Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32322d3232203d3e20323637333633.roa
File:                     34352e3233342e36382e302f32322d3232203d3e20323637333633.roa (raw, json)
Hash identifier:          vCJZV3wTG/wiztRZLRdcTVQuHz3tAdjUq4HidrqxKMA=
Subject key identifier:   F5:B1:EB:32:D7:90:A7:B1:FB:A5:32:5D:F1:62:50:0A:D1:05:35:92
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       2340CBAF1F9E6E0A4D8F0CFEF5AAD7113C1F98DC
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32322d3232203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:51 +0000
ROA not before:           Thu 04 Apr 2024 13:48:51 +0000
ROA not after:            Thu 03 Apr 2025 13:53:51 +0000
asID:                     267363
IP address blocks:        45.234.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:40:cb:af:1f:9e:6e:0a:4d:8f:0c:fe:f5:aa:d7:11:3c:1f:98:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:51 2024 GMT
            Not After : Apr  3 13:53:51 2025 GMT
        Subject: CN=F5B1EB32D790A7B1FBA5325DF162500AD1053592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:1f:1e:f8:a7:66:02:42:a3:31:d6:8c:cd:
                    78:05:e6:8a:b6:84:03:95:da:ad:5b:04:d4:e2:a9:
                    8a:c8:f0:17:3a:b4:3a:6f:d8:8b:15:29:3d:e5:38:
                    b7:e6:44:8a:b9:2b:b7:b8:3c:0e:9b:fe:6e:09:31:
                    cf:2f:21:08:93:93:28:32:76:ae:85:34:6d:5d:d1:
                    92:8b:6d:b0:cb:5e:b8:42:71:99:46:ca:1f:e6:80:
                    86:bd:80:e8:85:71:36:64:df:16:da:d2:a6:1b:09:
                    21:fd:fe:4c:e1:7c:76:b4:c4:ce:eb:b1:75:de:a7:
                    10:3b:8e:22:35:b6:7f:69:17:57:a5:49:f7:31:2d:
                    41:ea:86:20:ae:7c:4c:0e:7f:b2:71:55:61:27:33:
                    d9:2d:e6:97:ec:b8:c0:76:87:fb:ce:52:5f:df:ff:
                    38:b2:1c:f3:87:63:c0:fd:7e:5d:1f:32:5d:18:56:
                    cb:8e:a6:a5:e1:a5:77:c7:02:f7:19:43:74:04:a8:
                    b7:35:1f:0a:0e:52:62:b0:ce:b8:e2:10:ab:07:c3:
                    29:85:06:65:e1:61:a5:94:d3:0d:e5:b9:0e:5b:c4:
                    5d:b2:eb:5a:6e:5d:aa:f7:f8:93:32:20:ed:57:2c:
                    92:40:98:ef:fe:14:9a:8f:06:44:1f:e5:3b:5e:51:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B1:EB:32:D7:90:A7:B1:FB:A5:32:5D:F1:62:50:0A:D1:05:35:92
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32322d3232203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:75:c0:dc:8f:3a:d1:3b:40:4c:50:f7:43:21:da:bf:61:95:
         5a:25:00:84:9e:89:fc:b5:97:71:5d:e5:87:4e:7e:0e:37:41:
         b0:71:46:aa:eb:9d:a1:7b:20:1d:e0:ed:69:4f:f2:b8:50:3e:
         06:00:df:eb:05:da:dd:44:13:a6:e3:20:d4:08:4e:3b:4e:a5:
         5a:f6:ee:9a:53:c1:a3:a2:3b:b5:a7:24:69:ae:4a:25:a7:86:
         c5:9f:5e:6c:bc:d1:e6:47:18:e4:c5:c4:34:3f:8a:1a:e7:61:
         8b:13:c5:d2:ec:42:5a:e0:f7:bf:ae:ed:2a:61:e8:fc:09:04:
         73:b1:2d:c4:56:c4:35:e0:98:89:fe:dd:3e:10:7c:fa:82:86:
         be:cc:ce:31:eb:b8:ca:53:1b:fb:86:0d:15:55:90:8c:05:26:
         62:66:7e:e9:85:08:30:d7:a2:2e:83:4a:69:69:43:a6:e0:93:
         aa:10:a5:7d:3a:ae:60:7c:0e:28:97:27:5d:ac:89:aa:c1:86:
         3c:38:e2:e5:9f:a0:ba:2d:95:87:84:cf:7a:ee:a9:67:33:0d:
         32:59:5f:d4:18:bb:77:7c:51:90:2e:e4:f4:2d:3c:e4:4e:a5:
         7b:9e:87:15:ea:79:b0:59:15:15:b9:ee:d8:80:bf:c8:11:87:
         1d:e7:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org