Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e382e302f32332d3233203d3e20323638323133.roa
File:                     34352e3233362e382e302f32332d3233203d3e20323638323133.roa (raw, json)
Hash identifier:          1ZAgSrJlpLVyVMXZd2pYPG5UvUUm8yHiVZ5ZhK+hncM=
Subject key identifier:   DB:C6:1C:6C:C8:10:1F:7A:18:41:BD:92:97:0A:C0:6F:D1:40:BB:3F
Certificate issuer:       /CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
Certificate serial:       3747A5A029ECB13C8F890D51D391641C9C640958
Authority key identifier: B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e382e302f32332d3233203d3e20323638323133.roa
Signing time:             Wed 05 Jun 2024 18:33:23 +0000
ROA not before:           Wed 05 Jun 2024 18:28:23 +0000
ROA not after:            Wed 04 Jun 2025 18:33:23 +0000
asID:                     268213
IP address blocks:        45.236.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.crl
                          rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 21:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:47:a5:a0:29:ec:b1:3c:8f:89:0d:51:d3:91:64:1c:9c:64:09:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
        Validity
            Not Before: Jun  5 18:28:23 2024 GMT
            Not After : Jun  4 18:33:23 2025 GMT
        Subject: CN=DBC61C6CC8101F7A1841BD92970AC06FD140BB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:74:91:26:74:aa:8b:5c:4d:6c:92:ac:bc:
                    60:73:ba:e3:61:87:73:b2:75:14:70:8b:df:03:77:
                    b5:15:3d:a7:ce:30:f1:c1:41:8f:09:24:43:6c:3b:
                    82:84:0c:c1:d5:53:45:c0:1c:bb:f7:af:dd:53:6c:
                    52:c1:46:9a:ae:82:5a:26:e6:a8:58:68:9f:dc:40:
                    27:c5:5e:91:a0:3b:d4:59:99:61:8b:01:a7:5f:d0:
                    1f:cf:4c:1a:50:32:06:2a:de:d8:a9:6d:52:53:b5:
                    1f:54:76:be:01:4d:55:ed:72:c7:0e:9c:a9:62:64:
                    8d:ce:db:6a:79:fd:ba:12:32:6e:f2:13:be:d6:25:
                    d3:b4:80:ba:77:db:40:03:fe:2c:8e:3d:8d:e6:6d:
                    1a:64:91:7a:1c:05:9f:59:53:20:09:5e:24:c3:d0:
                    dd:88:96:8a:fc:fa:15:b4:28:86:86:6f:8d:cd:71:
                    4e:92:10:10:fe:69:b0:c9:f4:a7:17:78:be:ce:9f:
                    9c:6f:08:8a:56:74:29:a4:7b:9c:27:cc:61:8f:c9:
                    85:3e:42:8b:41:67:1d:32:2f:31:8b:1f:18:6b:a5:
                    d3:0e:97:13:ce:9d:83:30:64:90:94:09:53:d6:fc:
                    bb:4a:2c:4b:76:93:06:fe:90:32:3d:18:d0:16:ec:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:1C:6C:C8:10:1F:7A:18:41:BD:92:97:0A:C0:6F:D1:40:BB:3F
            X509v3 Authority Key Identifier:
                keyid:B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e382e302f32332d3233203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:60:8f:36:86:ca:0c:74:a2:b1:f0:bf:1c:8e:44:ea:3c:
         e5:e8:ac:25:08:c4:8a:5b:92:7a:ff:43:29:63:82:6d:56:10:
         16:ab:46:d4:44:4f:2a:aa:71:ca:ff:8c:bc:26:39:c3:04:46:
         ee:43:74:e2:5b:b3:12:22:a4:03:d8:f3:55:3c:28:ef:23:62:
         1d:cf:97:7a:7a:61:dd:5b:14:02:95:91:20:6f:b0:57:fc:86:
         2a:6c:25:f1:4c:51:1f:2e:95:cd:a6:0d:8e:c0:65:06:ac:1c:
         a6:5c:d1:78:4d:9b:ae:35:b2:8e:d6:77:e8:e1:61:ac:2e:f0:
         c3:52:45:72:65:7a:f6:c9:e0:1f:08:34:ef:74:10:fa:0d:d1:
         d2:ea:99:74:00:2c:65:83:09:02:52:90:40:0b:6e:d7:33:42:
         bf:54:8a:64:46:b9:f1:72:87:29:9f:01:d7:c2:1d:e0:68:33:
         e3:35:26:d1:30:ab:91:c8:5a:dd:d8:89:c4:ae:fe:25:33:ff:
         2f:eb:50:24:54:22:68:f6:7c:03:23:81:a6:a6:e8:3b:77:44:
         1b:4a:e1:9e:60:e4:15:31:30:77:93:21:f3:9b:f0:d4:b1:f1:
         ef:72:96:9a:90:44:94:48:17:ed:6b:34:c5:fc:49:fe:be:31:
         81:18:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:46:24 2024 by rpki-client on console-fra.rpki-client.org