Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3233203d3e20323637303936.roa
File:                     34352e3232392e32342e302f32322d3233203d3e20323637303936.roa (raw, json)
Hash identifier:          3Y10QiV3ItOPPB1N8tN8KbpXH7D9xYbJ1jpsvJLJ2Vg=
Subject key identifier:   F1:2E:71:B8:86:7D:15:5F:15:1D:97:5F:4F:C0:B3:DE:FD:0C:38:F0
Certificate issuer:       /CN=5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11
Certificate serial:       2912EB534EC15A0E751AEB26307D791BC6ECF6C8
Authority key identifier: 5A:D4:46:F3:BE:E5:4E:EF:84:CB:0C:3F:8F:7F:50:E3:AA:1C:EF:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3233203d3e20323637303936.roa
Signing time:             Thu 16 May 2024 13:44:05 +0000
ROA not before:           Thu 16 May 2024 13:39:05 +0000
ROA not after:            Thu 15 May 2025 13:44:05 +0000
asID:                     267096
IP address blocks:        45.229.24.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.crl
                          rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:12:eb:53:4e:c1:5a:0e:75:1a:eb:26:30:7d:79:1b:c6:ec:f6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11
        Validity
            Not Before: May 16 13:39:05 2024 GMT
            Not After : May 15 13:44:05 2025 GMT
        Subject: CN=F12E71B8867D155F151D975F4FC0B3DEFD0C38F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:1b:5b:f8:90:40:49:0d:65:e6:81:b2:64:
                    85:e1:78:af:bc:b8:89:de:e4:e3:5f:e9:a7:38:25:
                    86:de:a8:1e:12:51:01:6d:17:9e:8a:e7:b9:d7:49:
                    40:75:38:c6:5c:35:04:91:5b:48:83:d7:4b:e4:8b:
                    21:bf:f6:17:58:1e:de:01:07:17:50:92:20:c3:8f:
                    28:df:84:bb:b4:46:8d:d9:37:62:cf:28:f1:9b:7f:
                    fb:be:b6:f3:93:3f:9b:1f:67:04:a6:63:4b:51:b6:
                    06:18:e5:65:12:bc:03:3c:e8:a5:97:46:ea:81:a1:
                    ca:c6:fd:84:71:bf:ad:2d:0f:b6:19:04:95:53:b8:
                    a8:6f:38:f5:b8:1c:6f:95:a2:9f:df:1a:dc:63:9a:
                    4d:95:ed:db:bf:6e:30:be:f7:c7:9f:08:02:84:f8:
                    11:93:f4:07:27:8b:05:b7:2d:6b:6b:8b:f7:95:4b:
                    7b:74:8d:18:bc:91:9a:bd:24:bd:47:4a:14:d0:2b:
                    9c:c7:71:52:9d:30:a2:27:0c:9e:a0:4f:a0:41:51:
                    91:c1:04:da:04:07:be:b1:07:16:16:7f:4c:e9:f4:
                    8f:ed:a6:c0:1f:1a:47:3b:72:3f:a2:87:2c:90:76:
                    94:23:26:04:bd:e5:5b:05:00:e3:5f:58:52:30:01:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2E:71:B8:86:7D:15:5F:15:1D:97:5F:4F:C0:B3:DE:FD:0C:38:F0
            X509v3 Authority Key Identifier:
                keyid:5A:D4:46:F3:BE:E5:4E:EF:84:CB:0C:3F:8F:7F:50:E3:AA:1C:EF:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3233203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:6d:d6:91:d8:86:3e:d6:57:d9:0f:63:96:07:a4:e3:9c:
         09:a6:35:7b:79:d9:ec:c3:e9:69:c5:ba:30:5d:cf:18:e7:fd:
         1d:85:43:4c:c5:2c:f3:ec:8f:43:4b:c0:a2:a4:28:40:76:1f:
         bc:b9:81:65:cd:94:23:74:d1:9d:cb:9f:35:08:e0:af:27:0f:
         2f:51:b5:6f:6f:2e:f6:57:f1:be:75:e2:35:f4:40:d1:87:0e:
         fc:86:ec:50:1a:e4:88:d6:d2:7b:ad:30:70:d9:98:f5:1e:ce:
         77:af:b4:cc:7c:c5:a6:97:68:71:f3:bf:87:ff:a9:7d:88:05:
         b5:35:1e:45:56:dc:c4:5a:b4:3b:a4:a3:78:52:78:f8:9e:9d:
         1e:fa:03:99:e2:4a:f6:8a:13:9e:58:9c:d6:03:2b:60:a3:8b:
         8b:02:70:25:ed:d0:c2:7e:d8:56:58:9a:22:df:99:a7:15:94:
         ef:da:a7:ad:e7:f9:2d:07:df:79:6d:3c:9e:1f:d2:14:8d:df:
         eb:dc:48:23:77:76:ab:ec:85:46:4e:38:e1:b0:a7:c6:ce:f1:
         63:49:d7:d8:be:d9:0e:b8:83:ac:c4:87:54:88:13:2e:20:65:
         ad:70:36:aa:f9:bc:d2:7f:29:c0:e9:2d:68:75:ea:a7:45:79:
         54:82:85:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:56 2024 by rpki-client on console-fra.rpki-client.org