Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231342e302f32332d3233203d3e20323637313735.roa
File:                     34352e3233302e3231342e302f32332d3233203d3e20323637313735.roa (raw, json)
Hash identifier:          KoG6goSES+VRWzjv+HGfbPkuPlhifqmrehQz6Vgbzmo=
Subject key identifier:   05:5D:94:0A:DA:EF:86:F0:AD:3C:92:D9:C3:66:AB:F0:E6:C5:30:B1
Certificate issuer:       /CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
Certificate serial:       27298D828D3C5193EFFF994B19F99897C6B27448
Authority key identifier: 92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231342e302f32332d3233203d3e20323637313735.roa
Signing time:             Tue 18 Jun 2024 17:09:08 +0000
ROA not before:           Tue 18 Jun 2024 17:04:08 +0000
ROA not after:            Tue 17 Jun 2025 17:09:08 +0000
asID:                     267175
IP address blocks:        45.230.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl
                          rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:29:8d:82:8d:3c:51:93:ef:ff:99:4b:19:f9:98:97:c6:b2:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
        Validity
            Not Before: Jun 18 17:04:08 2024 GMT
            Not After : Jun 17 17:09:08 2025 GMT
        Subject: CN=055D940ADAEF86F0AD3C92D9C366ABF0E6C530B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:55:4c:6e:30:d3:5c:aa:76:d1:90:88:b3:
                    ff:ec:6c:13:e4:e7:a9:3b:67:d7:56:18:a4:ad:6e:
                    e6:03:a8:19:90:d4:3c:ef:fa:eb:ad:a9:34:92:fa:
                    d6:c9:00:6b:b7:9d:e2:21:31:29:c9:55:43:b1:19:
                    7b:60:98:fa:c1:d6:1a:cf:c3:9a:9b:a9:b0:dc:a9:
                    61:5a:0f:a6:cb:e5:a0:55:7f:82:e8:96:00:f8:16:
                    d9:5d:5f:38:60:53:ae:50:94:c5:31:ba:07:85:1b:
                    e7:86:20:43:b1:ef:b9:67:91:3e:59:ba:c9:fc:fd:
                    eb:08:42:6a:40:22:96:06:c0:d9:cc:04:7c:ff:9f:
                    28:44:d3:09:ed:4f:3b:d8:9d:f4:17:a1:57:9b:3f:
                    60:67:8f:23:a5:df:0b:e0:c4:99:cf:ce:9b:fb:31:
                    e8:2d:77:25:d8:94:4a:69:d2:0e:ac:0b:f3:2f:3e:
                    68:bc:30:3a:b7:8c:c0:f2:ed:d6:5d:ef:3e:dc:72:
                    c3:0e:aa:c5:2d:ee:7f:ee:d0:b4:66:55:ce:6d:f8:
                    1d:c7:7b:28:7b:07:33:cd:d4:e2:0b:0c:7d:ea:af:
                    61:60:99:f9:1d:d5:3e:29:50:23:7e:68:f5:a3:98:
                    b1:84:92:7b:89:2e:e4:f8:cb:d0:4c:4a:d5:e0:77:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5D:94:0A:DA:EF:86:F0:AD:3C:92:D9:C3:66:AB:F0:E6:C5:30:B1
            X509v3 Authority Key Identifier:
                keyid:92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231342e302f32332d3233203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:dd:15:5e:5e:9c:18:60:4a:41:f3:e3:e7:b5:7e:8a:cb:
         2c:12:35:42:ca:7d:ae:0f:d5:6d:e2:2d:83:04:71:3b:ef:88:
         14:06:34:d3:56:8b:7f:fb:aa:a7:42:59:a8:a7:12:4a:a8:9b:
         77:c9:d3:02:50:24:e8:dc:12:1b:1c:2f:55:19:de:18:56:be:
         c0:35:1a:61:77:82:12:52:ab:65:01:d2:a1:0d:af:96:e1:c7:
         d2:48:de:f2:84:d3:d0:80:a8:05:c9:ab:6f:15:1e:89:80:25:
         5e:fa:00:c1:02:24:9a:a4:0f:e8:a8:e9:26:af:e7:31:1b:9c:
         cb:56:1c:1a:8e:d4:f4:5e:84:04:18:4d:de:6d:6a:f6:1d:2e:
         66:59:38:c3:c4:24:ac:81:e1:b6:fa:20:24:ab:f8:84:2e:5a:
         6c:af:be:32:39:75:d6:18:f1:fe:92:8b:28:dc:20:54:92:f9:
         55:99:03:bc:17:13:9f:d9:3a:75:9d:bc:cb:60:20:79:72:1b:
         2b:f4:8e:fb:2c:a6:eb:65:73:d7:cb:66:e5:5c:0a:3c:9b:8e:
         a7:48:af:b2:e2:d7:5b:23:6e:46:74:1f:37:72:21:f3:68:a3:
         fb:63:25:4e:92:74:15:97:ce:66:6c:31:61:78:8b:3f:fc:23:
         c0:ba:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:23 2024 by rpki-client on console-ams.rpki-client.org