Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3235203d3e20323634323730.roa
File:                     34352e3233342e32342e302f32322d3235203d3e20323634323730.roa (raw, json)
Hash identifier:          RMZqnCpmBJQi4swOyfY+CkwO7VTBL5yFTMUakjvJMLI=
Subject key identifier:   68:48:D1:E5:2A:63:7C:DB:97:7B:B1:00:C6:B6:BA:A3:FD:D4:FA:90
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       79917765FD668EC98F7BB968733A77644DECC5DE
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3235203d3e20323634323730.roa
Signing time:             Mon 15 Apr 2024 19:21:40 +0000
ROA not before:           Mon 15 Apr 2024 19:16:40 +0000
ROA not after:            Mon 14 Apr 2025 19:21:40 +0000
asID:                     264270
IP address blocks:        45.234.24.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl
                          rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:91:77:65:fd:66:8e:c9:8f:7b:b9:68:73:3a:77:64:4d:ec:c5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Apr 15 19:16:40 2024 GMT
            Not After : Apr 14 19:21:40 2025 GMT
        Subject: CN=6848D1E52A637CDB977BB100C6B6BAA3FDD4FA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:de:d9:f4:52:d9:81:a2:52:a7:31:18:f5:
                    b2:9f:95:f2:9a:3f:fa:42:df:56:74:36:0b:fe:95:
                    38:97:81:52:4a:62:af:e6:70:32:82:83:02:72:1a:
                    66:43:ac:b9:a5:5f:7a:fa:20:ef:51:43:a8:44:16:
                    68:3a:8a:c7:45:49:f6:3c:25:65:30:e3:1a:ea:17:
                    a4:85:88:ee:e0:91:da:a2:6a:d3:c8:a0:46:a7:9f:
                    2b:26:bf:dd:b8:cf:d1:33:d3:64:e1:92:cc:90:a7:
                    94:03:ca:0d:82:f7:83:0e:8a:7e:4b:8d:71:c5:24:
                    18:83:0c:1e:b7:cd:c8:e9:21:1b:23:4f:88:e2:c9:
                    32:53:73:e2:f7:66:6e:8e:c7:e7:80:9d:52:f0:55:
                    d3:c0:11:cf:02:7c:29:60:3e:82:92:77:5f:b7:cb:
                    0c:cd:f1:0a:74:be:42:94:ef:58:74:de:5d:64:77:
                    d1:6b:41:f0:1c:c5:65:81:8d:0d:7d:a5:64:b3:5e:
                    2d:b9:55:0b:0e:28:6b:8e:c7:83:92:49:32:3b:97:
                    b7:75:f7:c6:59:3b:e6:4e:0d:f8:84:20:d6:e2:23:
                    09:4e:db:97:e4:9e:e1:3d:09:bc:9f:5f:6c:64:2a:
                    02:c4:02:09:2f:b9:20:14:19:a9:a9:74:48:6e:3a:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:48:D1:E5:2A:63:7C:DB:97:7B:B1:00:C6:B6:BA:A3:FD:D4:FA:90
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3235203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:05:8c:85:7f:a3:59:80:21:2b:e8:7e:a8:e3:4d:ba:61:35:
         d3:cd:58:6a:27:62:78:08:ec:90:9c:ce:d1:86:a1:c6:72:19:
         f7:d9:f7:c2:5d:e9:a6:9f:e0:f7:c4:d7:f7:0c:9b:4d:67:2b:
         11:16:83:7f:79:e0:c5:e9:1b:e5:71:a8:f6:ad:a5:fd:6c:c4:
         4f:75:56:79:64:88:54:fe:58:52:a8:10:25:ab:72:5d:fb:9a:
         45:8f:fd:8c:21:85:8a:fe:92:ca:4f:c3:4c:27:16:cf:9b:0e:
         88:f7:b5:96:12:12:c3:3a:d5:7b:1b:e3:0d:7c:de:23:7b:f7:
         87:cc:59:18:38:1a:2f:f9:7b:2e:1c:39:42:5d:d0:be:90:f7:
         00:f5:e9:d0:63:84:cc:b8:19:25:1b:50:ab:c4:cb:2c:cf:99:
         c8:40:96:84:62:b7:eb:07:47:4c:dd:23:6e:ed:d2:a6:4b:75:
         21:25:b7:f3:cd:6c:d3:db:39:99:38:50:21:67:83:15:ee:a8:
         69:6e:fb:9b:be:dc:5e:d1:37:70:49:6e:88:a1:0f:3a:b0:f7:
         65:74:e1:8a:64:d9:06:bd:e5:52:53:19:20:19:53:d6:3c:71:
         a3:63:96:fc:4f:b9:ea:08:52:87:3e:65:78:63:d9:15:c6:6b:
         1d:cd:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org