Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32322d3232203d3e20323637313735.roa
File:                     34352e3233302e3231322e302f32322d3232203d3e20323637313735.roa (raw, json)
Hash identifier:          IBirIuF/t0mEGTRZuwN951yAvB/s2t1eu40X0v/fXdI=
Subject key identifier:   2B:D5:78:DA:78:C9:6B:A7:64:95:CE:66:1C:4F:43:01:BD:EF:6A:EF
Certificate issuer:       /CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
Certificate serial:       730FD968FC1A9EC6AE49F3B2323E34748A18CB4C
Authority key identifier: 92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32322d3232203d3e20323637313735.roa
Signing time:             Tue 18 Jun 2024 17:09:08 +0000
ROA not before:           Tue 18 Jun 2024 17:04:08 +0000
ROA not after:            Tue 17 Jun 2025 17:09:08 +0000
asID:                     267175
IP address blocks:        45.230.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl
                          rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0f:d9:68:fc:1a:9e:c6:ae:49:f3:b2:32:3e:34:74:8a:18:cb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
        Validity
            Not Before: Jun 18 17:04:08 2024 GMT
            Not After : Jun 17 17:09:08 2025 GMT
        Subject: CN=2BD578DA78C96BA76495CE661C4F4301BDEF6AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:bf:1b:28:15:24:f0:29:4a:1e:d7:36:5e:
                    f3:d6:24:fb:82:cf:bd:6e:49:78:e2:9c:ae:ab:28:
                    a6:e0:d0:20:b8:5a:51:01:bb:5c:0e:f0:d4:9a:2c:
                    2c:e6:aa:1e:ed:bd:d1:ed:6d:a9:61:ea:68:6e:23:
                    e1:f2:eb:5c:06:1b:ba:4e:9d:77:b7:ec:47:dd:e9:
                    c7:21:95:91:d6:0f:2c:c1:42:2d:9c:4f:3a:70:fd:
                    ee:a7:29:73:dd:a4:be:27:e4:27:3e:a8:68:c2:5f:
                    bb:44:7a:55:ca:da:2a:b3:be:3a:03:a1:6c:30:a5:
                    bc:0b:42:07:a8:03:26:cf:07:30:8c:76:57:72:ed:
                    b6:53:56:22:7d:19:be:b5:df:3f:33:14:c4:15:3b:
                    aa:9a:0d:41:ad:38:1e:b6:a7:b1:10:bf:be:8d:9a:
                    48:73:d7:c4:5d:10:af:23:86:7d:5e:28:7c:aa:a2:
                    6e:09:f3:5b:86:96:25:af:94:8a:14:14:7a:a3:21:
                    86:6b:b1:1a:83:49:6c:84:30:4f:a9:e7:d5:01:93:
                    2b:16:fe:c1:6c:3e:0d:a0:0a:9b:f5:21:58:46:b0:
                    a4:dc:6e:2f:81:21:b4:31:9e:58:d9:c2:13:ae:90:
                    03:bc:1f:54:6b:5f:fc:a3:f7:e5:aa:b9:c0:43:91:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:78:DA:78:C9:6B:A7:64:95:CE:66:1C:4F:43:01:BD:EF:6A:EF
            X509v3 Authority Key Identifier:
                keyid:92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32322d3232203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:06:64:a1:7c:dd:83:85:a5:01:88:02:7b:08:bf:4b:3d:4b:
         03:04:6d:0b:71:ab:e2:e7:de:2e:f9:30:5f:f5:96:4f:09:59:
         64:ae:f8:9c:ce:6e:b4:44:35:a5:a4:db:be:62:a1:aa:f7:7c:
         a2:12:46:28:a7:34:7d:7c:3f:5e:dc:76:9f:0f:61:52:f4:46:
         97:e8:e9:d3:17:a3:c5:01:1b:66:87:02:28:fd:b2:45:e2:44:
         c0:b5:8e:e0:1b:28:f3:7e:dd:3e:cb:06:6c:37:0e:95:e0:1e:
         5f:dc:33:65:d0:b3:4d:75:d7:e2:c7:35:22:ce:c7:19:32:47:
         c0:2e:1c:d9:74:fd:f6:bc:63:83:46:59:4a:f0:75:d6:02:fe:
         dd:22:8b:3a:2b:5a:cd:37:ec:f4:65:e7:49:d1:c4:c6:74:60:
         16:39:98:1b:fc:a6:1f:e9:da:5c:0e:4e:20:ca:d9:5b:2b:b3:
         fe:b5:5d:17:a9:f9:79:07:b9:58:a6:97:fe:a4:c4:cf:c2:1a:
         45:27:12:9b:54:d3:ba:df:10:aa:c8:bb:87:ed:21:1d:8d:b8:
         25:3d:41:79:bb:c6:50:74:c5:64:ff:0c:30:e4:a4:c1:19:55:
         e8:48:22:25:d1:4d:cd:5f:f5:d5:96:77:78:26:cd:a4:26:c7:
         c4:b0:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:33 2024 by rpki-client on console-fra.rpki-client.org