Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3332203d3e20323638323332.roa
File:                     34352e3233362e35362e302f32322d3332203d3e20323638323332.roa (raw, json)
Hash identifier:          V5XXSX/KwSyBmNO6mCWDMAGaDqyEPab+pUPBbm+V4Jw=
Subject key identifier:   A3:36:CD:85:6C:6E:A3:E7:E9:20:3D:7A:72:04:6A:6D:0B:53:5D:3D
Certificate issuer:       /CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
Certificate serial:       73E3D4C325A96B61B3051EEAB2F264C9DFC02D49
Authority key identifier: 0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3332203d3e20323638323332.roa
Signing time:             Thu 01 Aug 2024 20:03:29 +0000
ROA not before:           Thu 01 Aug 2024 19:58:29 +0000
ROA not after:            Thu 31 Jul 2025 20:03:29 +0000
asID:                     268232
IP address blocks:        45.236.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl
                          rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:d4:c3:25:a9:6b:61:b3:05:1e:ea:b2:f2:64:c9:df:c0:2d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
        Validity
            Not Before: Aug  1 19:58:29 2024 GMT
            Not After : Jul 31 20:03:29 2025 GMT
        Subject: CN=A336CD856C6EA3E7E9203D7A72046A6D0B535D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:81:e5:8d:b9:6c:96:ba:3e:ba:84:0e:f2:
                    56:38:82:e7:c4:57:1c:42:ea:e0:25:36:43:b0:58:
                    be:66:bf:51:45:63:ad:6c:8b:1b:86:1c:ff:9c:b3:
                    ce:13:c3:77:aa:df:bd:81:49:7d:b2:58:86:a9:c9:
                    90:f3:f0:89:95:ba:61:d8:2a:a8:ee:84:45:5c:d7:
                    50:22:29:39:06:29:54:3b:94:f7:4e:6b:27:ac:26:
                    19:78:4c:54:ef:ae:c5:99:f9:12:cd:e8:9d:08:b2:
                    c0:6b:05:ea:c0:9a:1d:52:9c:01:7d:2a:0d:92:42:
                    3e:2c:0a:9f:f3:fd:f7:2f:76:90:1d:78:97:a3:28:
                    a4:f2:8f:c5:be:8a:9b:64:f4:dd:e2:ec:a6:40:5f:
                    ee:69:61:77:13:75:7d:22:9e:43:68:77:df:20:05:
                    59:29:fe:6f:42:ce:98:ce:ba:7f:b7:c0:d7:fb:68:
                    21:6b:d6:aa:cc:a8:2f:0c:f1:91:2f:9b:03:78:51:
                    c6:7d:f3:9f:fd:1e:6a:ad:4a:15:c2:94:63:53:d2:
                    6c:61:12:e2:b1:dc:71:79:04:d9:7e:48:ae:a1:2a:
                    67:c2:12:9d:53:e0:10:ca:89:6a:1c:ab:23:ef:da:
                    58:38:b8:2d:60:36:44:40:78:20:90:e7:3b:47:7c:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:36:CD:85:6C:6E:A3:E7:E9:20:3D:7A:72:04:6A:6D:0B:53:5D:3D
            X509v3 Authority Key Identifier:
                keyid:0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3332203d3e20323638323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:7d:00:d4:79:9d:a5:b4:f5:c5:03:f8:86:95:87:f2:07:1e:
         60:2c:cc:38:88:dd:5c:1f:5b:a9:b2:b1:c2:a4:4a:0a:a4:d1:
         a9:a0:a7:bb:ef:8a:bd:19:e1:ce:99:f3:a1:04:5f:fb:c8:d7:
         2f:72:10:98:2a:88:52:1a:b5:3c:63:6c:d5:09:64:79:78:8b:
         fe:8d:68:9c:dc:63:f3:43:12:74:41:7f:fd:4c:63:d5:9a:2b:
         f7:f0:5b:9e:9a:dc:3b:ba:77:38:8a:92:76:28:0c:b5:82:d4:
         a4:45:95:ab:93:d9:0c:62:44:63:3c:d9:02:51:61:21:18:a0:
         b0:4b:d6:cc:5c:8d:4e:3b:1d:ee:60:70:41:a4:38:e1:a3:22:
         88:d9:7f:1f:41:59:5c:cf:8a:fc:55:ed:3d:c1:8e:58:fc:49:
         8d:bb:55:ce:fb:e3:51:02:e9:fa:40:64:44:0e:2a:bf:e0:16:
         a5:70:d9:bb:03:64:7f:d9:94:4f:3d:67:54:8c:1a:f9:20:52:
         2a:7f:3a:16:04:d7:c1:1b:73:2a:87:cc:09:2a:80:f8:d9:c9:
         a7:e5:a6:8e:3a:ce:db:a2:39:75:26:71:5a:44:9e:35:f3:7f:
         05:d4:ad:62:7b:c1:c5:6e:22:27:fe:7b:e5:0d:e1:6c:8e:c4:
         ab:6a:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org