Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa
File:                     34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa (raw, json)
Hash identifier:          YmH4M9T5JhaXEtIGpfRG8KLhp5G2SXR4n/bIa7QneEA=
Subject key identifier:   53:F2:89:9D:92:F1:3E:12:23:B0:53:A8:69:50:2D:BC:7E:32:E6:34
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       6C26866563C1D345276CA48E0F6883ABC2CE6D52
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa
Signing time:             Thu 04 Apr 2024 07:18:04 +0000
ROA not before:           Thu 04 Apr 2024 07:13:04 +0000
ROA not after:            Thu 03 Apr 2025 07:18:04 +0000
asID:                     267024
IP address blocks:        45.227.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:86:65:63:c1:d3:45:27:6c:a4:8e:0f:68:83:ab:c2:ce:6d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Apr  4 07:13:04 2024 GMT
            Not After : Apr  3 07:18:04 2025 GMT
        Subject: CN=53F2899D92F13E1223B053A869502DBC7E32E634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:19:4e:e2:77:cb:d1:33:25:46:65:37:37:
                    2e:82:1f:56:3b:70:a9:3c:09:c9:c3:21:3f:be:53:
                    50:a6:a2:16:0f:40:c3:53:0b:c1:28:9a:79:dc:6b:
                    e8:80:c9:b8:af:53:7f:09:9d:92:0c:61:3a:54:04:
                    bf:e3:08:3f:49:6f:61:07:02:68:36:b5:7c:6a:8b:
                    a5:d2:4b:82:4d:a7:d1:1b:e9:75:4c:75:ff:cb:67:
                    48:32:cb:f6:a9:1e:c9:f9:f9:46:1c:2b:00:d4:b5:
                    a4:6e:54:41:f4:9d:75:59:83:ac:18:8e:4e:1a:c3:
                    50:f0:03:01:93:a9:3f:ea:35:ea:37:6d:d4:36:67:
                    8f:cc:db:d9:40:14:03:44:7f:8b:15:90:f0:65:04:
                    a0:54:76:12:65:f3:bc:53:70:4c:f3:46:49:01:b1:
                    9c:67:0e:c6:ca:5c:0a:48:cd:bb:31:f6:26:8d:a2:
                    4c:6a:d2:e5:e1:06:be:85:9e:cc:25:c6:f6:3e:45:
                    e1:0b:b8:51:2b:da:3d:a2:9c:32:57:59:2e:00:fe:
                    1f:a0:fc:3f:50:ac:92:47:cf:39:2e:f9:83:0a:b1:
                    3e:1f:f8:fb:4f:70:c2:85:7c:63:40:23:8e:e2:91:
                    63:6e:d0:fa:10:cd:86:a3:22:4b:83:27:96:33:0d:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:89:9D:92:F1:3E:12:23:B0:53:A8:69:50:2D:BC:7E:32:E6:34
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:41:f1:42:20:48:83:7e:c3:c4:f0:ac:83:8a:e2:10:14:
         9f:1d:55:d7:1b:0c:c9:b2:ce:a7:4d:c7:47:f9:0c:e7:30:27:
         05:ca:56:15:40:b2:18:71:a3:f5:20:b5:d5:92:a8:44:cf:16:
         ae:6e:8d:df:f6:0d:fd:61:e2:ca:75:5e:c9:60:3f:0e:72:38:
         1e:93:ce:f2:06:00:ac:a8:8f:22:7d:af:84:e3:33:c6:1d:21:
         8d:23:78:0e:53:1b:76:29:c4:b8:7b:ce:a5:ee:5e:4d:1f:b1:
         78:c0:39:05:f5:10:cc:c6:08:ab:12:91:dd:8e:81:0c:12:36:
         53:bc:0b:2f:ce:84:41:74:17:85:72:14:75:60:ac:c7:7b:c7:
         62:38:79:48:06:2b:df:2f:e6:d9:96:b9:4b:a2:2f:97:ff:0e:
         db:62:ae:63:27:0b:90:5b:9f:08:b4:79:33:b8:be:1f:3c:f4:
         9a:b8:d7:bf:db:34:d4:c5:e1:85:38:0a:6a:83:da:92:bf:1d:
         fe:a3:5f:a7:0f:56:30:a4:a1:7c:7a:6e:79:84:6c:3a:01:ed:
         74:e5:ff:65:63:f2:06:f9:4f:a7:8b:fb:27:66:18:10:2d:c6:
         8f:6a:9d:d4:0d:4b:2d:56:89:78:0d:c2:85:8f:94:cd:de:de:
         cc:31:99:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:46 2024 by rpki-client on console-fra.rpki-client.org