Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/34352e372e3134342e302f32322d3234203d3e20323636363035.roa
File:                     34352e372e3134342e302f32322d3234203d3e20323636363035.roa (raw, json)
Hash identifier:          fyzzoIKiqbI4PsHFuhHVbWM/6sLU5jW2ousBBcxtYb0=
Subject key identifier:   4F:F3:C0:B4:43:1D:C9:07:48:5E:C0:51:58:EC:89:07:54:50:5E:D4
Certificate issuer:       /CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
Certificate serial:       5303B4693BCD8C23627446C14B52A79AAEB714B7
Authority key identifier: 57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/34352e372e3134342e302f32322d3234203d3e20323636363035.roa
Signing time:             Wed 03 Apr 2024 23:54:56 +0000
ROA not before:           Wed 03 Apr 2024 23:49:56 +0000
ROA not after:            Wed 02 Apr 2025 23:54:56 +0000
asID:                     266605
IP address blocks:        45.7.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.crl
                          rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:03:b4:69:3b:cd:8c:23:62:74:46:c1:4b:52:a7:9a:ae:b7:14:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
        Validity
            Not Before: Apr  3 23:49:56 2024 GMT
            Not After : Apr  2 23:54:56 2025 GMT
        Subject: CN=4FF3C0B4431DC907485EC05158EC890754505ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:da:aa:40:92:1f:53:b0:c3:a3:65:25:e5:
                    49:11:6a:6c:87:f4:23:36:60:34:a1:b6:d8:19:d5:
                    6f:d4:55:06:2e:e2:3d:52:30:6d:1d:70:bc:14:0c:
                    c6:e2:95:ca:45:1a:92:c2:99:9e:1a:df:99:75:8e:
                    c9:3b:c8:28:ab:2d:3d:44:70:e4:06:b6:69:58:ef:
                    cf:0d:42:6a:7c:38:67:0d:8a:29:cf:c2:b2:40:7c:
                    b5:05:83:9b:59:a0:70:c2:f3:5c:66:e1:53:04:8b:
                    ef:39:57:da:f7:d7:f4:92:9e:1d:99:32:3b:f5:b3:
                    4d:52:c2:06:83:67:c0:8d:af:12:d2:d8:cf:64:85:
                    f2:ac:0e:85:6b:e5:f6:34:e5:f2:49:d2:98:68:df:
                    51:ae:62:bc:83:82:7b:1b:26:c7:25:f4:13:f7:c1:
                    47:ad:f2:09:9b:47:0e:9e:f2:24:3c:a7:f4:e8:b0:
                    80:71:b6:27:25:5e:22:10:44:55:79:c2:d5:4e:21:
                    fa:38:a6:dd:eb:26:56:a4:d3:d8:69:22:cb:d4:e0:
                    c6:58:a8:e2:dd:65:f7:1b:ac:13:8e:a6:b9:65:c7:
                    a6:a1:f2:98:a8:0b:83:a0:ee:a6:ed:1f:10:b7:44:
                    eb:2b:28:60:04:8b:16:95:fd:13:1c:0e:8d:97:69:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F3:C0:B4:43:1D:C9:07:48:5E:C0:51:58:EC:89:07:54:50:5E:D4
            X509v3 Authority Key Identifier:
                keyid:57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/34352e372e3134342e302f32322d3234203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:91:42:16:e3:43:ae:cd:d3:80:fc:2e:84:a8:9a:16:06:63:
         d1:a6:08:2b:e7:3b:94:1c:2a:39:3e:a7:af:01:81:4c:c3:4c:
         80:a4:f7:5a:73:49:d6:4c:da:15:6b:b6:29:45:59:32:bb:8d:
         68:90:a8:3b:f3:f9:c0:e8:99:90:c5:85:98:0b:32:ea:2e:dc:
         56:e3:aa:4d:61:8c:6b:b3:51:26:8d:e8:7b:9d:0d:a9:ac:8f:
         ce:00:52:f1:93:0a:73:b3:e6:a4:57:2f:13:e6:b4:c5:1f:73:
         ff:60:5f:79:64:3c:2b:97:dd:89:a5:a6:68:74:fa:92:93:e1:
         07:92:0b:2b:65:e8:7d:46:9d:83:e3:3d:5e:8c:30:5e:0b:df:
         15:e1:dc:77:8e:7b:a8:81:a9:20:90:78:c2:68:d5:0c:39:f7:
         ef:60:44:31:6b:2a:e2:2d:a0:73:62:62:b7:fa:80:f2:08:c2:
         a4:d2:3e:56:5d:43:bf:72:9f:d5:83:cf:df:58:e1:dd:88:e5:
         ee:91:e4:27:34:ce:d5:b1:01:56:13:50:b6:4d:31:c2:d6:8c:
         4f:dc:b1:e8:1e:ef:54:5d:c4:2d:85:61:bf:95:85:b5:b7:3a:
         c9:44:3f:6b:31:07:4f:99:e7:16:4f:3f:cf:5f:d0:a8:e9:2d:
         d5:e7:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 13:53:25 2024 by rpki-client on console-fra.rpki-client.org