Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/34352e3233302e35322e302f32322d3234203d3e20323637313730.roa
File:                     34352e3233302e35322e302f32322d3234203d3e20323637313730.roa (raw, json)
Hash identifier:          lkuQmMehrIvSQcMZfh6UpmqHUURm/Rmy8THShS0aL90=
Subject key identifier:   E5:CE:30:3B:CC:93:C3:F0:1D:BF:8A:D2:AD:B9:AF:7C:5D:0B:4D:52
Certificate issuer:       /CN=2494434634BFFD100A79E77C627D336FE9CE12E8
Certificate serial:       36F889070421B22A73FF85E6847902254825371F
Authority key identifier: 24:94:43:46:34:BF:FD:10:0A:79:E7:7C:62:7D:33:6F:E9:CE:12:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/34352e3233302e35322e302f32322d3234203d3e20323637313730.roa
Signing time:             Thu 04 Apr 2024 06:51:14 +0000
ROA not before:           Thu 04 Apr 2024 06:46:14 +0000
ROA not after:            Thu 03 Apr 2025 06:51:14 +0000
asID:                     267170
IP address blocks:        45.230.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.crl
                          rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:89:07:04:21:b2:2a:73:ff:85:e6:84:79:02:25:48:25:37:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2494434634BFFD100A79E77C627D336FE9CE12E8
        Validity
            Not Before: Apr  4 06:46:14 2024 GMT
            Not After : Apr  3 06:51:14 2025 GMT
        Subject: CN=E5CE303BCC93C3F01DBF8AD2ADB9AF7C5D0B4D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:5a:63:33:b9:15:cc:c6:12:df:ac:32:6e:
                    f0:bb:bc:85:9e:bc:82:c4:7c:ae:30:e9:66:ac:0e:
                    7f:50:39:9f:fc:c6:3b:e7:59:ee:38:ea:f6:d1:dc:
                    cc:d3:aa:6e:fa:16:20:1b:ac:5e:ae:80:c0:4d:a5:
                    ba:c2:70:e8:d1:68:ef:96:d8:c8:42:6e:66:87:19:
                    81:5c:d7:8a:d7:8e:be:09:e4:42:78:26:6d:32:91:
                    04:c2:a7:bc:6e:18:d6:83:41:f0:da:ba:85:9b:d3:
                    39:b3:7a:5b:7a:e5:9e:2d:a9:a8:d2:17:48:4f:5f:
                    f4:6f:8a:64:3d:78:e6:20:ea:a9:b3:bf:74:67:95:
                    f1:9a:f5:dc:c5:0f:11:cf:71:fa:db:14:27:79:21:
                    37:c6:9e:71:de:23:ea:4a:a3:6c:0c:12:be:5d:78:
                    61:f7:72:68:6a:ee:ab:57:73:1f:9c:0c:37:0d:79:
                    fc:e6:85:7b:4b:ee:6d:0f:27:d1:20:67:5b:4d:b4:
                    9a:2f:60:1c:ee:b6:66:07:ad:00:f1:2c:83:8b:c4:
                    fd:88:24:ec:47:40:9d:04:fb:b9:8b:da:ea:95:4b:
                    47:91:23:9a:b0:fd:0e:e5:12:21:82:08:44:76:d3:
                    b8:c7:ee:6d:95:b4:0d:63:a6:be:7b:31:62:70:61:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CE:30:3B:CC:93:C3:F0:1D:BF:8A:D2:AD:B9:AF:7C:5D:0B:4D:52
            X509v3 Authority Key Identifier:
                keyid:24:94:43:46:34:BF:FD:10:0A:79:E7:7C:62:7D:33:6F:E9:CE:12:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/34352e3233302e35322e302f32322d3234203d3e20323637313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:2f:8a:f6:80:75:39:09:bc:aa:30:27:fa:3c:af:64:42:23:
         a9:63:23:5e:42:b5:92:06:45:33:2a:22:59:d7:e4:d0:eb:53:
         88:68:ab:aa:5b:f8:2f:b8:b8:53:bd:3d:12:23:1a:14:4f:2f:
         95:3c:be:c7:02:93:50:12:2c:4b:a7:85:19:98:94:31:a5:a6:
         f4:93:c6:fc:93:d3:96:28:d9:dc:ff:a6:80:f7:2d:40:40:2e:
         f3:6d:89:c0:eb:3c:b2:b7:d9:ab:de:1f:82:1b:d0:e8:c9:68:
         75:69:ad:de:a1:ef:25:3e:b9:08:f3:66:81:ae:ab:36:8f:b0:
         e8:47:ce:52:7e:39:0a:44:bd:94:84:f5:3a:c0:72:0d:9e:b5:
         7f:aa:6e:06:14:5b:6a:dd:90:45:f2:03:76:dc:09:c5:ef:3d:
         13:d1:8c:ff:3d:a2:ee:60:f1:9b:a9:1a:10:d8:54:e6:67:85:
         2d:5e:d4:29:50:24:b3:7e:53:8d:55:b9:53:f7:3c:35:1f:e0:
         1e:2c:66:c1:cb:1b:9c:55:6d:e1:0b:75:b0:f6:05:7e:d3:d9:
         3a:45:d7:12:97:f0:8e:b6:fc:94:86:ea:73:d9:18:c0:cd:b6:
         c7:0f:cb:ea:b1:68:7a:ee:47:d4:50:b1:8d:82:25:34:20:5e:
         50:5d:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:19 2024 by rpki-client on console-ams.rpki-client.org