Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          gFdtDBwJZlk98UpVMRu2nBGeCJadxTAVBNqHLKbiGqw=
Subject key identifier:   BA:0E:A3:39:FD:59:8A:79:56:A6:D7:A9:01:64:C4:A2:5A:BB:3B:EA
Certificate issuer:       /CN=5FC19A1DF15788880B70A67FED822D4E3BA5AD71
Certificate serial:       20AEC8C6ADD182DABE5F87F65562C7AA5954D019
Authority key identifier: 5F:C1:9A:1D:F1:57:88:88:0B:70:A6:7F:ED:82:2D:4E:3B:A5:AD:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa
Signing time:             Thu 04 Apr 2024 05:08:25 +0000
ROA not before:           Thu 04 Apr 2024 05:03:25 +0000
ROA not after:            Thu 03 Apr 2025 05:08:25 +0000
asID:                     267091
IP address blocks:        45.229.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ae:c8:c6:ad:d1:82:da:be:5f:87:f6:55:62:c7:aa:59:54:d0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC19A1DF15788880B70A67FED822D4E3BA5AD71
        Validity
            Not Before: Apr  4 05:03:25 2024 GMT
            Not After : Apr  3 05:08:25 2025 GMT
        Subject: CN=BA0EA339FD598A7956A6D7A90164C4A25ABB3BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:7a:db:35:42:c8:38:43:96:96:bd:3f:01:
                    46:96:53:1c:ce:6e:24:78:33:5a:be:26:cd:7e:f7:
                    25:0d:0f:37:6a:26:d8:e7:16:9b:17:b2:1f:e4:e3:
                    77:3e:32:c9:92:42:9d:f8:f7:86:70:39:d3:f2:85:
                    08:2e:eb:c9:8b:f7:59:1a:dc:84:41:ee:c7:fc:e9:
                    8b:21:5f:15:4c:92:e5:be:d7:e4:8a:4c:cf:b0:a3:
                    34:f4:e1:c7:cf:84:e9:47:64:67:f7:7f:27:38:48:
                    fd:44:32:f3:3b:0f:ca:e3:db:5b:16:5e:70:46:41:
                    45:19:dc:ba:26:98:69:5e:b7:64:69:9e:5e:fe:12:
                    ba:ff:d7:ed:bb:aa:f6:bf:0a:76:b2:7d:1f:93:f7:
                    a1:ad:cd:2a:b1:b4:9d:b3:1e:5c:a7:7c:86:ee:95:
                    a1:e4:73:6b:9f:1d:48:b9:44:dc:e9:a9:e8:37:62:
                    68:1d:84:3a:b0:b0:0f:d2:4f:7e:72:38:f8:a8:25:
                    00:1a:18:bc:da:3e:93:d7:ba:c9:49:8a:ca:d3:d7:
                    04:51:62:e6:2b:67:a2:8f:74:d4:76:63:1e:da:57:
                    1a:46:23:1d:f7:20:f8:bc:73:13:2f:75:2f:6b:a0:
                    ae:4a:fe:99:1e:de:e5:1d:a6:6b:09:60:cf:b7:b9:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0E:A3:39:FD:59:8A:79:56:A6:D7:A9:01:64:C4:A2:5A:BB:3B:EA
            X509v3 Authority Key Identifier:
                keyid:5F:C1:9A:1D:F1:57:88:88:0B:70:A6:7F:ED:82:2D:4E:3B:A5:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:30:d4:31:66:66:d7:a3:9c:f5:5b:c8:99:68:6f:f3:c6:05:
         a7:bc:e2:7c:4c:46:41:d6:c4:f0:42:5e:44:4d:c4:4e:48:61:
         ae:15:ab:35:a4:77:97:9b:b3:5a:03:32:ae:e5:ae:fa:ea:ca:
         22:25:00:db:19:b8:d8:91:33:69:fb:a3:ec:bf:ff:10:a1:3a:
         32:85:a6:d3:2f:98:54:9a:60:0d:15:5a:c0:e2:ee:2b:c2:a4:
         a4:0e:ca:a3:ca:9a:fe:e3:08:1e:64:6c:ab:db:9e:2b:e9:5f:
         a2:08:68:99:6c:ea:0d:b3:ca:8e:18:53:2f:32:90:cb:46:66:
         0a:de:86:99:94:41:5a:f0:25:08:e5:bc:9e:7b:4d:54:dc:0e:
         37:2c:fb:e3:ce:a1:90:03:5e:18:34:11:bb:d4:55:c9:49:44:
         64:5b:4c:98:35:f7:87:51:02:c8:7c:59:b7:40:a7:6c:46:92:
         ed:12:9f:b6:5a:c0:bb:e9:f5:c4:08:8c:08:7f:84:9f:70:0b:
         9a:f8:ef:4b:a0:fd:a5:b8:55:08:a5:b5:be:c2:23:ab:db:27:
         d8:17:12:bb:a7:f5:2b:1f:8c:2e:f9:57:b2:f6:b0:fa:c4:b7:
         0d:ab:85:88:4e:ee:95:67:a4:ef:62:b7:78:f7:73:1d:2a:85:
         be:b2:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:11 2024 by rpki-client on console-ams.rpki-client.org