Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa
File:                     34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa (raw, json)
Hash identifier:          +S5pN/IwDoFBzJR85M5YoVGYwkvjmes/LdYL941VT7I=
Subject key identifier:   D5:D4:D5:7B:1C:5F:C5:D8:48:5D:D1:42:7B:30:0F:C0:80:B3:A6:6B
Certificate issuer:       /CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
Certificate serial:       3D989A08A1F304689E03535F19B8A2CC6ADAA6C8
Authority key identifier: 43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa
Signing time:             Thu 04 Apr 2024 13:17:53 +0000
ROA not before:           Thu 04 Apr 2024 13:12:53 +0000
ROA not after:            Thu 03 Apr 2025 13:17:53 +0000
asID:                     267283
IP address blocks:        45.232.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl
                          rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:98:9a:08:a1:f3:04:68:9e:03:53:5f:19:b8:a2:cc:6a:da:a6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
        Validity
            Not Before: Apr  4 13:12:53 2024 GMT
            Not After : Apr  3 13:17:53 2025 GMT
        Subject: CN=D5D4D57B1C5FC5D8485DD1427B300FC080B3A66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:8e:ec:a5:92:76:29:e9:a8:1f:c8:c2:9e:
                    0e:e5:8f:78:3a:dd:15:85:39:21:dc:aa:42:b8:88:
                    f3:e0:94:e2:5f:4d:8b:22:e4:35:4d:20:73:f8:f3:
                    c8:85:06:f6:dc:1b:06:7a:5f:c9:82:4a:c7:0d:0d:
                    00:ec:dc:1a:20:73:41:bf:a0:49:14:ed:ae:3f:6a:
                    03:d9:ae:96:65:13:d9:fc:09:0f:49:00:b2:16:d5:
                    5a:31:42:67:a8:d7:27:1a:6e:59:3a:9d:56:cd:a9:
                    5f:79:da:2a:f7:76:3c:e9:4a:fd:b0:81:e1:13:40:
                    1f:37:0a:b2:20:61:0c:6e:02:69:6a:c9:4c:bd:44:
                    2f:18:9f:10:a5:de:55:fc:22:81:a1:1c:fb:e2:04:
                    3d:d4:ef:2c:20:30:90:08:ed:44:48:5d:8a:86:cd:
                    cf:85:fe:e2:84:61:16:6f:d8:57:23:83:03:13:a2:
                    78:a7:c7:c3:70:00:23:7f:85:c3:a4:7f:6b:77:9d:
                    c9:3d:ce:b4:18:8c:3e:55:21:f7:69:10:17:8e:da:
                    10:0f:f8:3e:58:ad:e1:78:af:00:d5:f6:87:06:61:
                    05:0a:de:e6:6c:64:77:ef:86:33:47:62:b2:10:dc:
                    d1:b7:1b:c4:72:21:26:d9:1c:6f:87:9c:3e:d8:da:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:D5:7B:1C:5F:C5:D8:48:5D:D1:42:7B:30:0F:C0:80:B3:A6:6B
            X509v3 Authority Key Identifier:
                keyid:43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:b7:52:33:13:02:19:61:89:e1:1e:e5:91:1d:4a:d3:34:
         fe:4e:37:8b:87:3b:e5:28:cd:6e:68:2b:a1:58:da:86:79:1b:
         d6:9a:1b:cd:ac:17:64:40:5f:eb:e3:67:ac:97:f8:29:c1:54:
         95:10:36:9c:20:02:64:f7:ed:65:67:e7:b8:a2:6d:19:13:ad:
         82:57:33:95:43:da:58:42:31:bd:8f:a9:49:4b:1d:f7:3a:bd:
         4e:57:75:50:10:99:23:9b:79:d6:ed:70:8b:8a:cc:1d:3c:eb:
         d0:a6:7f:21:e9:e1:8d:b6:f6:27:98:0e:4c:0d:78:54:3a:2a:
         0b:c0:2a:be:a9:db:10:fe:fa:37:84:d3:a0:00:57:7d:52:0e:
         a5:7a:de:89:93:2c:6b:83:2c:b0:56:35:60:9e:88:80:ee:c3:
         ca:7e:ae:d8:8f:06:b5:ab:c0:4a:7f:88:b7:89:3c:fe:df:fb:
         91:b6:b7:94:d3:9a:69:8e:94:ae:3d:9f:79:4f:ee:58:2c:70:
         f2:4c:75:33:84:95:89:ff:51:8f:8e:ee:4f:52:92:8a:1e:28:
         45:72:28:e3:41:57:02:c5:36:ca:c0:0c:65:18:ae:0d:63:a0:
         02:74:30:79:8a:e7:17:c1:b8:4d:bf:5f:f8:2b:f3:b3:16:4f:
         39:de:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org