Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa
File:                     34352e3233352e34342e302f32322d3234203d3e20323638323030.roa (raw, json)
Hash identifier:          vOneKU0hIQQdridd/ZMNTjc4OX9YjWoWr+Dr69MkfE0=
Subject key identifier:   39:A2:82:C1:9F:CB:EE:09:16:46:33:2A:5F:58:FA:DE:7F:B6:1D:B7
Certificate issuer:       /CN=83C1DD6482FD32CE6CB494B03457BD659437962E
Certificate serial:       7CBF632AEF94049605866C2B24DC4B6FE7A07205
Authority key identifier: 83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa
Signing time:             Wed 03 Apr 2024 18:34:06 +0000
ROA not before:           Wed 03 Apr 2024 18:29:06 +0000
ROA not after:            Wed 02 Apr 2025 18:34:06 +0000
asID:                     268200
IP address blocks:        45.235.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl
                          rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bf:63:2a:ef:94:04:96:05:86:6c:2b:24:dc:4b:6f:e7:a0:72:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1DD6482FD32CE6CB494B03457BD659437962E
        Validity
            Not Before: Apr  3 18:29:06 2024 GMT
            Not After : Apr  2 18:34:06 2025 GMT
        Subject: CN=39A282C19FCBEE091646332A5F58FADE7FB61DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:f9:bb:cb:0f:15:3f:5d:e3:aa:8d:f8:36:
                    0c:8b:51:9d:55:d7:a0:f9:2b:86:26:43:1b:76:e6:
                    a3:09:3a:3b:87:12:32:38:1b:85:39:e7:dc:88:a3:
                    88:4d:4b:35:f5:9d:20:a8:b1:e6:b4:42:f0:01:69:
                    ac:d2:71:39:06:46:c0:8c:dd:d1:10:1b:52:d6:54:
                    df:e7:75:ca:6e:ff:b0:36:13:1d:c1:da:ff:3a:c7:
                    d1:17:03:fe:21:36:44:39:55:ea:56:1d:1c:9e:33:
                    ab:b4:1d:00:60:cd:8c:45:3a:56:55:b5:28:ad:e4:
                    66:21:ae:cd:d6:c2:5f:bd:58:28:eb:a9:2f:06:ba:
                    6d:0e:e1:0f:41:41:8b:39:dd:48:79:65:2a:e5:58:
                    f3:2a:88:60:2f:5b:ba:58:c3:f6:7d:ca:b6:be:99:
                    2d:10:e6:8c:f0:ce:4e:ea:63:b2:6c:88:75:1e:85:
                    26:0f:74:e1:6f:3d:23:22:9e:58:20:77:c0:a5:cd:
                    b0:7d:c9:1f:1c:4e:33:3f:48:ba:73:86:e3:58:55:
                    96:4d:86:3e:7a:57:93:d9:7a:c0:38:41:2f:8c:e1:
                    54:45:6c:3d:94:34:f4:1f:a6:d3:d7:a2:47:4a:f9:
                    58:02:2b:06:20:0a:7d:90:bc:4f:32:db:c7:14:30:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A2:82:C1:9F:CB:EE:09:16:46:33:2A:5F:58:FA:DE:7F:B6:1D:B7
            X509v3 Authority Key Identifier:
                keyid:83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:23:0a:7e:89:1e:83:dc:7f:1f:07:1d:d5:aa:8f:10:c5:00:
         aa:fa:fe:13:5b:c1:6e:a4:c4:c6:d8:ca:68:c2:c2:ff:ed:0f:
         b0:1c:9a:ad:7b:6d:42:74:20:fc:e9:82:30:f6:7b:8d:0d:25:
         db:4a:41:1f:8d:b5:4d:51:37:8e:25:7b:5d:53:d9:53:85:46:
         c2:3f:f0:f0:fd:a6:56:17:db:04:df:ad:0d:da:78:17:7d:9a:
         17:b7:80:c9:31:95:ba:e9:16:a1:8f:ba:c6:ae:9e:1e:3e:73:
         64:7d:b1:f2:a2:9b:c7:88:e6:4b:0d:ad:47:f4:a3:f8:71:94:
         1d:42:ed:3f:72:26:02:8f:3d:28:a3:97:7f:4f:5a:8f:df:81:
         60:a9:a4:23:a1:d2:47:b3:ed:93:33:59:cb:8c:d2:94:8a:0c:
         d3:11:d8:6d:d5:b4:10:7c:d3:f2:03:73:55:1f:81:f3:ee:f7:
         5a:75:9a:88:6a:92:e7:0c:81:7a:e9:df:86:ab:3d:7e:75:1e:
         2e:8d:d8:95:33:fe:d6:c5:a5:ee:2c:28:53:5e:19:09:34:b1:
         57:5f:49:15:72:82:41:fc:d3:1c:97:a8:92:b6:da:4d:b2:a1:
         c1:60:52:68:d3:01:76:3d:17:de:01:04:5d:b7:84:85:b6:b0:
         79:46:c5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org