Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
File:                     34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa (raw, json)
Hash identifier:          mjqYMvHI1Kq/6F7CPYbL5wZl9bra3AfWvhFdE3OBJ74=
Subject key identifier:   13:69:E9:8C:F7:43:D3:A4:23:89:B7:5F:64:48:2B:7D:5D:06:61:C8
Certificate issuer:       /CN=B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957
Certificate serial:       2FC2F4ACD6F06FF13A07B6200BE8116EFE10DEDE
Authority key identifier: B0:BE:4B:AA:F3:EE:81:E7:D0:28:A3:5D:2B:12:0F:B1:2C:F7:E9:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
Signing time:             Thu 04 Apr 2024 08:10:33 +0000
ROA not before:           Thu 04 Apr 2024 08:05:33 +0000
ROA not after:            Thu 03 Apr 2025 08:10:33 +0000
asID:                     267022
IP address blocks:        45.226.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.crl
                          rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c2:f4:ac:d6:f0:6f:f1:3a:07:b6:20:0b:e8:11:6e:fe:10:de:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957
        Validity
            Not Before: Apr  4 08:05:33 2024 GMT
            Not After : Apr  3 08:10:33 2025 GMT
        Subject: CN=1369E98CF743D3A42389B75F64482B7D5D0661C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:cb:64:26:55:da:73:60:97:52:e2:fd:e5:
                    89:ce:d0:d8:95:b3:df:c6:2a:5c:7f:55:1e:82:e7:
                    c3:53:ad:ea:6d:c4:21:03:76:d3:0a:a0:d8:15:3d:
                    44:1a:ce:c9:5d:52:b1:d4:98:8c:45:7d:b0:b0:cb:
                    29:2f:be:07:ea:5f:73:41:ed:9e:fc:1a:32:bf:73:
                    65:39:1c:96:ab:3a:da:fa:a8:64:15:92:7f:93:89:
                    97:83:af:5c:31:d2:cf:84:bd:e7:fb:2a:0c:79:0e:
                    46:6d:7c:06:04:8d:27:9c:80:ce:ce:73:85:da:73:
                    f8:dd:a9:96:a1:48:07:97:74:dd:c1:d4:88:39:e9:
                    e1:4d:a7:1f:6f:37:02:ba:dc:88:f8:24:8c:36:4a:
                    dd:e1:cc:0b:90:f6:0d:17:a3:dd:01:73:0c:77:e3:
                    aa:4a:23:ed:73:e2:b5:4b:6a:ba:fb:16:c9:54:33:
                    70:77:a2:5e:cb:9d:c9:a5:20:87:ca:07:4e:dd:54:
                    12:f5:68:13:fc:f6:21:03:71:33:4c:35:58:a2:0d:
                    25:15:20:f2:a5:60:8d:04:48:7e:92:7a:1f:85:4c:
                    8b:a7:1d:34:3f:8e:28:06:cb:bb:26:cc:06:25:c2:
                    2e:c9:f4:79:e9:bb:e7:55:e7:19:48:01:8a:93:b3:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:69:E9:8C:F7:43:D3:A4:23:89:B7:5F:64:48:2B:7D:5D:06:61:C8
            X509v3 Authority Key Identifier:
                keyid:B0:BE:4B:AA:F3:EE:81:E7:D0:28:A3:5D:2B:12:0F:B1:2C:F7:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:0f:0c:97:72:17:b1:8a:f7:14:70:d3:b6:72:5d:f1:8e:76:
         f3:66:54:1b:1e:e6:9d:1e:dd:4c:94:6f:13:51:fb:cd:86:e8:
         b2:27:85:e6:e0:92:0c:f5:55:2f:57:9a:21:86:33:3a:24:96:
         c9:f8:5a:31:c1:24:4e:72:93:96:92:7f:56:3e:bc:07:43:79:
         56:05:06:b2:22:43:0c:4c:10:da:09:cc:9c:01:df:f1:47:b2:
         dc:a8:86:cb:78:0f:e5:e2:46:aa:d8:6c:3b:39:e4:6d:37:79:
         4c:f7:66:fa:2f:f9:61:24:d7:4e:47:55:b1:15:9e:ab:43:10:
         64:d3:04:b3:0e:2b:a6:10:4e:80:2f:5e:81:e7:0b:aa:e1:d2:
         02:9e:5e:ea:04:78:d8:3a:2a:88:de:30:aa:02:7e:43:d8:7c:
         a4:a8:d8:e7:32:87:aa:65:5d:a7:45:72:ce:87:48:8a:2b:a7:
         d9:6c:24:eb:c8:f7:da:63:3c:2d:c8:29:50:ad:15:33:2d:ab:
         fb:03:07:4f:15:64:ff:17:fe:d6:df:73:82:b3:76:bd:fe:ed:
         0b:8d:d8:66:f2:c9:31:2c:b7:6e:76:4a:3f:e5:45:ab:3e:ab:
         50:f8:fb:16:89:99:3f:33:fb:c6:7f:54:c7:e4:8e:c2:4e:a0:
         e0:48:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org