Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa
File:                     34352e3233352e38302e302f32322d3234203d3e203532353332.roa (raw, json)
Hash identifier:          H7bg3ve9AQgODihlpyL2eG53rjE0P6JDfbTLIdMG8ns=
Subject key identifier:   A3:B5:B9:65:B0:8B:2D:4C:0A:4F:DE:00:3A:E6:CD:36:EA:1D:95:AA
Certificate issuer:       /CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
Certificate serial:       6053D36C5FF63E97E41DF4E02A6A377498AF2952
Authority key identifier: 8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa
Signing time:             Mon 24 Jun 2024 18:01:32 +0000
ROA not before:           Mon 24 Jun 2024 17:56:32 +0000
ROA not after:            Mon 23 Jun 2025 18:01:32 +0000
asID:                     52532
IP address blocks:        45.235.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:53:d3:6c:5f:f6:3e:97:e4:1d:f4:e0:2a:6a:37:74:98:af:29:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
        Validity
            Not Before: Jun 24 17:56:32 2024 GMT
            Not After : Jun 23 18:01:32 2025 GMT
        Subject: CN=A3B5B965B08B2D4C0A4FDE003AE6CD36EA1D95AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:8e:ba:f8:83:76:ce:a2:48:7b:92:a8:64:
                    44:3a:d9:f7:f1:6d:4d:71:ef:77:80:f9:d8:73:63:
                    25:2a:d6:f1:da:4d:41:af:3b:0e:5e:ab:30:61:8b:
                    3f:c6:66:9e:39:af:bf:19:90:4f:62:1c:e8:d1:95:
                    ba:b3:52:3b:2a:df:0e:86:59:2a:37:06:2a:96:3b:
                    c9:0f:5b:8c:31:ea:00:36:4c:6d:d5:45:d4:34:bc:
                    64:27:7b:ee:1c:c9:7f:21:26:90:cf:70:3b:88:1a:
                    c4:df:3e:58:69:a2:d4:8d:11:e3:1b:49:90:51:56:
                    33:97:de:55:cc:92:1d:ce:a9:c5:b1:9c:8a:a8:51:
                    49:f5:55:0f:77:91:46:93:03:71:8a:c9:49:40:63:
                    9f:3d:8e:1e:05:28:90:1c:60:f0:67:03:72:86:c7:
                    16:ce:5e:d4:44:89:4e:55:4f:48:4d:31:b3:a9:f1:
                    b3:fd:91:4a:fd:f3:60:6d:21:1c:36:ec:ea:4f:8a:
                    bd:55:d3:2e:70:2b:08:83:66:25:be:92:e6:d5:de:
                    f6:86:18:9e:98:4c:97:4d:17:27:a2:38:36:0b:10:
                    58:8d:90:a9:8f:19:7b:2a:52:c2:d3:05:e8:47:08:
                    af:11:c1:64:06:f9:f4:17:02:40:54:7a:30:3d:74:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B5:B9:65:B0:8B:2D:4C:0A:4F:DE:00:3A:E6:CD:36:EA:1D:95:AA
            X509v3 Authority Key Identifier:
                keyid:8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:10:2c:01:71:ad:5e:c2:a4:59:e5:be:fd:d6:08:1c:34:2b:
         00:2d:5a:4b:0c:ed:dc:05:21:b6:90:3e:83:24:91:97:db:9d:
         75:64:ec:cc:af:33:11:95:ec:04:a2:40:74:4b:05:21:c8:49:
         7f:7e:2f:2c:0f:dc:1a:e6:1b:0e:35:f3:1b:3b:4e:20:e2:2d:
         4e:90:04:66:97:4e:fc:90:a6:b2:df:c8:6d:85:7f:95:ee:9f:
         dd:33:3a:74:08:16:c4:6c:48:97:e5:87:38:3f:63:ca:f0:4f:
         fb:75:32:9f:cd:e0:9f:94:d7:20:92:23:7a:c6:58:7b:d3:9b:
         32:2a:d2:72:03:f7:30:bc:07:69:e0:db:ef:97:38:44:13:ab:
         5c:47:f3:b7:fb:74:e9:25:da:c3:c9:63:9b:59:0a:e2:19:f0:
         14:8f:3b:cd:13:a1:01:3e:01:94:f9:72:d4:ad:d9:5a:a7:50:
         ce:0b:29:ff:d3:88:e0:94:86:5d:b1:34:ca:be:6f:af:b9:73:
         82:89:8f:d3:8e:ad:2c:ef:d6:1b:f8:c4:08:f7:50:e7:be:61:
         e7:cf:f8:86:f1:38:ce:8e:1d:60:64:da:10:68:29:a5:97:e8:
         a7:fd:30:fd:2f:80:a0:f7:fa:7a:22:01:da:2c:93:46:cb:78:
         5b:61:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:10 2024 by rpki-client on console-ams.rpki-client.org