Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa
File:                     34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa (raw, json)
Hash identifier:          p8SHxm/jU9IALgKmNCRgvO8BeBzXpDhRp6IuXzGNEO0=
Subject key identifier:   75:A1:B9:6D:89:E0:32:8C:35:4A:A5:A8:08:1C:D4:DD:17:61:8A:E3
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       05758E02CFE679172A285883AB6494B8FCFE9796
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa
Signing time:             Thu 04 Apr 2024 04:01:09 +0000
ROA not before:           Thu 04 Apr 2024 03:56:09 +0000
ROA not after:            Thu 03 Apr 2025 04:01:09 +0000
asID:                     267329
IP address blocks:        45.232.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:75:8e:02:cf:e6:79:17:2a:28:58:83:ab:64:94:b8:fc:fe:97:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Apr  4 03:56:09 2024 GMT
            Not After : Apr  3 04:01:09 2025 GMT
        Subject: CN=75A1B96D89E0328C354AA5A8081CD4DD17618AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:d9:e4:a1:8b:1c:3e:0b:2f:7c:c4:13:c2:
                    28:26:7a:30:3a:51:13:15:ba:84:32:ad:64:b2:d9:
                    59:44:e8:11:b1:a4:8b:f1:a6:4c:ad:83:54:12:31:
                    1c:35:e1:36:77:33:4d:ae:ce:86:2b:31:36:d2:0a:
                    89:d5:77:5d:92:e5:f3:a6:a3:ec:57:a8:55:a5:6e:
                    dd:7a:60:92:77:e3:d7:b8:5b:08:66:26:a1:86:53:
                    d1:cf:24:f1:93:ac:65:7c:40:00:c1:a6:b3:81:fc:
                    ac:e0:c9:13:16:eb:bd:f3:58:77:71:26:05:cd:ca:
                    a2:d5:8d:cc:e2:bc:7f:51:eb:75:b2:b4:f8:d0:76:
                    06:eb:47:67:39:55:5c:5c:c9:30:fe:67:c3:8f:f9:
                    43:e0:f8:98:c9:cf:91:3e:2e:34:a5:92:98:31:15:
                    8a:bc:7c:41:3c:4e:41:21:4e:0c:c4:8e:47:e6:d6:
                    73:8d:38:4b:60:f6:e6:6e:eb:fb:05:12:bc:1b:e7:
                    24:3d:03:44:a6:e0:d5:f1:ef:09:a3:34:21:f5:49:
                    48:0e:40:62:5b:20:1f:73:47:e7:5e:b1:b6:80:4a:
                    c5:6e:75:5b:16:93:e7:03:c4:fd:dc:98:c5:22:09:
                    60:9f:a0:3a:de:f1:d7:fd:ff:2a:d1:b9:f6:b3:7a:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A1:B9:6D:89:E0:32:8C:35:4A:A5:A8:08:1C:D4:DD:17:61:8A:E3
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:d8:8d:38:0f:6f:94:ce:47:2d:6e:c1:70:44:ef:77:f1:5d:
         be:98:96:0c:1d:db:f7:74:f1:48:41:0f:d8:ca:b5:07:05:8b:
         20:93:59:31:43:4b:9a:ef:13:85:ce:ed:22:59:31:6e:c3:e1:
         97:37:67:be:ea:db:3b:5f:76:1b:70:3a:ad:3d:03:61:c0:93:
         0a:89:87:aa:85:85:5f:2b:4e:ef:ba:ae:92:21:62:a7:a8:74:
         40:5e:b9:d3:ac:fb:71:ae:03:33:e6:1c:29:45:b1:97:ff:7f:
         0a:89:b7:f0:ca:f4:0a:aa:1a:1f:6f:c8:07:31:71:aa:ea:97:
         a4:48:0d:c3:08:5c:17:e3:e1:70:62:39:0d:4b:29:a3:12:d0:
         a8:c2:91:7d:84:82:da:7f:3d:9a:0b:f8:bd:26:07:84:24:74:
         0a:94:5b:d8:c3:1f:90:54:3d:53:0a:2a:bd:68:57:ba:2e:af:
         b5:72:c3:37:cf:0b:71:7a:c1:4e:ba:c1:e9:5c:cc:4f:c3:93:
         f2:36:3d:c3:32:3e:8a:15:94:35:ae:fb:ab:ea:76:80:2c:29:
         37:dc:ce:8f:1b:c3:f2:a0:34:82:5c:22:08:f9:79:b8:9f:d0:
         00:fa:e5:f4:cf:17:31:25:7e:ae:6e:c9:a5:dd:f1:b9:51:90:
         2c:9e:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org