Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131322e302f32322d3232203d3e20323637303234.roa
File:                     34352e3232372e3131322e302f32322d3232203d3e20323637303234.roa (raw, json)
Hash identifier:          tI8nFxJllbtICRjNNGNtrkhOlINL4JFkmoSMT9Fm0oM=
Subject key identifier:   13:AD:B6:70:53:89:8E:48:1B:B7:4E:7D:C9:50:2A:7D:B4:37:18:D5
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       3BAE77190630043C868E9932816E519B4F8B4544
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131322e302f32322d3232203d3e20323637303234.roa
Signing time:             Thu 04 Apr 2024 07:18:06 +0000
ROA not before:           Thu 04 Apr 2024 07:13:06 +0000
ROA not after:            Thu 03 Apr 2025 07:18:06 +0000
asID:                     267024
IP address blocks:        45.227.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ae:77:19:06:30:04:3c:86:8e:99:32:81:6e:51:9b:4f:8b:45:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Apr  4 07:13:06 2024 GMT
            Not After : Apr  3 07:18:06 2025 GMT
        Subject: CN=13ADB67053898E481BB74E7DC9502A7DB43718D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:b0:6e:98:5c:de:55:ad:a9:6b:14:30:5d:
                    e5:11:a6:39:b5:8a:dd:df:e8:ec:95:1c:5d:5d:4b:
                    dc:c0:d9:8e:d2:e2:a9:82:dd:0f:be:9d:28:09:27:
                    07:12:2b:18:f2:c4:0e:1d:69:9f:21:93:84:91:dc:
                    08:24:68:22:c4:82:90:61:33:42:65:f4:c6:f5:b3:
                    27:b1:27:83:ec:2d:be:17:61:cf:37:56:b6:af:75:
                    91:38:b9:21:f5:b8:7d:72:0b:c4:1c:4b:a2:5a:ef:
                    55:2d:ac:dd:43:d4:d7:a4:43:89:a1:8d:04:f6:4d:
                    e8:34:ae:6f:61:9f:9c:5e:85:3b:fb:0b:a5:5e:56:
                    b8:72:01:15:bf:cd:00:df:11:72:09:b5:0e:a1:7e:
                    49:31:85:5b:44:9b:90:8a:3c:b6:4d:ae:b5:4e:d1:
                    d2:67:10:ce:3c:cb:9c:b0:54:7e:e8:58:af:30:2d:
                    d3:f8:35:b4:16:82:89:32:34:61:45:c1:b1:52:5d:
                    a4:f9:3c:1f:1e:98:f3:28:f4:9d:90:de:1f:db:26:
                    35:7b:54:e1:62:9f:b4:df:67:bb:1a:15:45:c4:38:
                    1d:6c:46:18:ab:67:84:c9:db:79:d1:f2:f3:da:6a:
                    71:13:34:74:26:8e:a8:28:ac:25:e0:4f:83:5b:ba:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:B6:70:53:89:8E:48:1B:B7:4E:7D:C9:50:2A:7D:B4:37:18:D5
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131322e302f32322d3232203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:6f:4c:48:72:d2:05:ea:a8:50:4e:ea:3d:ea:3d:c5:59:05:
         c9:07:25:b4:75:bb:22:96:cd:6c:e4:c3:80:48:99:50:07:60:
         25:ea:d5:f4:f8:8f:d3:56:ac:d5:cb:84:77:06:6a:6b:30:bd:
         6b:16:51:52:05:34:3e:e2:68:32:f8:52:fc:d6:6f:64:73:77:
         9b:24:d3:4a:75:07:c0:ac:30:9e:71:8e:32:56:36:48:bc:d7:
         28:78:1e:7a:b4:bd:54:6e:72:7f:be:bb:3d:cb:3e:de:8c:a3:
         8b:15:ac:b9:c1:f1:0e:a2:fc:dc:e3:13:88:de:0d:0a:38:8b:
         12:d9:b6:68:49:77:ae:20:22:8a:f1:cb:bc:ff:d4:b0:01:15:
         17:64:0a:eb:aa:67:26:d9:3c:be:06:fe:a2:7e:f9:f0:cb:20:
         2b:05:0f:dc:2e:a1:d1:84:9a:cd:1a:96:8b:53:fa:b5:aa:c3:
         03:0e:83:a0:3a:2f:6d:30:f0:6a:57:78:39:04:e1:87:62:b9:
         78:41:7b:38:0c:b8:ba:39:c7:68:ea:00:d0:44:f0:65:c9:ba:
         f8:63:49:6f:4c:1e:e0:7c:3a:fe:d6:21:e8:40:54:b8:c1:fb:
         9c:6b:5a:ab:55:0f:93:d1:ca:b3:a5:e8:8f:aa:57:e1:20:89:
         02:32:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:06 2024 by rpki-client on console-fra.rpki-client.org