Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268523.roa
File:                     AS268523.roa (raw, json)
Hash identifier:          hwXU7HEpVPlEoQoTS7f10WiTEPk7ktvStiCDbrJCw7I=
Subject key identifier:   C0:FA:0A:9B:45:BB:D3:C8:9C:D3:6A:8F:A7:42:3A:C1:04:34:EA:7C
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       08FCA3AB7255A167BDD95EB513F8B6301C074E1F
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268523.roa
Signing time:             Thu 18 Apr 2024 13:49:48 +0000
ROA not before:           Thu 18 Apr 2024 13:44:48 +0000
ROA not after:            Thu 17 Apr 2025 13:49:48 +0000
asID:                     268523
IP address blocks:        45.162.160.0/22 maxlen: 24
                          2804:5284::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fc:a3:ab:72:55:a1:67:bd:d9:5e:b5:13:f8:b6:30:1c:07:4e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Apr 18 13:44:48 2024 GMT
            Not After : Apr 17 13:49:48 2025 GMT
        Subject: CN=C0FA0A9B45BBD3C89CD36A8FA7423AC10434EA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:87:d2:7b:67:e7:4e:c6:64:2e:57:ba:85:
                    38:77:58:59:ae:2d:21:6d:c9:5d:1f:43:5d:6d:f0:
                    21:52:b9:dc:00:2d:f7:03:32:80:24:00:7e:0b:53:
                    a4:f6:76:a6:74:d9:a1:72:64:d0:2d:c4:4a:b4:1b:
                    09:48:df:33:9a:be:a0:59:68:50:a9:77:4a:e2:c6:
                    bc:74:ce:ab:ec:77:ab:54:92:ef:8a:cd:42:c9:e7:
                    c7:7c:62:06:79:b4:88:60:b4:07:af:91:d5:29:3b:
                    9a:d8:04:8c:c4:58:59:6b:75:b8:d9:41:de:47:6d:
                    3d:91:c3:48:3b:2a:0a:eb:3a:93:a7:8a:c3:49:5f:
                    77:3c:6e:6d:72:6a:c1:91:ba:46:a4:de:74:53:d0:
                    9c:b9:37:7a:04:a4:9a:ae:9d:d0:01:8a:27:b9:27:
                    9f:c7:b8:31:96:80:46:c9:13:a6:86:46:0c:11:b8:
                    9d:1f:e0:67:c2:1f:33:cb:4b:7f:7b:52:64:6a:10:
                    39:fc:12:1d:24:62:29:b5:9c:da:16:40:3f:5a:13:
                    06:78:b4:f0:b0:e7:f4:8c:8a:ea:99:2c:47:32:6d:
                    90:12:be:04:54:b0:8e:b5:e4:68:cb:bf:83:4d:7b:
                    8d:2d:f3:19:bc:5f:83:dc:1c:98:4b:ad:51:fb:a1:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:0A:9B:45:BB:D3:C8:9C:D3:6A:8F:A7:42:3A:C1:04:34:EA:7C
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268523.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.160.0/22
                IPv6:
                  2804:5284::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:04:e8:27:1a:e3:e4:2a:d9:b0:e1:2e:86:9b:43:f0:3a:
         92:2c:e2:3c:2e:df:26:e5:70:31:73:66:59:af:f3:4b:c6:03:
         25:b5:f5:fe:fa:6a:18:99:95:26:ae:1b:6a:5f:c2:98:4d:55:
         58:fe:d1:3a:0f:36:7b:49:ce:a7:3a:c6:fd:a9:08:b3:06:01:
         28:49:28:4a:14:da:71:32:11:89:6b:24:4d:f4:37:da:5e:ed:
         d0:cd:43:a5:61:b1:5d:37:37:06:ef:3a:18:f7:f9:66:44:4b:
         ed:99:68:d7:85:3f:af:59:ad:ea:65:93:ae:41:30:d1:2b:34:
         2b:6f:7a:67:3d:b5:53:5c:4a:0c:62:5d:1a:b4:6c:0a:84:a3:
         48:b1:91:de:86:ed:ce:b0:30:45:15:9a:5b:16:15:4d:74:04:
         0b:3f:7f:d7:2b:c2:19:6e:fe:d1:72:0d:16:a6:7e:c8:e6:c4:
         be:8b:17:84:af:82:af:49:d0:24:73:0c:a6:28:06:da:58:e7:
         fd:f0:45:d4:af:f9:66:a8:b9:69:32:37:d0:92:fe:60:ed:03:
         93:12:7f:84:5f:ca:35:23:30:be:21:26:4d:f5:0c:04:5a:ce:
         4d:be:47:f3:85:6b:c8:35:cc:8e:dc:3f:7c:b5:8c:7e:6b:40:
         f6:6c:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:01 2024 by rpki-client on console-fra.rpki-client.org