:
                    f7:d9:98:f4:25:66:ed:89:2a:1b:da:e3:f9:3d:96:
                    9e:5d:2e:a0:f8:f2:ec:3e:96:d7:38:9a:61:b8:5d:
                    32:26:17:46:d3:bf:7e:a5:8d:72:95:19:44:1c:bf:
                    2b:26:d5:3b:df:2d:9e:f5:f0:b9:d6:e9:8c:5f:00:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BD:EE:48:9E:EC:2C:EA:EF:BD:02:F7:2B:54:6D:2A:8F:C1:FF:D1
            X509v3 Authority Key Identifier:
                keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e342e302f32342d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:09:b6:6d:84:18:2c:cf:de:77:36:60:06:e1:c8:01:42:35:
         84:7e:31:53:de:e2:24:26:51:97:8e:8a:02:23:40:4e:4a:27:
         aa:a7:9f:8d:ec:fe:4a:e9:ba:54:a4:49:99:be:57:bd:f5:11:
         cb:3a:a1:0f:f3:83:a5:9f:8c:c7:e7:1a:7f:60:e9:f0:20:b1:
         28:6a:67:e8:ab:4b:38:28:0c:27:f6:06:fb:62:de:c0:89:ff:
         ec:97:6b:61:da:82:98:3c:8a:e0:d2:20:3d:f4:0f:8c:a0:19:
         3a:5b:f3:51:7d:3a:0f:20:f7:b7:e2:3b:1a:5f:d0:8f:8f:88:
         4e:57:8f:26:2f:89:68:52:38:b4:b1:e2:b3:71:78:9e:4c:a8:
         30:43:47:1f:2c:40:2a:f0:89:20:5f:b4:de:3a:1e:18:f1:32:
         6a:d6:43:d0:4f:66:a8:37:c5:82:63:82:a8:d5:6b:2e:6f:45:
         cd:5b:4f:a9:a3:3d:0c:29:d9:8b:4d:37:b4:bf:a1:54:d0:32:
         c4:cb:6c:95:d6:4a:fb:ba:1c:b6:88:1e:e4:88:c4:77:2c:0b:
         6c:53:0b:7c:8e:c7:1e:c0:2a:a5:1a:80:d7:a2:8f:2a:60:06:
         07:13:eb:3f:77:02:5c:96:1b:60:6c:98:c0:64:57:be:77:b6:
         ed:d4:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:11:02 2024 by rpki-client on console-ams.rpki-client.org