Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32332d3233203d3e20323637313735.roa
File:                     34352e3233302e3231322e302f32332d3233203d3e20323637313735.roa (raw, json)
Hash identifier:          T3F78BXFVLxFhyclBDiuDhB86tp1VjXbQpMtTetm3zU=
Subject key identifier:   94:7A:26:27:AB:89:FB:25:D2:04:B1:61:9C:59:68:0A:0E:46:85:3B
Certificate issuer:       /CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
Certificate serial:       547956067DC676DA669B0F2828A13AE86C69E2B3
Authority key identifier: 92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32332d3233203d3e20323637313735.roa
Signing time:             Tue 18 Jun 2024 17:09:08 +0000
ROA not before:           Tue 18 Jun 2024 17:04:08 +0000
ROA not after:            Tue 17 Jun 2025 17:09:08 +0000
asID:                     267175
IP address blocks:        45.230.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl
                          rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:79:56:06:7d:c6:76:da:66:9b:0f:28:28:a1:3a:e8:6c:69:e2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
        Validity
            Not Before: Jun 18 17:04:08 2024 GMT
            Not After : Jun 17 17:09:08 2025 GMT
        Subject: CN=947A2627AB89FB25D204B1619C59680A0E46853B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:19:06:c6:49:fa:87:dc:98:88:f9:37:63:
                    23:5b:6c:7c:27:43:9b:a7:9c:a0:09:e1:d4:03:05:
                    12:4c:41:08:ae:a4:d9:dd:10:0a:54:37:1e:25:c7:
                    a3:f2:46:5c:44:66:a9:75:a9:0e:55:11:98:a1:28:
                    ca:84:b3:bd:a5:91:a3:44:e3:62:43:95:3c:ff:d0:
                    11:65:92:c5:82:08:8a:49:66:9f:88:11:1a:f6:30:
                    12:e5:88:5a:ca:eb:1b:25:6b:6d:16:73:1b:7a:2a:
                    11:88:e4:10:c9:69:0b:de:98:ee:a1:32:4c:a3:88:
                    68:5a:8f:26:12:68:bd:3e:7d:6e:11:5b:a6:ea:64:
                    84:fa:9b:2e:c0:e2:7b:9a:56:5f:30:25:d6:39:07:
                    dc:e1:fe:ed:ba:cd:1f:50:cf:e8:fb:ca:08:77:44:
                    c0:3f:0d:37:f6:d8:0d:ef:d6:5c:22:dd:a3:d8:9d:
                    2a:16:d8:47:d3:2f:af:39:ca:08:49:a5:73:50:90:
                    e6:28:62:7b:36:ec:cb:cf:e9:9b:a4:99:0d:53:dc:
                    d0:6b:1d:9c:b6:6d:a2:38:1b:c5:64:bd:a4:c0:d2:
                    cf:36:c3:f3:88:5f:fb:13:be:47:41:78:62:5c:b9:
                    d1:d5:92:80:63:0b:7a:0a:25:61:61:88:fd:ce:43:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7A:26:27:AB:89:FB:25:D2:04:B1:61:9C:59:68:0A:0E:46:85:3B
            X509v3 Authority Key Identifier:
                keyid:92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32332d3233203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:a2:a2:b8:41:87:99:7e:fd:08:f6:b7:ea:42:77:38:c2:
         20:52:d7:48:1b:e8:f2:33:8e:96:9e:c9:69:65:1a:84:a5:a4:
         2c:78:f1:5d:5b:c2:5f:80:b0:23:4b:85:19:9c:06:58:88:85:
         6c:c5:cf:4d:82:5b:20:b9:60:cc:1f:74:e5:4a:2b:b8:7f:92:
         dc:f7:d0:c8:36:9d:19:55:b3:5f:ac:17:e4:54:ad:9d:d2:c0:
         75:43:9f:c2:ab:8c:f5:31:f4:49:ae:90:0f:23:d1:39:b9:c3:
         48:96:02:a5:7f:19:76:c6:df:e4:5e:75:43:80:cb:9a:9a:bf:
         49:21:d1:5b:9d:45:94:d7:c8:a8:dd:6d:35:30:36:d9:bb:d3:
         b3:6d:e3:f6:13:e3:6c:ee:3e:31:db:ed:48:90:09:5c:53:9b:
         45:03:c8:61:61:46:3d:94:d4:04:81:89:98:72:b4:e9:ae:11:
         5d:23:f1:85:5e:c7:d1:83:b2:b7:13:a2:95:dd:f7:3b:ec:6c:
         64:c7:2b:a9:04:ea:08:36:d2:c6:12:68:9c:46:0b:88:d5:04:
         27:f2:88:0f:08:e3:73:65:2e:0f:5d:c3:6f:8c:22:11:72:07:
         fd:c6:d4:52:cb:6e:24:4e:c0:f9:f5:33:d4:39:48:e9:89:15:
         37:5d:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:23 2024 by rpki-client on console-ams.rpki-client.org