Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa
File:                     34352e3233362e36322e302f32332d3233203d3e20323731323034.roa (raw, json)
Hash identifier:          BNvkPi3F2dmuq7JP3XuNFKlKdpxuRAE+UMESzMdgjT4=
Subject key identifier:   FC:68:CD:E2:73:55:80:1A:E0:D6:FB:42:EC:15:DA:4D:54:D4:32:AE
Certificate issuer:       /CN=B8AF676772F0F28F22A98D5FCA20569D94F93703
Certificate serial:       6A0871CA4C6E6B65884FD7E5EC68A49C65EB1360
Authority key identifier: B8:AF:67:67:72:F0:F2:8F:22:A9:8D:5F:CA:20:56:9D:94:F9:37:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa
Signing time:             Fri 05 Apr 2024 02:13:32 +0000
ROA not before:           Fri 05 Apr 2024 02:08:32 +0000
ROA not after:            Fri 04 Apr 2025 02:13:32 +0000
asID:                     271204
IP address blocks:        45.236.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.crl
                          rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:08:71:ca:4c:6e:6b:65:88:4f:d7:e5:ec:68:a4:9c:65:eb:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF676772F0F28F22A98D5FCA20569D94F93703
        Validity
            Not Before: Apr  5 02:08:32 2024 GMT
            Not After : Apr  4 02:13:32 2025 GMT
        Subject: CN=FC68CDE27355801AE0D6FB42EC15DA4D54D432AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:61:a8:ed:fb:26:e9:04:ad:dc:e7:be:1f:
                    c7:75:3a:a1:23:74:c9:d3:0c:cb:d4:c5:94:cb:26:
                    ff:98:f3:0a:24:fd:5c:ba:25:44:5b:a1:84:e5:08:
                    5d:f1:2f:24:61:7f:61:eb:fb:08:2b:4f:0f:1f:41:
                    3a:2d:d4:e0:eb:36:bf:9f:f7:80:17:9c:10:34:94:
                    1a:22:aa:80:06:43:94:ac:fa:d0:6b:6e:2e:3d:8f:
                    7d:96:d5:d0:68:29:e5:43:a7:27:35:87:0d:07:97:
                    8b:e7:31:79:66:f4:1d:37:f7:96:d4:81:c4:6c:75:
                    3f:d6:cb:af:3a:cb:b7:a7:a4:ae:63:17:b6:9e:c6:
                    69:3d:90:93:00:30:bb:c2:12:8f:84:ad:2e:f3:8a:
                    33:fc:e3:b1:bc:7b:59:a6:f1:20:de:e8:15:92:02:
                    be:24:99:c9:f4:15:80:03:3f:35:ce:c0:38:b4:80:
                    02:25:28:c1:f6:c3:e7:4e:a5:df:e2:d8:55:3b:e8:
                    d1:df:fe:19:7b:db:c3:91:94:f1:3d:7c:d0:1a:cd:
                    3b:96:93:80:02:20:8a:1c:a7:d2:af:2d:dd:63:18:
                    b7:17:68:62:a4:39:5b:b6:44:58:7c:83:f8:c3:8b:
                    d7:90:de:df:1c:7b:17:fd:8f:7d:29:46:72:98:fa:
                    3f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:68:CD:E2:73:55:80:1A:E0:D6:FB:42:EC:15:DA:4D:54:D4:32:AE
            X509v3 Authority Key Identifier:
                keyid:B8:AF:67:67:72:F0:F2:8F:22:A9:8D:5F:CA:20:56:9D:94:F9:37:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:94:aa:0e:64:d4:f7:e4:de:ef:c2:dc:54:52:76:e9:99:
         cc:3d:b8:e1:59:36:2f:d6:a9:0d:d0:c0:ec:7b:d4:9e:c0:cd:
         a6:30:61:c5:83:e4:da:12:ac:33:d2:f1:17:1a:6f:2c:f2:11:
         d5:93:b9:03:af:64:b8:f8:3c:58:0e:3a:af:a2:b1:0a:6b:2d:
         52:74:0f:45:4a:a4:47:3d:01:bb:96:55:25:c8:8b:6e:94:25:
         06:03:78:08:55:96:b2:14:75:e7:32:6d:7a:74:5a:5c:0a:41:
         c3:1b:f9:09:70:17:57:ff:83:71:8c:99:c5:c1:34:a9:fc:3c:
         60:01:20:63:af:c1:ca:39:d5:3c:ad:ee:14:fc:a6:66:1d:2e:
         14:34:24:8d:d0:75:de:83:ee:73:c6:82:a1:75:73:8e:d6:ab:
         bb:62:a7:e0:77:ff:cd:05:f7:6a:a1:38:10:1d:50:cc:67:19:
         f6:b1:2a:4e:c7:1e:a5:73:93:48:f3:ad:30:8c:e4:d5:6a:dc:
         87:05:d1:dc:99:8e:1b:5b:d2:ac:46:d3:5c:48:53:e9:e2:66:
         04:00:07:ad:c1:93:15:2a:48:e6:19:e7:3f:59:3f:fb:5e:ec:
         a2:4a:6a:12:88:c2:89:c1:3f:0c:2c:fb:96:00:1c:b4:c0:80:
         6d:17:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:59 2024 by rpki-client on console-fra.rpki-client.org