Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
File:                     34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (raw, json)
Hash identifier:          qA6UcAhb4gFdGgoe93OS0Ulh+JmI4rxw9hmbY0qhV7k=
Subject key identifier:   B8:3F:65:50:3E:5E:FC:53:26:B3:28:61:2E:9D:7E:44:60:CA:36:D1
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       5E07E26FB04CBC7F8926EEB970B8E65DDE6ED73C
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
Signing time:             Thu 04 Apr 2024 07:18:04 +0000
ROA not before:           Thu 04 Apr 2024 07:13:04 +0000
ROA not after:            Thu 03 Apr 2025 07:18:04 +0000
asID:                     267024
IP address blocks:        45.227.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:07:e2:6f:b0:4c:bc:7f:89:26:ee:b9:70:b8:e6:5d:de:6e:d7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Apr  4 07:13:04 2024 GMT
            Not After : Apr  3 07:18:04 2025 GMT
        Subject: CN=B83F65503E5EFC5326B328612E9D7E4460CA36D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:d2:34:e1:a6:69:7f:53:78:8e:5a:92:1f:
                    4a:db:5a:76:f3:fc:3d:fb:e5:d2:50:fa:f4:19:02:
                    e8:9e:b8:40:23:db:3b:37:23:42:3a:26:5e:df:05:
                    e6:dc:8f:3c:ae:24:db:b1:7a:9c:af:a9:0e:ec:13:
                    4f:04:24:dc:87:38:76:d5:29:a0:1c:66:27:ce:8a:
                    b9:12:55:dc:a9:6c:df:53:57:5a:bd:d5:83:1a:6f:
                    a1:50:9e:a8:b6:93:5d:f9:53:3b:cf:41:01:49:40:
                    14:34:05:69:57:ab:e4:3b:7e:3a:3f:45:e7:e7:9e:
                    f1:42:86:2b:f5:84:2e:77:ff:f8:8b:a2:cf:2d:77:
                    15:cd:e7:27:cd:51:73:10:0f:bd:cb:33:05:e9:f1:
                    ad:fb:f7:b0:32:3a:fd:38:19:5d:50:b7:10:ce:a8:
                    3f:d0:33:90:cc:43:98:75:6c:d8:25:27:c7:69:3b:
                    23:77:55:e2:84:1c:8f:d0:01:37:1e:6d:51:d2:43:
                    fe:02:c5:f4:d9:65:76:6a:25:49:57:6d:03:9e:26:
                    c2:94:24:32:41:a1:d4:66:3b:92:b1:6f:f6:8a:e6:
                    b5:54:7d:f6:f2:6b:17:3c:df:2b:4d:3f:ab:e0:0a:
                    42:7e:b6:28:2f:cd:69:28:0c:11:01:3e:aa:5a:a1:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3F:65:50:3E:5E:FC:53:26:B3:28:61:2E:9D:7E:44:60:CA:36:D1
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:15:47:3c:3f:65:81:38:d9:63:3e:24:ee:00:1c:d1:75:
         82:2f:1e:bd:c3:5b:6d:74:d4:2f:96:c3:42:5c:8f:9f:ff:99:
         83:82:ad:c0:47:17:46:2c:84:ab:ed:89:db:85:74:c7:8d:88:
         12:5c:37:a0:c1:7c:f2:ad:59:28:bc:6f:05:c5:77:35:64:86:
         52:e4:c8:da:d9:f8:fa:dd:8f:42:61:64:4e:b9:bb:f5:c5:89:
         72:bc:97:a3:c9:bf:aa:82:24:38:eb:26:4f:88:84:7c:ae:ca:
         5f:26:fe:b7:66:d3:6e:57:4f:e7:64:24:5f:93:1d:01:f5:4f:
         f0:a1:09:7f:03:a9:89:be:f1:04:8e:e8:ce:d4:9a:d2:15:4e:
         fb:4e:5c:64:58:55:20:c7:2c:a3:25:62:70:72:bb:7d:ae:92:
         b5:c2:60:79:82:f3:2e:5e:8f:c7:72:cb:07:1d:f1:1e:81:1c:
         ad:d3:9b:08:18:20:76:bf:d8:fb:a6:44:72:7d:54:3c:e1:ed:
         c3:d9:09:10:0e:26:46:7d:bd:08:56:ac:f8:d6:e9:9f:e0:07:
         48:29:47:ff:7c:b7:b1:a4:04:98:75:f8:39:c1:42:c5:31:7d:
         d2:cb:ae:4d:9b:1b:c0:0d:63:26:d0:3d:a5:7a:ae:7c:c1:d8:
         53:43:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:39 2024 by rpki-client on console-fra.rpki-client.org