Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e36392e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          Ag8L2UW/ULm0cPzYbK76QfuHxAcNCboRBbqgdLNmHoc=
Subject key identifier:   CB:61:20:E8:69:D4:7F:8E:DE:8C:E5:DD:BA:4B:FE:66:FB:22:39:75
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       79BB3B9653F2B9C991F252A3331DBF76C0DBC106
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:50 +0000
ROA not before:           Thu 04 Apr 2024 13:48:50 +0000
ROA not after:            Thu 03 Apr 2025 13:53:50 +0000
asID:                     267363
IP address blocks:        45.234.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bb:3b:96:53:f2:b9:c9:91:f2:52:a3:33:1d:bf:76:c0:db:c1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:50 2024 GMT
            Not After : Apr  3 13:53:50 2025 GMT
        Subject: CN=CB6120E869D47F8EDE8CE5DDBA4BFE66FB223975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:23:f2:b4:e5:ef:de:d8:eb:53:75:55:7c:
                    00:65:08:87:4d:92:af:32:75:b5:de:b9:9c:cc:71:
                    2f:58:c6:ec:b1:5c:ca:72:64:9e:8a:f5:d8:9d:f7:
                    e4:fb:9b:27:32:69:2f:50:39:b7:70:82:0a:50:ae:
                    6b:25:57:db:b6:44:37:27:58:24:74:be:3d:9a:89:
                    a3:41:c8:cd:f0:2e:98:08:de:d5:04:6b:1f:16:a2:
                    c2:75:7c:f6:27:6c:65:07:c7:1f:e9:03:a5:2f:cb:
                    a9:dc:89:e3:f8:f8:19:f6:3a:53:54:c6:0b:22:71:
                    74:e9:fd:27:2b:5a:01:9c:8b:4e:a5:5f:81:e2:86:
                    c5:99:5a:c8:2a:83:16:33:78:34:fc:c7:5a:fd:1a:
                    1e:7a:75:99:28:05:2b:5a:9c:1e:e5:dd:c2:7f:82:
                    1d:b1:52:c9:9d:53:fa:d5:4e:fc:68:da:48:82:7a:
                    56:ea:00:fa:ec:89:97:7c:3e:ac:aa:56:26:a5:c0:
                    59:49:62:0c:c0:55:66:8b:d6:b5:36:9d:d2:ad:f8:
                    c8:14:84:1e:c6:93:e7:b5:41:55:6a:45:e0:3d:f2:
                    74:2d:78:a6:05:dc:86:6b:71:7c:e7:77:46:b5:38:
                    ec:b9:5b:72:63:e4:06:a4:0a:00:88:c6:a8:b6:dd:
                    9f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:61:20:E8:69:D4:7F:8E:DE:8C:E5:DD:BA:4B:FE:66:FB:22:39:75
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:40:44:19:47:55:5a:2e:d0:6a:97:6a:62:4f:1a:75:3f:
         7f:d9:ce:f1:5a:d9:ed:3b:26:be:39:1c:5f:0b:73:ce:69:d0:
         b6:69:88:c7:17:34:82:44:78:e6:36:cf:a5:38:72:60:d4:10:
         41:bc:6a:7b:e5:ea:ce:59:e2:e5:8d:ef:48:e9:ff:c8:32:2b:
         69:62:db:37:69:70:6a:2e:ef:12:ea:16:83:13:30:c8:e1:56:
         fe:ae:24:f5:5c:c9:37:14:68:ca:25:3d:ae:dd:e9:13:7d:81:
         d2:2d:6b:91:b1:85:de:ff:60:1f:c8:9a:d8:bd:ae:d2:8a:9f:
         47:93:b4:52:1b:c9:b2:b5:33:16:e7:10:55:1c:c7:3b:32:b6:
         d6:7d:55:63:7b:1d:63:37:38:4a:97:df:0c:8e:d0:3c:90:b2:
         76:a3:cc:45:6d:ef:b5:52:2f:97:e1:b3:f0:97:50:ad:f4:3b:
         c7:47:0b:3f:53:8d:ca:ca:b2:7e:bd:22:42:8b:46:77:7c:ac:
         f1:ae:d2:0f:86:30:cd:29:8a:44:cb:5d:2e:99:07:ac:ec:fa:
         be:5c:65:11:1f:a4:83:a0:fb:47:ea:59:a4:0d:5b:15:e0:7a:
         44:42:25:3f:85:f2:00:42:1d:ea:2e:a5:87:53:cd:84:c0:69:
         30:bd:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org