Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa
File:                     34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa (raw, json)
Hash identifier:          3n62T9HIAjsD7CDtbJ9ej1DcHQu8HGrZ9pv8OJPuoC0=
Subject key identifier:   63:3B:B7:60:42:3B:78:DD:6B:C3:70:DD:03:6A:B3:8B:4E:90:DE:B3
Certificate issuer:       /CN=D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977
Certificate serial:       10125F9335836344C807435BD01C25DB6E318700
Authority key identifier: D9:8B:B4:B9:31:5B:7B:1D:C2:B3:F4:16:B1:9A:C7:88:B6:CA:89:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa
Signing time:             Thu 08 Aug 2024 19:18:01 +0000
ROA not before:           Thu 08 Aug 2024 19:13:01 +0000
ROA not after:            Thu 07 Aug 2025 19:18:01 +0000
asID:                     267093
IP address blocks:        45.228.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.crl
                          rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:12:5f:93:35:83:63:44:c8:07:43:5b:d0:1c:25:db:6e:31:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977
        Validity
            Not Before: Aug  8 19:13:01 2024 GMT
            Not After : Aug  7 19:18:01 2025 GMT
        Subject: CN=633BB760423B78DD6BC370DD036AB38B4E90DEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:43:b0:53:11:0e:a8:d2:30:94:78:3d:fd:
                    2c:4b:6f:7b:d1:c3:27:12:6b:59:74:de:3f:67:76:
                    09:e6:43:d9:58:b5:93:1a:55:8b:d9:ac:20:16:b1:
                    13:d5:16:bb:22:dd:49:82:b1:6e:f8:19:8d:43:28:
                    33:da:28:b5:eb:86:35:af:57:ba:0c:4a:c3:96:09:
                    5a:d6:f5:1d:07:72:61:9e:e2:a9:97:83:66:1c:f5:
                    d9:3f:b8:ea:92:8d:c1:0a:bb:fd:8f:48:0e:a0:f6:
                    38:d6:0c:5f:66:ff:78:fa:bf:dd:a3:ce:f9:8e:f3:
                    c5:99:52:b2:10:99:37:8b:3b:e1:95:01:d5:b3:04:
                    c8:81:2b:2c:6b:8b:1e:7f:ce:d6:55:f4:de:f4:f4:
                    83:2e:66:5b:bc:f8:59:cb:aa:82:79:39:30:c7:3b:
                    28:a6:92:3d:cc:63:e0:94:16:55:d3:75:ca:ea:9f:
                    82:e6:22:64:40:64:0d:44:d3:22:cb:c4:c8:bf:3f:
                    7a:8d:68:53:53:20:89:11:bb:68:c7:cb:81:73:ed:
                    0d:df:82:3f:03:7c:32:8e:59:1d:11:87:7a:5d:1e:
                    25:77:bf:f8:af:61:c9:54:3e:35:08:9d:94:3e:ca:
                    db:42:6d:62:98:af:e1:e0:2b:14:17:38:a8:46:cc:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3B:B7:60:42:3B:78:DD:6B:C3:70:DD:03:6A:B3:8B:4E:90:DE:B3
            X509v3 Authority Key Identifier:
                keyid:D9:8B:B4:B9:31:5B:7B:1D:C2:B3:F4:16:B1:9A:C7:88:B6:CA:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:49:9a:11:c4:e1:f2:bc:21:10:33:d6:5a:4b:4d:80:97:
         fd:64:c4:b9:e7:de:b8:4b:53:c2:26:88:58:83:24:cf:42:97:
         dd:57:7d:2c:23:17:2c:c7:81:23:46:1d:77:ca:ba:84:e7:a2:
         de:84:4f:f5:5e:77:91:d7:9a:b2:64:5d:4e:1e:30:5f:1b:a1:
         d2:23:1b:37:f8:28:b7:22:6e:74:0a:b2:3f:d3:cf:63:45:4a:
         1a:f4:09:61:04:03:d9:88:3d:cb:98:ae:a6:88:4d:48:3f:49:
         72:d1:29:a4:83:b8:a2:cf:2b:c9:36:ea:da:e4:8e:98:93:47:
         83:3b:d3:1d:47:a0:23:67:b9:37:1b:9e:37:33:ef:b9:55:f8:
         3e:ad:ab:5c:f7:92:47:9a:7e:a3:85:3c:05:1b:8b:c1:c1:74:
         76:3b:74:dd:48:a2:3a:56:6c:fc:78:6d:b4:d8:87:7c:17:8b:
         50:bf:53:e0:80:6f:a9:9c:f3:ac:ff:13:9f:44:5f:dd:ce:28:
         31:97:07:c5:6b:0f:ba:2b:5c:f3:ab:0d:0e:2c:e7:9c:41:b4:
         58:a8:5f:e6:77:f3:39:4b:e5:29:f7:93:27:11:55:c0:fc:fd:
         44:b1:97:97:20:e9:23:fa:60:43:b3:de:7b:5f:5d:bf:a9:7b:
         ae:5a:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:10 2024 by rpki-client on console-ams.rpki-client.org