Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa
File:                     34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          cSOTk3IRVQEl4R0xpxwVKr3QxZoTY7QMhaMUNeB4aqs=
Subject key identifier:   AF:40:71:F6:6E:B3:6E:85:6B:2C:86:51:05:0D:EA:A4:38:5E:D8:04
Certificate issuer:       /CN=8A9A31995D56C92279C59971190F9CDC7E94D924
Certificate serial:       42387E981470DC1B9F46CD6248BA88E8FC5E949E
Authority key identifier: 8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa
Signing time:             Thu 04 Apr 2024 14:44:55 +0000
ROA not before:           Thu 04 Apr 2024 14:39:55 +0000
ROA not after:            Thu 03 Apr 2025 14:44:55 +0000
asID:                     267388
IP address blocks:        45.174.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:38:7e:98:14:70:dc:1b:9f:46:cd:62:48:ba:88:e8:fc:5e:94:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9A31995D56C92279C59971190F9CDC7E94D924
        Validity
            Not Before: Apr  4 14:39:55 2024 GMT
            Not After : Apr  3 14:44:55 2025 GMT
        Subject: CN=AF4071F66EB36E856B2C8651050DEAA4385ED804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:be:30:4c:84:02:a4:a5:a1:26:2e:5d:80:
                    2a:01:d8:cc:b0:9b:36:13:56:5b:91:b6:51:36:91:
                    52:61:f1:0c:cd:d9:1c:6e:e3:db:b9:2c:46:92:2a:
                    bb:fc:83:17:39:42:d1:0c:72:25:18:0d:2f:0c:bd:
                    a7:66:a9:e6:6d:59:c4:21:76:c1:9f:bb:88:1d:45:
                    49:0b:4a:90:30:62:7c:7a:8b:8e:c3:22:d3:18:0b:
                    06:9b:ff:8d:ed:82:6c:9a:28:47:01:d3:9b:31:2e:
                    70:63:3c:93:86:0c:0b:1c:e9:90:ce:25:b6:d4:4b:
                    f4:e8:68:5f:4e:07:f9:07:ee:2a:3a:1a:9a:5d:30:
                    63:22:7f:ce:3f:5b:cd:17:92:a0:5a:f2:de:1e:93:
                    4a:d1:9c:78:7b:36:e6:df:5d:88:0f:63:ff:ee:89:
                    b4:e6:11:7e:72:25:fb:94:8d:a8:a3:5a:83:44:05:
                    81:4c:13:d5:38:e6:51:90:0f:6d:b5:32:63:ed:1b:
                    be:10:b2:07:bf:ac:ce:18:26:7d:a1:87:13:ff:32:
                    52:8e:6d:01:e5:6f:6a:90:38:90:33:e9:be:39:5e:
                    f0:e5:c5:db:56:62:0e:48:18:51:7b:fa:a5:14:93:
                    77:33:85:6b:56:24:df:ee:82:57:6f:72:62:e6:6d:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:40:71:F6:6E:B3:6E:85:6B:2C:86:51:05:0D:EA:A4:38:5E:D8:04
            X509v3 Authority Key Identifier:
                keyid:8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:db:f2:ef:04:c9:eb:af:c9:21:7f:24:ab:d7:a7:b0:7f:67:
         a9:89:fd:b1:44:a1:6c:63:80:bf:8a:e4:d0:49:0c:ea:d5:31:
         e2:48:13:eb:05:65:31:fa:f2:21:33:f0:47:45:87:a1:1a:f8:
         af:9f:8a:96:1d:75:85:42:09:3f:e8:6a:14:f0:a1:53:f8:5e:
         54:e6:c4:cd:24:67:7e:a7:af:03:b5:93:b8:83:af:38:ed:c9:
         f7:a2:88:7b:36:2d:3a:e6:56:a2:54:ef:d9:04:78:a3:bd:56:
         31:47:56:48:c6:2c:c2:03:24:35:27:f4:55:80:15:f8:f7:78:
         bc:5a:4d:7e:58:52:cf:45:b9:0f:f2:29:dd:cf:99:9f:b1:67:
         f7:b5:21:e3:92:b6:ad:b3:e1:78:7b:ce:5c:21:5f:dc:c2:4c:
         5b:f4:d3:38:c8:fc:a1:2e:11:46:b0:3d:50:e1:26:67:d3:f8:
         c2:48:89:ed:cb:88:b7:c3:66:f9:fd:34:7e:d9:fd:01:f9:77:
         72:6e:45:89:0b:8e:ea:7a:4e:45:76:24:7e:b9:43:35:c3:a0:
         bc:93:28:b0:df:3e:d1:5f:76:fd:5e:67:f9:70:99:b5:0d:06:
         bc:13:3d:a3:db:35:68:0c:b5:2e:13:c7:2b:2a:4d:6c:6b:8c:
         d7:f8:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:25 2024 by rpki-client on console-fra.rpki-client.org