Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e362e302f32342d3234203d3e20323638333038.roa
File:                     34352e3233382e362e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          Js2upsCzZy+DwL8RoLczPQpuzTz/BaqbTMOvFOkP+50=
Subject key identifier:   47:B0:C1:83:D6:5D:13:41:01:A3:52:AD:FC:DC:E3:CB:30:9C:2B:89
Certificate issuer:       /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial:       26CF54EBBFA69E2F15808D2104DB7CAB62583192
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e362e302f32342d3234203d3e20323638333038.roa
Signing time:             Thu 04 Apr 2024 19:57:47 +0000
ROA not before:           Thu 04 Apr 2024 19:52:47 +0000
ROA not after:            Thu 03 Apr 2025 19:57:47 +0000
asID:                     268308
IP address blocks:        45.238.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cf:54:eb:bf:a6:9e:2f:15:80:8d:21:04:db:7c:ab:62:58:31:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
        Validity
            Not Before: Apr  4 19:52:47 2024 GMT
            Not After : Apr  3 19:57:47 2025 GMT
        Subject: CN=47B0C183D65D134101A352ADFCDCE3CB309C2B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:22:54:72:d7:98:08:d0:59:51:17:c4:d9:
                    64:b3:fc:c0:c3:08:20:bb:76:c4:f6:cd:1f:ab:1c:
                    a2:9b:62:92:88:8f:f0:bf:6c:82:33:b7:e0:b4:90:
                    3b:6c:a0:3b:44:60:d1:c8:ed:40:2c:fd:77:4f:25:
                    ac:77:fb:19:fb:62:57:5f:ac:c6:01:a8:8e:0c:d0:
                    75:5e:89:9d:c4:40:9a:5a:c0:57:d6:1a:06:76:57:
                    91:f4:68:5b:09:31:40:e1:a1:9d:50:cd:f2:8e:41:
                    d5:c7:28:36:aa:a9:c1:87:fb:54:ae:55:86:e5:ea:
                    02:7d:9e:96:f7:31:ba:c5:bd:a9:ed:da:73:f4:49:
                    a4:6f:a6:45:cc:fc:14:f3:59:ce:61:ce:c1:7b:b6:
                    b8:5d:62:15:0d:d5:a7:5d:87:0f:bd:8f:46:84:c8:
                    9f:99:5f:95:fe:9c:c7:db:45:94:a8:f8:fe:1b:72:
                    d5:21:f2:54:03:f5:9f:15:82:15:3e:1b:46:5c:ac:
                    41:7f:52:dc:74:df:f3:65:0a:c8:16:b8:a6:77:6c:
                    8c:d4:72:16:f2:11:6f:39:eb:e7:a3:78:77:4e:91:
                    12:10:2b:49:14:ef:07:93:d7:54:dd:df:bd:32:f3:
                    7a:58:9c:67:bb:17:84:ea:3b:52:10:4a:5c:4f:f9:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:C1:83:D6:5D:13:41:01:A3:52:AD:FC:DC:E3:CB:30:9C:2B:89
            X509v3 Authority Key Identifier:
                keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e362e302f32342d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:40:bc:5f:0d:fa:96:c8:9f:09:04:33:bf:6e:22:43:8d:24:
         49:75:db:2e:bc:fe:ad:79:b5:18:5f:7c:2b:9b:0e:1c:41:ee:
         94:8b:d9:73:e5:d4:97:bb:32:7f:9e:a3:87:64:bc:22:14:11:
         cf:34:e9:ed:a4:9e:a1:8b:44:ee:46:49:ab:60:71:48:1a:04:
         c7:d5:cc:21:1f:3d:1f:1f:2f:5e:2e:cc:1f:16:2d:28:e6:e8:
         0a:ad:2a:58:15:81:85:5b:62:01:a1:69:1e:f4:66:c8:d6:93:
         8e:66:c4:50:86:17:6c:01:a1:4f:82:23:69:58:bf:23:2c:d4:
         70:41:23:ff:95:72:c1:fc:63:eb:7d:50:81:04:89:b2:92:b2:
         53:a2:c8:14:3d:3d:a4:a1:33:f3:35:1c:1f:60:d7:2d:0b:74:
         f0:d1:4c:a8:c7:00:8d:23:0e:cb:52:f9:e0:f8:37:42:ab:18:
         16:73:ad:1c:9e:07:b9:39:f2:9c:cb:4d:e1:ab:ba:2a:91:f3:
         05:bf:c9:37:cd:26:a6:7a:60:21:f6:46:84:8a:23:e6:1e:63:
         36:63:21:0c:3a:62:fc:b3:70:6d:3d:52:a0:b9:32:a4:b7:c9:
         15:7a:a9:6f:12:56:25:cb:8f:4b:79:2e:9c:da:86:07:c0:14:
         23:9d:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org