Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa
File:                     34352e3137342e31302e302f32332d3233203d3e20323638393338.roa (raw, json)
Hash identifier:          y5iBWLfpo2dBXUVvzMxsfAl2secHNUGiB5S2I3bOKd8=
Subject key identifier:   83:6C:D8:FC:99:C2:B6:E2:DB:BD:77:B3:A7:F0:63:B9:5F:B7:B8:81
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       452C44AA085E160C40C58C0D36E56AA3C0765C8C
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa
Signing time:             Thu 04 Apr 2024 01:17:48 +0000
ROA not before:           Thu 04 Apr 2024 01:12:48 +0000
ROA not after:            Thu 03 Apr 2025 01:17:48 +0000
asID:                     268938
IP address blocks:        45.174.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl
                          rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2c:44:aa:08:5e:16:0c:40:c5:8c:0d:36:e5:6a:a3:c0:76:5c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Apr  4 01:12:48 2024 GMT
            Not After : Apr  3 01:17:48 2025 GMT
        Subject: CN=836CD8FC99C2B6E2DBBD77B3A7F063B95FB7B881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:56:c5:95:39:65:62:98:de:bf:0b:3d:3c:
                    03:95:a6:e8:72:04:ec:6c:79:70:6c:51:50:e8:28:
                    e0:4a:3a:ea:95:4a:d3:fe:e6:0f:ee:9f:35:44:02:
                    75:70:2f:53:42:73:f2:d0:c0:ca:e4:29:bf:0d:44:
                    4b:21:ad:ef:26:df:df:4a:70:f8:26:d1:65:57:b4:
                    42:5c:ce:b0:35:9b:c6:95:21:35:da:a8:5e:95:f1:
                    c0:ee:1f:c0:d4:e6:42:e6:0f:07:c3:a4:d1:8a:78:
                    7f:58:89:be:e8:bb:18:46:f6:1e:c4:7a:94:ee:68:
                    02:c0:3b:2b:29:52:e9:2a:91:8c:90:d5:db:54:b3:
                    9f:d8:0f:a2:79:e5:1a:a7:bf:2a:2a:1a:21:b8:09:
                    82:bf:e7:d9:d9:79:91:1d:08:5e:0a:2e:88:d5:fd:
                    d3:01:18:39:dd:25:79:0d:54:dd:ca:fb:c2:2d:44:
                    64:7b:94:d2:d8:a6:7f:6e:c5:c3:f5:77:9e:94:62:
                    fe:49:02:e8:9e:56:e2:a4:e0:eb:76:8a:e2:85:e2:
                    23:c0:1b:49:5f:8b:fb:74:a9:83:02:70:bd:22:f3:
                    78:be:84:9b:2d:ea:51:45:e5:b6:f4:8c:68:a3:7e:
                    22:e5:82:2b:c0:7f:ec:5c:4f:3e:d1:f4:97:e6:89:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6C:D8:FC:99:C2:B6:E2:DB:BD:77:B3:A7:F0:63:B9:5F:B7:B8:81
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:d2:22:3e:d8:05:65:f3:30:c7:0d:5c:6b:69:ac:6d:e1:26:
         e1:98:f7:ee:fd:ba:21:be:4a:97:5f:79:b8:45:f6:f5:08:3f:
         8e:45:21:47:ec:1e:3a:64:8e:79:43:30:ec:71:5e:ea:14:1f:
         08:4b:16:6f:00:4b:df:6f:2b:48:46:12:8f:17:2f:8d:aa:d4:
         a5:f7:1a:5f:e3:05:83:3d:6c:8c:a6:e6:88:81:0f:10:b3:72:
         14:70:f1:14:11:d9:a4:40:99:42:7b:af:8a:e5:77:f4:7d:b3:
         1d:b7:2f:a9:8c:a9:76:05:14:2f:ad:17:1c:74:d6:4a:9a:b1:
         57:33:c7:38:7b:ec:ee:ed:ae:91:14:f7:9c:be:53:9a:0c:36:
         57:a4:12:d0:6b:f4:04:46:9f:7a:d9:43:5a:d2:9f:8f:ee:fa:
         f7:4f:0b:dd:3b:7a:5a:2f:98:f0:84:91:24:20:b7:9b:f0:e4:
         7f:43:7b:3e:17:07:ff:b5:ef:6c:78:ac:ee:fe:7e:e2:6f:e5:
         45:23:4f:dc:77:51:31:a4:ee:7d:3c:4d:14:24:55:61:b8:81:
         2b:d7:91:5c:76:94:71:7b:98:7f:b7:12:b3:0d:65:6d:35:19:
         24:f3:b3:98:09:6d:89:1d:1f:7c:64:bb:bf:71:b8:f4:dc:9a:
         8b:90:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:50 2024 by rpki-client on console-ams.rpki-client.org