Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa
File:                     AS268333.roa (raw, json)
Hash identifier:          ryzvdkHLMrqxJgGSmvvg+Q0/dPDUTtI1BWADz4yuHhk=
Subject key identifier:   77:30:30:F0:AC:0C:97:17:C9:AA:4B:DE:AD:40:63:6D:37:0C:82:82
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       3A4AF7EFFA5EE9444F11D392A84E3655BB66474F
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa
Signing time:             Fri 16 Aug 2024 00:33:42 +0000
ROA not before:           Fri 16 Aug 2024 00:28:42 +0000
ROA not after:            Fri 15 Aug 2025 00:33:42 +0000
asID:                     268333
IP address blocks:        45.237.252.0/22 maxlen: 24
                          2804:4f8c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4a:f7:ef:fa:5e:e9:44:4f:11:d3:92:a8:4e:36:55:bb:66:47:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Aug 16 00:28:42 2024 GMT
            Not After : Aug 15 00:33:42 2025 GMT
        Subject: CN=773030F0AC0C9717C9AA4BDEAD40636D370C8282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:29:5e:31:6a:8f:39:24:d3:10:6d:e9:a9:58:
                    df:fd:f9:64:0e:4a:8a:28:97:87:35:82:a3:10:3b:
                    d9:14:65:71:05:4e:fd:08:8a:93:36:3a:e5:61:04:
                    6b:23:34:d2:bd:c5:43:52:99:67:6c:e5:bb:51:4d:
                    ae:8f:fb:35:ae:a1:65:c5:8f:c2:7f:1e:bd:99:fa:
                    e0:12:8e:69:e6:2e:35:a0:16:64:33:14:ff:9d:38:
                    cc:d7:38:dd:4e:c5:ef:dc:31:d6:00:f9:32:30:5b:
                    70:aa:ff:58:30:aa:1c:1c:88:37:ac:e9:27:20:aa:
                    97:93:91:fd:d8:f5:ac:33:04:2e:8e:21:e1:09:73:
                    ab:d6:5c:9b:b3:77:f5:84:12:05:44:44:73:fc:df:
                    34:a1:d6:0a:4b:46:4b:6b:53:5c:93:10:dc:2d:c4:
                    05:76:04:33:5f:90:77:94:7d:0c:40:ec:97:34:df:
                    52:02:4d:35:15:45:0c:57:ee:e3:b8:8e:7f:78:a3:
                    b8:41:f1:e4:25:51:21:99:e2:71:8d:eb:47:76:19:
                    5a:3e:56:40:11:3f:00:55:31:07:f2:05:57:d8:99:
                    48:e6:53:46:be:de:5a:69:1f:b1:47:b3:a3:37:0f:
                    60:56:4d:ce:95:15:86:b5:83:69:fe:a6:6e:8a:d9:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:30:F0:AC:0C:97:17:C9:AA:4B:DE:AD:40:63:6D:37:0C:82:82
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.252.0/22
                IPv6:
                  2804:4f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:bc:eb:91:99:32:7d:b6:e8:64:f9:36:68:2c:5c:d7:db:16:
         b9:7a:1c:c4:d2:88:52:49:98:28:89:6e:f3:3c:40:f7:aa:0e:
         9f:de:73:98:4f:98:5d:fa:b8:ba:47:a4:5b:3d:5d:25:62:8d:
         6f:46:8b:6c:8b:ef:1f:2f:ed:1c:f5:ae:5c:27:ed:e7:ef:07:
         8d:7e:43:34:51:42:05:b2:71:60:6b:b5:a4:1c:56:e1:f7:f4:
         bd:6e:55:01:3e:79:58:7f:fa:5d:d2:67:3c:0e:aa:a6:5b:2c:
         b0:e0:a2:18:de:a9:e7:0f:2d:4b:fb:c9:80:ad:e1:5e:46:13:
         23:77:b3:a4:30:ba:c0:73:ba:aa:9a:25:96:31:1f:d4:03:64:
         ac:27:ab:81:22:61:d0:a5:2e:12:69:d5:56:56:03:a9:15:24:
         47:33:36:c7:07:fe:3c:18:db:0e:18:66:19:74:71:15:7a:3e:
         7d:e5:94:ef:84:7f:5e:ee:89:ff:9f:c8:65:ef:a0:1e:71:e4:
         2b:62:a3:77:46:86:77:86:55:8e:f5:e9:43:ad:d0:c5:0e:52:
         63:bb:43:e3:07:6c:a7:fc:a7:48:7d:01:9c:6d:b8:9c:2b:1e:
         e5:34:49:ba:3d:d7:43:cc:39:c4:29:7d:af:92:85:da:9a:82:
         c8:c4:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org