Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3232372e302e302f32322d3332203d3e2030.roa
File:                     34352e3232372e302e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          WfD5U5mFYY4x2RZxBONzpvxYiUH9WDqA/8tSgG6Rxqg=
Subject key identifier:   86:3C:D2:4E:D5:F2:62:CD:72:91:DC:E7:FD:31:B2:05:28:E0:E3:1D
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       6AB541273122C57D01C8A1D40EE0922F438D4444
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3232372e302e302f32322d3332203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:56 +0000
ROA not before:           Mon 15 Apr 2024 17:38:56 +0000
ROA not after:            Mon 14 Apr 2025 17:43:56 +0000
asID:                     0
IP address blocks:        45.227.0.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 05:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b5:41:27:31:22:c5:7d:01:c8:a1:d4:0e:e0:92:2f:43:8d:44:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:56 2024 GMT
            Not After : Apr 14 17:43:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:04:1c:aa:f6:89:f3:e9:18:0c:e4:e2:27:
                    a5:6b:4d:2d:61:38:e5:ba:3f:37:f6:8f:5b:34:55:
                    11:ed:1d:e6:35:da:9a:ff:9b:5b:ad:8f:b1:8b:ec:
                    d9:84:9f:4f:d9:89:bb:5f:0b:d0:e2:a0:42:b9:bf:
                    4d:a8:97:77:d6:96:2c:72:a6:43:44:c4:27:1a:f0:
                    af:fb:f7:3b:d5:6c:7f:0c:88:0e:c6:15:19:ef:7f:
                    e4:56:40:e3:03:42:bc:0b:b7:96:55:0c:1a:3d:42:
                    d7:ff:8e:ce:54:7d:13:73:8e:95:52:71:3c:4d:00:
                    26:f6:6a:0c:93:18:32:7b:11:89:1a:a1:8a:81:a8:
                    fa:d8:3f:87:94:09:79:3e:58:9b:dd:37:1a:89:62:
                    65:c9:e6:cf:65:f4:06:82:4e:31:1e:67:f0:1d:e4:
                    5f:29:d6:0b:86:9c:d5:a5:ec:35:03:bc:5e:86:50:
                    7b:ee:fd:c4:45:c9:b2:a0:ce:34:51:b8:94:c1:dd:
                    02:2e:86:08:81:66:f8:ce:13:f9:fa:ea:5d:05:3d:
                    d8:09:de:f3:b4:5e:5e:b3:50:ae:c4:92:ef:2b:8b:
                    72:2e:98:57:7d:ce:02:1f:d1:97:d8:b1:4b:2f:0a:
                    23:bc:bd:03:d9:29:bc:34:a8:1b:02:7b:80:0b:da:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3C:D2:4E:D5:F2:62:CD:72:91:DC:E7:FD:31:B2:05:28:E0:E3:1D
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3232372e302e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:cf:98:42:75:82:d6:40:96:cc:b4:6f:c2:da:0b:dc:0a:98:
         98:60:e6:c1:78:b4:e9:1c:2d:a6:ff:9e:f0:c2:2e:82:f6:1a:
         39:0a:8b:54:3a:2d:0b:04:3b:e1:13:f9:d0:f1:b8:70:b1:23:
         be:28:aa:29:de:c6:9c:76:ab:40:03:88:39:e2:15:ac:f4:61:
         3e:7e:54:66:ba:b1:9c:0b:93:47:1a:93:f1:a8:9d:d0:1c:b5:
         fc:aa:51:0c:a3:d0:6f:77:c8:95:a3:c5:94:78:d2:b3:82:81:
         85:04:b0:8a:ff:29:ea:b4:f4:7c:54:60:03:5d:24:9a:ac:70:
         fd:cf:81:ad:38:dc:07:59:d5:a3:7c:63:ab:c9:d2:ba:bb:c8:
         e7:2c:00:dc:40:3e:b5:03:75:6c:22:2f:bb:9f:74:32:18:22:
         d3:6d:53:2d:35:62:a0:a7:df:83:81:e9:eb:bf:7c:d4:59:ba:
         ef:10:e9:71:0d:7e:75:df:f6:50:b8:82:64:f4:6f:e5:3e:a9:
         66:03:a7:91:16:e1:f1:36:13:50:09:cc:bc:8c:2f:35:a7:16:
         f7:0d:fd:d9:7e:e7:49:bd:a3:eb:b3:e3:84:b5:90:7d:12:b4:
         c4:a3:8f:10:8a:36:c8:ed:34:59:71:91:f4:40:0b:1c:80:38:
         61:c6:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:34 2024 by rpki-client on console-ams.rpki-client.org