Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/34352e3233312e32382e302f32322d3332203d3e20323637313838.roa
File:                     34352e3233312e32382e302f32322d3332203d3e20323637313838.roa (raw, json)
Hash identifier:          /qESdZxzCrV9f94e7OAZkOB/4CnBQ8QhISCqH41USow=
Subject key identifier:   15:85:F9:2C:05:5B:AF:89:34:E2:6B:DF:09:5F:D2:25:31:7A:65:44
Certificate issuer:       /CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9
Certificate serial:       2B44D0E9FE12D2FD5723601C1D09E4D5793A0083
Authority key identifier: AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/34352e3233312e32382e302f32322d3332203d3e20323637313838.roa
Signing time:             Mon 29 Jul 2024 15:47:52 +0000
ROA not before:           Mon 29 Jul 2024 15:42:52 +0000
ROA not after:            Mon 28 Jul 2025 15:47:52 +0000
asID:                     267188
IP address blocks:        45.231.28.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.crl
                          rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:44:d0:e9:fe:12:d2:fd:57:23:60:1c:1d:09:e4:d5:79:3a:00:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9
        Validity
            Not Before: Jul 29 15:42:52 2024 GMT
            Not After : Jul 28 15:47:52 2025 GMT
        Subject: CN=1585F92C055BAF8934E26BDF095FD225317A6544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:90:23:6c:f6:90:2f:09:5d:d3:11:ea:cf:
                    c7:14:64:2b:6a:ea:4b:5d:1e:1f:a4:9d:84:b4:77:
                    32:b5:e4:62:17:d1:1d:f1:40:52:84:f8:75:6a:6a:
                    ab:1d:c7:5e:a7:84:83:b3:09:47:e7:5a:7b:f2:2d:
                    c6:0b:b6:45:2d:46:b6:f2:e3:75:64:c2:3f:3a:68:
                    fc:28:66:ad:d9:43:0c:58:cf:40:ff:8c:f0:a0:a8:
                    8e:13:a0:00:54:1a:73:cc:fc:c2:e0:3d:c3:51:1d:
                    c9:02:47:0c:77:64:d6:bd:65:32:c9:ff:88:0b:b5:
                    38:71:41:e8:41:78:ef:01:5b:21:bc:db:90:16:0b:
                    bb:12:36:6f:0d:6f:66:ef:84:da:53:2b:ad:21:49:
                    87:56:5e:01:59:7c:3a:a9:dd:01:30:5f:1f:e6:ed:
                    f2:6c:d3:1d:86:26:7f:89:5a:4d:b2:70:a1:21:4c:
                    41:2c:ce:1c:01:64:a7:7c:f4:14:cc:95:d6:01:fc:
                    42:73:a1:9a:b6:60:a7:f6:72:ea:9d:f7:60:b7:ec:
                    b5:04:01:8f:d8:82:87:9d:61:1e:ba:31:a0:58:f0:
                    3a:84:44:18:44:30:fc:db:ee:bf:a5:4a:cf:79:99:
                    2d:9d:5f:56:74:fb:11:a8:da:68:1b:0f:ae:24:b0:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:F9:2C:05:5B:AF:89:34:E2:6B:DF:09:5F:D2:25:31:7A:65:44
            X509v3 Authority Key Identifier:
                keyid:AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/34352e3233312e32382e302f32322d3332203d3e20323637313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:08:50:96:74:af:48:56:55:13:b5:83:cf:77:79:6e:92:e3:
         64:b4:9e:af:e6:91:f7:e9:91:c6:28:a3:27:ea:d4:23:53:5c:
         68:40:cd:28:13:3b:56:a7:1c:9d:8a:59:5e:1f:47:4a:3c:e4:
         79:04:55:be:8e:fe:ec:b7:15:dc:26:c5:c9:27:c2:cc:76:05:
         4c:12:0c:85:5d:16:04:2d:19:cb:08:d8:56:12:8c:49:dc:5a:
         28:5e:09:2c:cf:84:cb:2d:fe:e4:e5:79:3c:3b:05:76:38:bd:
         0d:e4:10:68:79:bd:b6:de:10:6a:e4:ee:d1:e7:bc:ca:ea:39:
         85:20:dc:13:93:97:80:27:5d:76:98:0b:53:fc:bc:ab:33:37:
         b6:aa:e0:fc:b8:ec:ec:a1:33:da:7f:a9:89:81:5d:8f:e9:9b:
         e3:e0:04:ff:8a:db:19:95:b6:5c:1c:89:d6:d5:2e:fd:22:f9:
         d0:c8:ca:5d:a2:7a:58:92:82:bd:cd:bf:91:d4:5a:95:a5:a1:
         47:83:17:0e:26:18:9b:70:27:20:e4:af:33:af:d1:98:f6:bd:
         89:02:93:58:d4:cc:2a:e8:5e:18:70:d2:23:c8:4d:f6:10:f4:
         f3:76:04:15:5e:a5:c4:3b:85:31:d0:50:34:fb:42:4b:77:be:
         a9:e3:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:36 2024 by rpki-client on console-ams.rpki-client.org