Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa
File:                     34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa (raw, json)
Hash identifier:          lvi+34uRVInpcaCM5BBH7LXkRrjaRiuUumS1VyDhWII=
Subject key identifier:   BF:C1:62:39:DB:0F:4D:8C:21:9A:00:AB:73:70:68:CF:FC:FA:94:1C
Certificate issuer:       /CN=0DE4CEA7C916B2344C1F738B34E291BFC48C22C5
Certificate serial:       1EC471D19A06D49061E3D6610424A34CFACE83A9
Authority key identifier: 0D:E4:CE:A7:C9:16:B2:34:4C:1F:73:8B:34:E2:91:BF:C4:8C:22:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa
Signing time:             Thu 04 Apr 2024 09:07:27 +0000
ROA not before:           Thu 04 Apr 2024 09:02:27 +0000
ROA not after:            Thu 03 Apr 2025 09:07:27 +0000
asID:                     267278
IP address blocks:        45.232.224.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.crl
                          rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c4:71:d1:9a:06:d4:90:61:e3:d6:61:04:24:a3:4c:fa:ce:83:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DE4CEA7C916B2344C1F738B34E291BFC48C22C5
        Validity
            Not Before: Apr  4 09:02:27 2024 GMT
            Not After : Apr  3 09:07:27 2025 GMT
        Subject: CN=BFC16239DB0F4D8C219A00AB737068CFFCFA941C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:5c:a2:21:be:75:d1:f7:df:e0:8d:ba:1d:
                    64:85:53:08:e4:1a:9a:8e:99:83:d4:ec:b4:29:0f:
                    41:35:51:68:01:0f:d1:4f:6a:95:ac:67:4f:2b:84:
                    69:ce:87:68:c3:fe:90:2a:fd:40:42:77:b8:39:62:
                    46:61:03:20:a7:df:72:82:de:fe:e5:22:a1:96:7d:
                    db:f0:30:5d:51:d6:e9:5f:12:72:d1:f9:72:9a:1b:
                    cc:c4:b9:74:0a:da:b8:cc:57:fc:31:f0:18:d9:4a:
                    cb:af:f5:4c:29:17:e5:f4:68:17:27:35:da:c1:49:
                    ae:ac:b2:eb:e4:5c:d0:7e:fd:d8:c1:85:9e:23:63:
                    01:28:a2:b0:37:7c:89:84:3f:29:c3:70:92:eb:d5:
                    3f:09:dc:a2:64:40:2d:0b:a4:0d:71:07:e7:9d:84:
                    48:46:9e:3b:ce:58:94:84:7a:92:27:d1:4f:af:13:
                    83:d1:38:2b:77:18:29:c4:c8:47:bf:78:bd:63:eb:
                    37:25:11:48:71:64:bc:39:57:c5:f6:ce:48:73:39:
                    70:f0:1e:7f:65:8a:21:1a:6f:25:7b:3d:7c:03:4b:
                    8c:46:25:22:57:fe:37:c6:5a:02:ec:3b:d0:3f:70:
                    bf:ce:93:1d:c7:2f:d6:43:73:a0:11:5d:d5:a6:b1:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C1:62:39:DB:0F:4D:8C:21:9A:00:AB:73:70:68:CF:FC:FA:94:1C
            X509v3 Authority Key Identifier:
                keyid:0D:E4:CE:A7:C9:16:B2:34:4C:1F:73:8B:34:E2:91:BF:C4:8C:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:c0:c8:15:cd:a3:15:f5:4f:87:6c:5e:84:68:c3:c1:ad:
         0c:e4:60:0d:fa:2b:b0:42:49:a4:12:0d:89:f0:db:e7:46:71:
         e4:6c:c8:29:12:57:bd:03:5d:54:ce:b1:6b:e6:bd:6b:96:e3:
         9a:9e:25:99:f7:e8:1b:be:be:4c:3d:fc:11:2c:c1:f8:19:3e:
         62:bd:fa:7e:07:a3:43:88:01:c9:80:25:fc:ed:dd:03:ad:76:
         bd:7b:7f:3f:bd:a0:6c:ff:c2:02:f5:ca:05:b7:0d:60:e5:d7:
         c2:44:20:d2:ab:f9:81:6f:73:1b:3b:81:6e:84:5f:c5:01:d6:
         d9:d6:ba:08:27:44:ce:7a:39:3d:6e:5a:38:6e:28:16:4e:57:
         ef:62:d7:e6:07:36:71:65:76:b7:1a:b0:0c:0d:57:cb:87:41:
         5f:ff:60:8c:a7:89:b2:ac:f7:7c:bf:f5:15:60:57:ec:6e:0b:
         cd:7d:ee:79:93:57:fb:09:89:81:dc:71:5a:02:88:47:96:19:
         ad:21:5f:12:d7:ee:00:85:4d:b8:aa:08:c5:68:36:36:71:3b:
         06:bc:47:cc:46:c6:30:7f:d9:d1:82:0d:f7:db:65:2c:b8:f1:
         41:90:15:75:e4:6f:91:0f:7c:b8:d9:c8:2d:e2:d1:f7:e8:39:
         04:c7:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:48 2024 by rpki-client on console-fra.rpki-client.org