Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3232203d3e20323637333838.roa
File:                     34352e3233342e3234382e302f32322d3232203d3e20323637333838.roa (raw, json)
Hash identifier:          Sm9UjyQuZAuYucGTaMi1RQSNQLJEv8P6sT59j4Hv5Ik=
Subject key identifier:   E6:88:48:55:74:8D:E0:0D:A8:B6:AD:FF:D4:6C:17:FE:CF:F7:A1:DE
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       2D9DB54F6696FEC3978776AE382C6206B97B2F45
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3232203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:57 +0000
ROA not before:           Mon 28 Oct 2024 14:35:57 +0000
ROA not after:            Mon 27 Oct 2025 14:40:57 +0000
asID:                     267388
IP address blocks:        45.234.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9d:b5:4f:66:96:fe:c3:97:87:76:ae:38:2c:62:06:b9:7b:2f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:57 2024 GMT
            Not After : Oct 27 14:40:57 2025 GMT
        Subject: CN=E6884855748DE00DA8B6ADFFD46C17FECFF7A1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:bf:ed:17:4f:e5:f4:1c:e0:41:f6:60:53:
                    bd:f9:a3:e9:31:9c:7b:42:f3:c8:fa:32:2f:95:e2:
                    fe:2c:f4:2d:34:60:d3:74:6f:d6:c3:b8:73:b7:c2:
                    cf:07:a4:1f:8a:2f:04:13:43:4e:d7:c4:9d:01:7f:
                    df:c2:8c:d0:43:b4:c0:6c:93:42:0a:8a:bd:9e:25:
                    cd:b0:1c:c7:bb:ca:ee:b1:c3:61:a8:74:4a:a1:61:
                    47:d7:0d:49:4a:63:fe:24:40:cc:a8:95:06:1c:f7:
                    0f:b7:e5:e4:53:62:e2:e5:64:88:09:88:67:10:67:
                    af:02:16:c2:bd:80:c4:85:ad:67:59:ce:2c:0d:55:
                    56:6e:d3:f9:5d:bf:9c:03:3a:b7:61:93:71:6c:07:
                    7a:68:80:37:40:19:cd:fb:94:67:99:9c:59:fc:c0:
                    4b:00:7a:68:d5:06:11:6c:db:4d:26:1f:f9:15:a7:
                    d6:fd:d2:71:99:e7:b6:3a:ad:2f:68:a3:5e:40:d2:
                    0c:21:ca:52:c0:5c:af:2f:be:ed:c5:4c:5b:a5:51:
                    b3:0a:03:da:fd:bb:70:ab:49:ea:96:3c:47:ff:dc:
                    96:1b:5e:1d:d5:3d:5d:9b:cd:39:38:45:37:3d:53:
                    6e:63:13:55:11:16:7d:18:39:37:ff:63:12:0e:73:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:88:48:55:74:8D:E0:0D:A8:B6:AD:FF:D4:6C:17:FE:CF:F7:A1:DE
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3232203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:bc:4c:bd:2e:d5:29:b4:49:7f:cf:61:cf:be:9b:ef:2a:
         19:a3:bd:73:df:98:a1:bb:5a:1f:38:73:e8:1f:c6:a0:53:f8:
         a9:b2:01:7b:a5:e2:81:8d:45:c2:44:e7:47:32:5f:cb:94:61:
         f7:5c:3b:d8:45:66:be:ee:1b:99:59:8c:06:3f:0a:d4:ca:56:
         2f:7e:30:76:63:bb:9d:e7:b6:f5:ad:60:26:70:41:a2:65:5d:
         e3:c8:dc:b0:6c:ca:57:ad:f9:81:47:13:77:13:76:13:bd:2d:
         92:84:7b:a2:bb:4d:08:41:52:03:ae:b2:9b:a8:51:4e:bc:f9:
         24:7f:1c:26:a0:85:59:17:9b:9a:d0:58:c7:6f:d8:02:16:1a:
         3a:68:16:88:db:aa:25:35:7b:95:95:05:ce:c0:85:05:f8:4e:
         8d:ec:15:5f:d4:f6:58:3d:5e:ae:cd:61:20:a3:33:3b:2c:69:
         9e:12:5c:6e:93:2e:77:f5:7d:80:92:04:fe:0c:a8:0f:69:91:
         5b:f5:34:bb:f3:47:25:8e:71:15:f5:59:db:07:28:9e:d0:28:
         b0:c2:41:39:4d:18:1d:44:1d:13:94:09:2c:b5:fc:33:61:d6:
         32:4f:84:72:7a:ad:32:f3:d1:e7:64:29:bd:d6:1a:21:8f:91:
         f5:ed:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org