Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa
File:                     34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa (raw, json)
Hash identifier:          8AHpjPmOg0wY84VkYky30PCgse48kfBF0QOoDtsNXR4=
Subject key identifier:   13:8B:88:99:12:12:0B:9B:E9:1E:51:58:AA:2E:CB:5C:F2:72:D7:9F
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       4FF7C78404A85CD366EA53C4F3211AA1997C1514
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa
Signing time:             Sat 06 Jul 2024 01:39:33 +0000
ROA not before:           Sat 06 Jul 2024 01:34:33 +0000
ROA not after:            Sat 05 Jul 2025 01:39:33 +0000
asID:                     267350
IP address blocks:        45.233.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f7:c7:84:04:a8:5c:d3:66:ea:53:c4:f3:21:1a:a1:99:7c:15:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jul  6 01:34:33 2024 GMT
            Not After : Jul  5 01:39:33 2025 GMT
        Subject: CN=138B889912120B9BE91E5158AA2ECB5CF272D79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:2e:b0:98:ea:bd:53:e4:48:44:59:cd:1a:
                    af:eb:a4:29:23:65:69:7d:ef:14:0a:cf:c9:66:2d:
                    14:42:63:36:55:d9:fd:91:36:c5:f6:46:e2:37:aa:
                    18:ff:6d:4e:e0:53:5e:e3:19:37:ca:d3:3c:46:66:
                    df:0a:fb:ac:d1:41:c4:d1:e3:54:58:59:71:94:41:
                    16:9e:e3:eb:c0:0f:9f:eb:ab:ad:e7:ad:a1:e6:03:
                    74:60:f2:78:6a:ea:5c:76:48:91:22:8a:e3:30:0d:
                    02:ab:e4:55:9c:33:9c:e7:f1:a5:68:de:91:f1:5d:
                    7f:61:9a:3f:d5:a5:81:41:29:9f:1d:6e:96:b4:7f:
                    f6:6f:ff:59:9d:f1:c9:15:15:e5:a1:c1:31:e2:8b:
                    8d:9f:7e:02:de:9b:f8:51:35:ed:02:4c:16:84:9d:
                    bd:f1:34:b5:09:70:bb:c5:72:47:89:c2:39:e1:6f:
                    40:89:bd:06:c8:08:74:4d:ce:5f:94:fe:b4:c5:b1:
                    39:9f:a0:77:52:19:ea:36:a5:3e:04:35:cc:9c:99:
                    c3:74:3a:6f:73:09:7f:70:e6:72:dc:7d:42:35:25:
                    68:57:3e:41:46:04:38:81:aa:f8:80:1b:94:28:ec:
                    84:29:38:72:1e:4f:09:5b:cc:bd:35:96:71:7d:ec:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8B:88:99:12:12:0B:9B:E9:1E:51:58:AA:2E:CB:5C:F2:72:D7:9F
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:52:60:77:3c:4b:9e:73:18:33:9e:8d:1a:52:53:d7:10:
         ab:7f:6f:e3:55:ef:3c:47:fe:f0:fd:79:89:76:6f:63:34:a0:
         c2:d6:e1:ba:27:9c:c9:f5:0f:79:5d:0b:84:15:7b:c3:af:22:
         98:d7:35:db:61:1b:69:15:a5:fb:3a:64:b3:c7:76:e6:c4:22:
         03:74:82:53:dc:78:3d:7d:47:bd:0f:a0:12:85:6b:67:79:c8:
         4c:d3:5d:72:af:a0:e9:2a:40:97:ac:cd:bd:60:53:f5:d1:d4:
         48:9a:a2:76:23:20:d8:f5:a5:ba:75:88:e6:c8:52:71:2b:de:
         3b:70:ac:38:e3:2f:0d:d9:f8:90:d5:ea:5a:f2:bb:e6:08:17:
         83:e7:3e:82:eb:a4:43:b9:1f:8f:59:1e:72:e9:1e:64:1c:65:
         82:d0:74:1d:45:78:71:18:29:c6:0e:44:3e:62:9a:19:ca:5b:
         45:44:6a:cc:a2:dd:49:d2:dd:6c:4e:b5:e0:44:93:0f:4c:fa:
         b7:86:56:5c:45:ff:b2:ef:12:24:73:33:12:57:15:1f:13:e7:
         db:21:38:52:4d:b6:ad:18:6c:d9:78:e9:65:7f:ec:b9:47:28:
         02:e1:9d:97:24:c6:6c:65:d8:f7:42:4c:59:25:49:18:f2:85:
         a3:f8:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:53 2024 by rpki-client on console-fra.rpki-client.org