Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa
File:                     34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa (raw, json)
Hash identifier:          ejkfbHv7Ws/oYjiqcDSauXRsklUkUMPWc6s832bg5cg=
Subject key identifier:   5A:E1:A0:98:07:A7:AC:B9:B2:01:E6:39:40:B3:87:C7:79:3A:07:70
Certificate issuer:       /CN=8013DE498C2B907A3EF2E48332493039E7A2F953
Certificate serial:       6620BC3BCF0FD0F812143DAD0A3A16EE62480A5F
Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa
Signing time:             Wed 03 Apr 2024 23:42:34 +0000
ROA not before:           Wed 03 Apr 2024 23:37:34 +0000
ROA not after:            Wed 02 Apr 2025 23:42:34 +0000
asID:                     267670
IP address blocks:        45.224.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl
                          rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:20:bc:3b:cf:0f:d0:f8:12:14:3d:ad:0a:3a:16:ee:62:48:0a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953
        Validity
            Not Before: Apr  3 23:37:34 2024 GMT
            Not After : Apr  2 23:42:34 2025 GMT
        Subject: CN=5AE1A09807A7ACB9B201E63940B387C7793A0770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:93:97:26:38:25:4a:26:ce:a0:b0:9b:c1:
                    0d:2f:ee:7a:da:16:47:8d:e7:5a:d6:ce:ab:e9:2f:
                    b8:19:4d:ed:96:91:e5:32:54:b5:82:22:cf:c6:97:
                    a3:4a:80:e4:1c:43:80:27:7d:1b:59:6d:41:55:2a:
                    af:0e:44:63:63:5f:d2:25:9a:ed:9e:7e:79:fb:db:
                    2d:4b:48:6a:a3:1b:64:34:28:79:fe:21:5e:73:80:
                    d0:86:5a:6c:f0:dc:25:9b:a9:82:06:81:7b:da:bd:
                    ef:a9:f2:4a:12:d0:6b:86:fa:60:90:c3:0b:63:3f:
                    99:af:c6:12:88:84:58:a5:6e:0f:6b:d3:8c:5b:c3:
                    27:c0:9f:75:cb:09:50:78:c1:35:b8:bd:fa:c5:71:
                    9d:47:e2:4d:d7:8c:50:fc:31:8c:66:1e:0a:81:22:
                    40:d4:9e:26:27:a7:19:73:86:25:07:94:ea:b0:22:
                    5c:21:a6:ce:1d:b5:fa:58:a5:f6:cd:15:88:f7:26:
                    f5:fe:69:e5:40:78:32:cf:f5:68:e2:f3:57:cf:53:
                    ad:ae:a3:aa:e2:25:ce:a4:31:18:1f:e9:d3:a2:3f:
                    d0:be:55:ab:0e:4a:b9:2d:d2:7b:b1:16:ea:c8:f4:
                    10:8b:57:a0:71:cb:61:59:26:da:43:b6:30:4c:a0:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:A0:98:07:A7:AC:B9:B2:01:E6:39:40:B3:87:C7:79:3A:07:70
            X509v3 Authority Key Identifier:
                keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:73:b1:43:22:4e:e3:59:ed:21:29:38:d0:70:0a:b4:dd:
         6c:b2:7a:1d:71:55:55:20:6b:41:4f:9b:b1:e5:89:22:e9:f0:
         27:de:6a:de:8a:71:e6:0f:33:d6:2c:8e:d4:df:3f:6f:29:a0:
         1f:4b:c8:51:64:4d:08:33:4d:c1:25:47:ce:0f:25:2d:0e:dc:
         0f:fe:9d:1d:35:65:2f:9b:1f:2a:71:2a:3b:64:02:40:f1:cb:
         e2:d9:62:11:18:d9:46:3e:59:9b:35:62:d7:ad:e4:a7:c6:14:
         a2:d8:58:e7:99:1d:e0:bc:9e:1d:b0:b7:9f:e0:d6:ae:de:05:
         37:30:7a:4b:73:0e:06:a2:2e:61:ad:be:b7:2a:55:d5:34:a5:
         c6:fb:a5:9e:9c:14:be:7b:97:06:9f:be:9a:26:bc:39:25:af:
         87:a4:56:60:83:36:7a:6f:d6:c6:65:92:d3:a6:a8:a6:55:99:
         bb:d2:93:4d:75:9e:7e:bf:e2:9b:1a:25:eb:04:60:6d:1f:76:
         25:83:80:4d:20:cd:22:9c:ae:04:06:0d:05:1d:4e:d7:0e:6f:
         a2:9f:6a:76:46:ef:e1:85:bc:11:b3:c3:d6:36:2b:a6:c4:5f:
         e8:22:a7:17:7c:64:8e:df:c5:14:01:86:70:e2:15:d4:f3:2e:
         b9:34:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org