Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa
File:                     34352e3233302e33302e302f32332d3233203d3e20323637313435.roa (raw, json)
Hash identifier:          vKQaF51fvFu+NgqihhHudiF+Pn/Mk7GqvJzP9QMVi7U=
Subject key identifier:   7F:4B:68:91:E0:D8:BA:DF:53:B2:32:39:A2:19:E6:84:8D:7E:B3:D4
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       7670FAB2143D6C92133E91AE49ED83616B67ED64
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa
Signing time:             Thu 04 Apr 2024 02:36:33 +0000
ROA not before:           Thu 04 Apr 2024 02:31:33 +0000
ROA not after:            Thu 03 Apr 2025 02:36:33 +0000
asID:                     267145
IP address blocks:        45.230.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:fa:b2:14:3d:6c:92:13:3e:91:ae:49:ed:83:61:6b:67:ed:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: Apr  4 02:31:33 2024 GMT
            Not After : Apr  3 02:36:33 2025 GMT
        Subject: CN=7F4B6891E0D8BADF53B23239A219E6848D7EB3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:80:8c:e4:38:93:25:66:ec:82:3d:bc:c7:
                    be:17:90:70:62:34:52:6c:8e:67:1a:7f:ab:1d:68:
                    88:15:88:ad:75:e9:3c:f0:5b:a4:e3:dc:8a:6a:44:
                    0b:d6:1e:7e:63:89:8c:37:63:87:dc:b8:cb:be:0b:
                    24:96:dd:b7:cc:03:93:9e:07:b5:eb:0b:10:d8:a2:
                    44:c8:ae:b3:b6:2f:83:65:9b:a6:78:cb:b9:0a:d4:
                    40:a5:1c:4e:5a:cc:37:d2:15:e6:e4:5a:d9:d0:c8:
                    5a:23:fd:60:59:da:05:89:43:e5:a5:81:ac:8d:4e:
                    f8:42:7e:8b:94:ba:95:5c:91:3b:80:41:5a:92:bd:
                    f3:87:a1:b6:36:7d:33:1f:79:0b:6f:ff:4b:52:4b:
                    dc:0f:aa:e2:be:46:df:38:2f:76:6e:99:86:85:cb:
                    17:a8:1d:78:29:eb:01:cc:ba:fe:bc:5c:67:b6:90:
                    55:d6:8d:3c:a7:83:2d:4b:f8:86:d4:87:9e:14:4e:
                    e3:64:d3:af:db:9d:5e:05:4f:1b:bf:d7:9c:d1:49:
                    91:76:92:f7:ed:f3:42:30:6d:d0:59:a1:34:60:91:
                    19:18:cd:ae:5c:87:ba:7f:d2:25:01:6e:8e:34:7b:
                    84:7c:47:5e:8a:6a:a1:80:97:d5:cd:68:17:a9:48:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4B:68:91:E0:D8:BA:DF:53:B2:32:39:A2:19:E6:84:8D:7E:B3:D4
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:b7:a3:06:a5:f3:80:07:c7:65:19:a2:f1:b4:3d:00:bd:4f:
         b9:59:f5:e0:11:2c:64:1d:25:18:f2:ef:86:e1:89:fb:34:90:
         be:a8:c6:1e:1a:26:bc:b5:11:fb:a4:e2:a5:91:b6:6a:cf:d5:
         39:f0:50:93:bd:54:27:46:c7:b4:c5:8d:df:99:13:82:a7:a8:
         e9:96:31:92:bc:77:56:65:c7:5e:2c:f7:7a:5b:c5:8c:b9:25:
         f4:1a:99:91:9b:13:68:3c:ad:6e:e1:6f:85:8d:25:6d:da:91:
         c2:56:e2:ca:de:52:40:76:b7:d5:cd:b8:5c:cd:86:9e:cd:d4:
         36:cd:42:14:5a:0b:e7:28:16:e9:7a:c8:56:82:a7:41:a5:05:
         fe:11:a4:52:82:18:19:e8:b8:34:79:51:3d:4d:42:9c:fc:25:
         eb:5c:e6:3a:38:b1:9b:04:0c:52:59:86:f2:0a:ed:a6:3c:6c:
         7b:3c:46:27:22:ac:70:58:90:f7:88:8b:54:aa:74:ad:fd:2a:
         20:04:67:54:d6:46:76:b0:13:dd:24:7e:c8:12:fc:83:85:c1:
         03:59:d0:17:3d:6d:78:b3:87:05:35:94:c9:69:ad:1b:66:2b:
         33:15:e9:7a:29:6f:ea:5d:93:2b:a5:9a:26:0c:17:ca:3b:78:
         f2:bb:77:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:56 2024 by rpki-client on console-fra.rpki-client.org