Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa
File:                     34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (raw, json)
Hash identifier:          gQNJnCQ6eKgjrkso1IZFcqUOVGNkcqqMyyVh7TLwlbI=
Subject key identifier:   A1:FF:E4:7D:ED:A3:52:19:2E:0B:77:38:67:66:4C:E1:26:47:27:FC
Certificate issuer:       /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial:       1AE6F80B41A8D6B09F803F3A39C59642C3E9CAE1
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa
Signing time:             Thu 04 Apr 2024 03:00:45 +0000
ROA not before:           Thu 04 Apr 2024 02:55:45 +0000
ROA not after:            Thu 03 Apr 2025 03:00:45 +0000
asID:                     267102
IP address blocks:        45.228.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
                          rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e6:f8:0b:41:a8:d6:b0:9f:80:3f:3a:39:c5:96:42:c3:e9:ca:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Validity
            Not Before: Apr  4 02:55:45 2024 GMT
            Not After : Apr  3 03:00:45 2025 GMT
        Subject: CN=A1FFE47DEDA352192E0B773867664CE1264727FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:cc:d7:df:6d:e5:ab:28:7a:7d:f0:c0:01:
                    b8:95:c3:7c:09:34:5b:2f:cd:0a:f0:00:4b:f0:6f:
                    86:55:2b:0c:54:26:b5:7d:62:08:98:c5:95:75:b7:
                    ea:c4:f0:62:36:3b:28:f5:a9:2e:19:f5:e7:99:e9:
                    3f:6d:87:ca:2c:90:6e:da:1e:62:4b:ca:e9:1b:25:
                    33:3b:c1:d3:a6:41:8c:4a:a2:97:90:f4:69:57:c6:
                    ad:1c:a4:22:8a:ca:6a:43:15:38:f7:98:ed:c5:c9:
                    db:e1:8c:71:8c:4d:4d:81:9b:74:88:d5:5c:18:f4:
                    e6:ea:62:41:b7:c6:7b:b1:db:73:d8:cf:50:ab:c6:
                    23:da:a0:d1:b8:a8:c7:20:f2:0c:44:d1:8c:06:09:
                    c8:e7:5c:be:c7:4a:7d:b7:4c:62:c7:24:cb:d6:4d:
                    08:52:9b:cb:4d:97:83:1c:e6:a1:5f:98:2c:a4:92:
                    e0:de:0c:52:f5:ba:82:60:6e:b2:e0:ac:6c:ad:55:
                    33:dd:32:fc:d5:6c:8c:ff:a8:e6:b8:d9:c6:4f:34:
                    b5:0e:9b:2b:dc:fc:f5:14:f3:80:5d:e7:78:65:33:
                    66:28:87:a5:22:91:8b:24:c2:16:a4:bd:7d:9d:83:
                    e7:26:c5:33:ab:b1:57:21:aa:22:91:cd:f5:a8:ea:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FF:E4:7D:ED:A3:52:19:2E:0B:77:38:67:66:4C:E1:26:47:27:FC
            X509v3 Authority Key Identifier:
                keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:5b:54:6b:55:89:14:f5:c8:f5:9f:dd:a3:d5:7f:8d:6b:10:
         21:2d:82:41:d0:87:46:cb:b1:04:3b:f6:50:51:c5:93:34:fe:
         51:8e:7d:0b:b1:e6:0d:39:17:3b:14:ca:50:52:19:9a:7e:eb:
         68:f6:a6:8a:82:83:bf:4b:47:2a:ef:7d:49:f7:98:a5:4f:e6:
         13:26:50:74:c9:b7:09:76:12:76:42:60:bc:e1:8e:78:fd:1f:
         25:b9:07:fd:89:d8:82:f3:84:3b:7a:d7:88:06:78:2f:fa:06:
         eb:a0:6a:82:f1:1b:46:f6:a7:fa:fb:12:7c:45:49:9e:2d:01:
         3e:82:68:cd:71:3e:66:dc:50:4c:d5:69:91:eb:f9:82:f8:07:
         aa:b3:37:9e:84:54:82:77:64:d3:b6:89:e8:de:c1:6a:ed:5f:
         9f:13:85:ff:3e:ee:05:6c:e0:e4:56:97:10:fc:2d:49:43:3d:
         26:c2:7b:33:be:74:ff:e3:8b:5a:f9:d8:6a:e2:b5:3f:07:13:
         ef:04:61:33:e8:ca:9e:0c:9b:6c:50:60:45:8b:fd:19:65:63:
         c9:7a:f1:22:49:cc:74:81:8b:78:70:68:94:1e:4c:56:ff:d6:
         90:90:f8:d7:95:79:de:d7:1e:04:15:64:40:61:ae:86:c7:54:
         73:a6:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:41 2024 by rpki-client on console-ams.rpki-client.org