Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/34352e3137332e38382e302f32322d3234203d3e20323638383139.roa
File:                     34352e3137332e38382e302f32322d3234203d3e20323638383139.roa (raw, json)
Hash identifier:          P1QT2M4JGCQd+mZfCfoB/ZV+T6Lk+Aqy0QCfey2Z23w=
Subject key identifier:   62:23:0D:C6:C9:CE:0E:09:88:A8:E1:FA:C5:52:0B:E6:34:59:2B:F0
Certificate issuer:       /CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
Certificate serial:       597D379FC434E188168CE68B0964DFA24D19DF
Authority key identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/34352e3137332e38382e302f32322d3234203d3e20323638383139.roa
Signing time:             Thu 04 Apr 2024 09:25:19 +0000
ROA not before:           Thu 04 Apr 2024 09:20:19 +0000
ROA not after:            Thu 03 Apr 2025 09:25:19 +0000
asID:                     268819
IP address blocks:        45.173.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl
                          rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7d:37:9f:c4:34:e1:88:16:8c:e6:8b:09:64:df:a2:4d:19:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
        Validity
            Not Before: Apr  4 09:20:19 2024 GMT
            Not After : Apr  3 09:25:19 2025 GMT
        Subject: CN=62230DC6C9CE0E0988A8E1FAC5520BE634592BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ff:63:81:01:52:f7:bc:7f:0b:7c:aa:86:65:
                    ce:ef:99:12:2e:9f:3c:63:24:a1:96:2b:9b:ca:d3:
                    3a:e8:1d:18:fd:9c:c7:43:24:cf:b7:37:ee:21:86:
                    34:f2:a0:05:31:8d:b8:14:7b:59:a6:3f:37:7f:a6:
                    cf:b6:ff:e6:54:16:6c:fb:af:ca:fe:19:b8:d9:5b:
                    19:96:fc:c5:94:ec:fa:03:e1:de:98:fb:00:3f:cf:
                    51:7a:5d:3f:61:ce:fe:07:a3:3d:1c:b0:eb:d3:0f:
                    97:fa:a6:2a:73:71:f5:0d:c4:ed:7c:00:5e:4c:14:
                    2f:ee:8a:ef:6a:e7:36:80:9c:5d:87:af:ed:21:bf:
                    2d:d8:a6:c5:69:a0:d5:c1:84:20:f3:a6:3f:f4:5e:
                    4e:cd:f7:83:f2:14:67:bb:2c:3d:8b:5d:3f:f1:15:
                    dc:f0:6b:d0:7b:22:db:87:02:99:9c:9d:81:6f:a8:
                    60:55:3c:f3:47:74:60:73:b3:04:25:e8:5d:d4:cc:
                    3a:1a:81:67:d9:0e:f8:f8:6f:01:c7:d7:9d:50:8d:
                    33:26:55:7e:37:20:ff:82:55:32:e3:0c:7f:c9:a0:
                    db:b7:e4:b4:9f:77:9d:69:b6:a6:88:00:3c:b4:3b:
                    31:e0:22:28:e2:49:cb:d5:b3:66:94:c9:19:29:51:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:23:0D:C6:C9:CE:0E:09:88:A8:E1:FA:C5:52:0B:E6:34:59:2B:F0
            X509v3 Authority Key Identifier:
                keyid:BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/34352e3137332e38382e302f32322d3234203d3e20323638383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:26:23:2d:c5:4a:d7:c5:7d:d1:85:48:48:c3:f0:49:25:
         70:e5:7f:84:6b:a4:85:bc:ca:e7:ed:dc:06:6a:2d:6b:d0:93:
         4a:a1:7b:e5:c8:40:a8:5e:2e:c1:63:df:0b:f0:5e:21:35:70:
         1b:ce:84:ef:22:e3:f0:bd:37:ec:da:a2:89:db:d4:df:99:60:
         dc:4c:e3:b9:92:1a:bf:33:a1:d8:ca:54:e4:4e:05:a1:90:85:
         a6:e0:e3:fa:3f:70:96:91:d2:12:95:b5:67:48:a7:d2:14:1f:
         01:84:83:6c:8d:3d:da:f4:39:5b:87:9f:5a:0d:4f:c3:ad:37:
         08:70:94:67:7f:ad:98:c8:3c:60:6d:5c:ed:c1:b8:eb:c6:12:
         b8:a1:ba:78:d0:70:b9:2b:35:3c:a0:5d:4a:27:c6:f8:1c:b6:
         83:6a:15:ce:a2:67:57:07:3e:4b:3d:18:a9:ba:3a:ae:d2:15:
         ee:c3:de:6c:08:0b:09:a7:b8:20:6c:d6:a8:05:94:91:20:ab:
         4c:e6:44:fa:d1:8a:8c:9e:b8:49:bf:25:79:a5:90:f4:78:77:
         e0:f0:65:fa:48:de:ab:17:30:80:bf:ff:a7:29:53:fc:52:8b:
         6d:2c:f0:b4:d6:8f:29:73:bd:69:c1:d2:e2:c0:6b:28:c7:76:
         fd:a3:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:31 2024 by rpki-client on console-fra.rpki-client.org