Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa
File:                     34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa (raw, json)
Hash identifier:          jS/sq3uYyioMez6EcVMB0onTuJL77AQj0ZY8ktUSpT4=
Subject key identifier:   8D:22:11:E7:F8:FA:51:3D:69:6E:3F:32:1C:00:49:92:62:40:0A:5B
Certificate issuer:       /CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Certificate serial:       10FF9B631BA3AC0737A8A689F5690BEF71491713
Authority key identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa
Signing time:             Thu 04 Apr 2024 12:27:48 +0000
ROA not before:           Thu 04 Apr 2024 12:22:48 +0000
ROA not after:            Thu 03 Apr 2025 12:27:48 +0000
asID:                     268250
IP address blocks:        45.236.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl
                          rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ff:9b:63:1b:a3:ac:07:37:a8:a6:89:f5:69:0b:ef:71:49:17:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82564553AE299B22FAC12CA23483B4453FF22D0A
        Validity
            Not Before: Apr  4 12:22:48 2024 GMT
            Not After : Apr  3 12:27:48 2025 GMT
        Subject: CN=8D2211E7F8FA513D696E3F321C00499262400A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:57:8d:d2:b4:b6:ad:4b:1a:c8:bc:db:6c:
                    fc:cf:2f:9a:34:91:19:92:17:e4:df:fc:b3:0f:27:
                    f1:e6:02:74:d0:49:c8:e0:5c:e5:c0:e1:86:86:70:
                    7f:d1:14:b2:46:49:ae:dd:53:e7:b0:65:1f:49:3e:
                    1a:41:bb:18:bf:b3:eb:cb:38:a0:b8:92:8e:e8:d5:
                    87:84:39:50:84:94:1e:67:6a:57:b9:96:87:3b:6b:
                    4e:53:d8:eb:d6:2a:86:76:d1:76:ec:37:67:bc:12:
                    22:93:dc:94:bd:e5:3a:75:d3:d1:a7:b3:12:67:f9:
                    40:92:b3:9d:ff:74:d3:fc:90:a8:e7:3b:15:e5:85:
                    be:62:2a:a8:9b:8f:de:39:c5:a5:3c:93:08:07:05:
                    a8:3d:61:d4:80:28:93:42:a7:59:74:fb:c9:05:84:
                    d8:db:03:3e:62:9c:cc:ce:a7:ed:6e:77:9c:94:58:
                    08:02:f3:43:63:b5:1b:e5:bc:42:2d:05:d1:fc:88:
                    58:51:2f:d0:dd:ef:ca:b4:bc:f1:dd:5f:10:48:8b:
                    fe:74:83:2a:ab:14:82:e0:91:0a:6e:1c:2b:d0:be:
                    00:07:88:7f:ca:fd:c0:79:7f:9e:04:d0:21:e1:41:
                    74:50:ac:3a:7b:70:54:fc:08:a1:81:01:34:de:2b:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:22:11:E7:F8:FA:51:3D:69:6E:3F:32:1C:00:49:92:62:40:0A:5B
            X509v3 Authority Key Identifier:
                keyid:82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:2b:a1:8c:15:92:f0:8e:5c:fa:3b:55:84:6a:30:dc:45:d5:
         6f:93:07:0c:14:80:a7:9d:7b:f9:81:3a:16:0d:29:45:f1:17:
         39:78:4c:27:b1:60:4b:f1:6d:ee:0d:3d:15:4c:32:f9:d0:69:
         10:64:df:73:25:2f:e1:4b:63:90:80:ae:3c:51:82:60:ad:ec:
         34:cd:b5:7a:2b:f0:f7:67:66:41:e0:4a:2c:a0:2a:b0:af:ab:
         87:ad:ae:5b:00:e5:17:5f:35:05:06:9b:e0:32:c7:0e:4b:14:
         74:07:ae:0e:f6:92:c2:32:47:f5:9e:8e:41:72:9c:95:27:71:
         b9:05:d3:80:89:63:1f:e7:9b:70:1a:e0:5b:50:e5:dd:a0:9b:
         45:3d:51:ac:ab:54:02:53:97:01:20:b9:f3:67:74:c3:26:5a:
         38:89:f5:a8:a0:5b:33:4a:91:55:89:b3:41:2e:ad:3c:6d:8f:
         ab:bb:cb:56:60:7f:76:fc:20:70:dc:1a:c4:c6:1d:b9:b7:a2:
         dc:50:29:1c:64:a7:e6:06:bf:54:ad:5e:43:09:6f:1f:ee:30:
         1c:f4:b7:49:0a:80:53:88:b9:4c:aa:6c:8e:00:87:43:93:58:
         71:93:1f:d5:bb:7a:50:57:4f:e5:d3:10:94:e4:a9:9a:b2:16:
         53:b3:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org