Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
File:                     34352e3233382e352e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          72iE2nuS8qItYAhcZEFjOVhg+hhjjxvzJEKCxn6Y7Fg=
Subject key identifier:   50:F3:66:07:0C:87:26:63:CF:CE:1C:E9:73:47:C4:CA:31:99:8C:A9
Certificate issuer:       /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial:       724352973940CBC1492488DC761EE114DD6EA752
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
Signing time:             Thu 04 Apr 2024 19:57:48 +0000
ROA not before:           Thu 04 Apr 2024 19:52:48 +0000
ROA not after:            Thu 03 Apr 2025 19:57:48 +0000
asID:                     268308
IP address blocks:        45.238.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:43:52:97:39:40:cb:c1:49:24:88:dc:76:1e:e1:14:dd:6e:a7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
        Validity
            Not Before: Apr  4 19:52:48 2024 GMT
            Not After : Apr  3 19:57:48 2025 GMT
        Subject: CN=50F366070C872663CFCE1CE97347C4CA31998CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:c5:e4:f2:68:63:5b:f0:1e:6a:0e:78:fe:
                    cf:6b:5d:b7:49:a5:56:9d:e1:6a:7e:bf:49:67:51:
                    e9:9e:c4:73:04:b0:06:f6:90:0a:66:ff:3e:83:a9:
                    a1:76:1d:03:9f:a6:27:25:1f:12:11:34:1f:29:60:
                    a4:00:f9:aa:cb:d1:62:5c:9d:25:39:65:89:8f:20:
                    ee:37:08:ba:87:61:4e:a2:db:a6:02:db:5f:fa:08:
                    b1:88:cb:e6:57:c9:a5:d5:f8:81:f9:1e:a1:73:1b:
                    aa:71:c0:f9:65:be:ba:bc:8b:6f:64:35:94:e5:39:
                    b5:20:92:58:6e:9f:93:85:32:36:9c:9e:51:12:f4:
                    85:f1:65:a7:bc:e6:3b:9a:c8:e2:eb:1d:cf:67:91:
                    a0:61:0c:f7:a5:1b:c6:02:80:1e:cf:42:55:ea:08:
                    96:39:4c:0f:e7:5d:d9:e8:bc:a7:4e:8a:08:83:e5:
                    c2:13:f0:61:03:3b:e0:6a:89:16:36:57:43:c3:36:
                    41:48:f1:6e:05:f0:63:3d:6d:61:67:a6:f7:7c:07:
                    6c:f6:4c:ec:e1:37:67:12:3d:e1:2b:ad:f1:08:bb:
                    0c:d2:7b:f4:b7:8b:da:08:f1:22:45:00:22:93:b8:
                    0a:ba:f0:89:6d:35:5c:32:31:66:95:7d:55:65:79:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:66:07:0C:87:26:63:CF:CE:1C:E9:73:47:C4:CA:31:99:8C:A9
            X509v3 Authority Key Identifier:
                keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e352e302f32342d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:14:63:62:c2:86:7a:f4:67:06:37:79:b8:f5:ad:29:bd:fd:
         62:20:f8:df:0b:e9:48:c3:3d:c0:7d:5a:dc:3e:5e:67:f3:c9:
         df:a3:bd:47:24:7d:7f:dd:2b:eb:37:d4:05:f8:54:72:71:1c:
         fa:1b:f7:4d:05:08:a2:47:d4:5e:26:f4:5b:10:4c:c6:23:5b:
         4c:45:47:95:4d:99:38:1a:86:9e:7e:8d:c9:a7:70:99:a6:8c:
         c4:7c:44:01:54:ea:23:ea:fd:bc:b2:9a:07:f3:d6:17:3a:fd:
         31:bc:9a:65:ce:05:96:a2:cc:bd:1e:7e:a2:39:3e:2a:53:36:
         20:fc:48:20:ef:14:b3:9b:b9:ae:dd:e7:de:87:52:6f:0f:5a:
         25:c8:15:7c:0d:4a:12:65:d4:97:d8:d8:cb:d2:33:72:5d:06:
         e2:07:0e:8f:a6:3d:57:7c:e8:a5:69:d4:c5:17:4f:41:24:0d:
         c4:16:94:b1:bd:93:80:31:93:6b:c3:4c:c3:65:52:79:0c:fc:
         1d:44:78:da:69:a0:2b:df:56:fc:16:fb:d9:35:1a:8a:a0:15:
         90:4f:bf:32:ff:42:0c:3a:ea:9e:e6:af:71:94:b5:b6:5e:f1:
         0b:1e:93:90:72:d4:08:e8:26:8b:fc:d1:f0:f1:36:76:5d:76:
         be:70:62:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org