Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
File:                     34352e3233302e32382e302f32322d3234203d3e20323637313435.roa (raw, json)
Hash identifier:          SweAu4w5BBLELKtum5L397vgVPHRqXo1D1ptnfDbVzE=
Subject key identifier:   37:C5:FD:2E:62:80:4A:D2:34:41:D5:8C:C6:40:A3:81:16:3E:07:77
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       1F49AA484FBCB9F8D4BC2313833AE945FBB85DAF
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
Signing time:             Thu 04 Apr 2024 02:36:33 +0000
ROA not before:           Thu 04 Apr 2024 02:31:33 +0000
ROA not after:            Thu 03 Apr 2025 02:36:33 +0000
asID:                     267145
IP address blocks:        45.230.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:49:aa:48:4f:bc:b9:f8:d4:bc:23:13:83:3a:e9:45:fb:b8:5d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: Apr  4 02:31:33 2024 GMT
            Not After : Apr  3 02:36:33 2025 GMT
        Subject: CN=37C5FD2E62804AD23441D58CC640A381163E0777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:31:44:87:e7:bb:0d:ef:77:94:56:1f:fc:
                    c8:b8:c3:4b:cb:29:7b:50:5d:b1:18:0b:aa:94:57:
                    b7:1e:01:fe:70:71:57:cc:e3:5b:9d:fb:76:6b:13:
                    af:b0:4c:3a:56:db:92:4f:f0:67:17:5b:da:10:c2:
                    83:20:e5:18:60:39:86:d9:6e:f1:f6:e3:40:a0:6b:
                    cc:ca:35:42:b2:8a:fd:d1:ee:ee:44:d5:26:8a:9e:
                    f5:ad:fd:7f:55:60:2c:09:92:af:6c:b8:7e:9c:5e:
                    b3:5e:5e:d8:02:e4:40:7e:70:2c:19:5d:f7:6f:da:
                    ff:57:03:d4:92:8f:38:83:e8:43:dc:cc:40:70:43:
                    a9:2d:1f:95:47:d0:b3:b6:af:52:68:d2:81:9a:92:
                    38:17:15:c0:59:3e:1d:6f:f6:1b:43:83:49:f8:4a:
                    f8:a5:93:01:e4:70:68:f3:e1:6f:d4:46:2e:58:8c:
                    a0:92:e0:7e:62:b4:0c:e5:62:c8:d3:c9:b0:4b:df:
                    71:03:dc:10:8a:73:4d:d1:bb:f8:4e:cc:50:0b:63:
                    79:08:0c:7e:fd:cc:4d:45:cc:8b:1f:cf:6a:bb:68:
                    85:41:5d:51:2d:6b:7e:57:b8:8e:21:bd:93:11:50:
                    40:07:5a:e2:58:49:84:89:d1:69:0a:da:0c:25:6d:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C5:FD:2E:62:80:4A:D2:34:41:D5:8C:C6:40:A3:81:16:3E:07:77
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:dd:49:b3:ad:08:c8:3d:3f:99:4e:26:2c:fe:2d:e3:09:
         31:40:16:d3:b1:ad:29:d2:f4:ca:7f:ab:a3:0e:e8:a8:18:9a:
         bd:e9:49:40:e1:81:3b:a5:e8:33:45:84:ea:2c:83:f9:20:f6:
         fd:f4:67:61:18:82:95:3d:74:c7:3c:90:21:fb:77:6e:3d:a1:
         93:3e:9d:65:86:20:f7:a7:46:86:91:cf:21:eb:1b:cd:3e:06:
         7a:7e:4d:bd:0f:25:df:03:59:96:cb:18:f1:95:55:79:77:fd:
         30:2e:d0:4f:ff:88:e2:ce:c3:0a:95:3b:c3:80:74:4f:d3:68:
         80:1d:56:79:ee:64:a8:2d:b4:df:4e:61:51:9b:dd:3a:44:bb:
         2c:03:47:dc:06:91:af:a0:aa:80:74:04:8d:70:14:e7:e6:1a:
         41:1e:ad:93:08:68:3b:06:b8:9a:9e:01:fb:7f:44:ce:81:6b:
         15:af:4a:fd:59:8e:40:63:1d:2a:33:24:2d:0f:3e:ba:7f:bb:
         d5:37:9f:69:48:8d:bd:88:a3:c3:18:79:58:86:6e:bd:a1:f1:
         15:ce:be:3f:4d:eb:dc:a5:59:61:6f:df:1c:46:53:6b:53:a8:
         95:59:93:9e:73:9e:cb:22:09:ac:1e:90:95:2f:a7:52:ca:30:
         93:57:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:30 2024 by rpki-client on console-fra.rpki-client.org