Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32322d3232203d3e20323637323039.roa
File:                     34352e3233302e3232342e302f32322d3232203d3e20323637323039.roa (raw, json)
Hash identifier:          pWaxhEReD8GvNIQ8IO6Qzsq+/ZEK7UA7MqivwlnMUyQ=
Subject key identifier:   A7:8F:D3:57:E7:3D:EA:45:52:19:7D:7D:14:BB:04:37:89:EF:83:AB
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       28D7116478DB373F42E90BA29C2591D915AF31C1
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32322d3232203d3e20323637323039.roa
Signing time:             Thu 04 Apr 2024 10:56:50 +0000
ROA not before:           Thu 04 Apr 2024 10:51:50 +0000
ROA not after:            Thu 03 Apr 2025 10:56:50 +0000
asID:                     267209
IP address blocks:        45.230.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d7:11:64:78:db:37:3f:42:e9:0b:a2:9c:25:91:d9:15:af:31:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Apr  4 10:51:50 2024 GMT
            Not After : Apr  3 10:56:50 2025 GMT
        Subject: CN=A78FD357E73DEA4552197D7D14BB043789EF83AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ca:cb:1c:84:7f:c3:b4:80:8b:e1:c2:74:7b:
                    28:75:4e:f9:b5:85:b8:42:7c:99:a8:60:fc:64:e3:
                    2f:1d:9f:69:5a:92:7f:a0:c1:b2:03:e6:6e:f3:16:
                    59:11:d9:f9:04:c8:4e:34:0e:41:84:f7:e1:1f:4e:
                    63:2e:15:ff:d8:f6:28:fe:a0:1e:5c:37:e8:8d:97:
                    c1:bd:df:d5:ca:26:c3:b4:dc:2c:d4:b3:5d:6e:36:
                    b3:ed:2f:cc:9a:23:05:75:e7:e9:04:45:27:7b:47:
                    98:ed:a2:d6:86:1f:4a:d5:fa:55:78:3c:c0:5b:fd:
                    da:3d:73:e1:44:3f:f8:f8:85:ef:ef:f1:8e:a0:ca:
                    d8:16:b4:97:4c:61:33:ff:5c:d4:f4:39:41:bb:24:
                    23:43:3e:dc:62:56:c4:f2:77:aa:90:7c:04:81:14:
                    78:f9:32:49:13:2d:6c:ee:12:30:a3:e1:16:2d:ea:
                    da:c1:ea:33:bf:c6:49:df:8d:47:78:18:4e:c4:90:
                    f8:48:42:56:4b:8e:ae:f7:d2:b3:c8:68:b3:a1:86:
                    3b:0d:4f:5d:7d:4d:72:82:f1:e1:85:ea:a0:d9:1a:
                    9e:40:51:e1:fd:e0:43:57:64:77:78:e3:18:4b:96:
                    ba:ed:38:73:72:8e:23:14:90:1b:49:0e:26:8a:31:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8F:D3:57:E7:3D:EA:45:52:19:7D:7D:14:BB:04:37:89:EF:83:AB
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32322d3232203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:f0:7f:f4:44:89:43:f7:af:a2:c7:18:8f:78:18:61:06:
         50:26:5c:73:b0:19:0c:f5:15:b2:65:25:49:32:fb:5e:f5:ff:
         97:85:27:5b:f5:83:15:0b:a3:13:58:06:0e:6a:4f:f2:1b:6f:
         25:e1:57:7a:51:8e:cd:e0:9a:d9:23:f6:5d:c7:17:01:67:93:
         07:d3:35:58:15:0c:00:a7:df:50:3f:c4:9d:a1:1c:01:7b:3c:
         40:f5:08:af:93:9d:7a:f9:e3:fa:d2:55:d9:87:37:3c:4c:33:
         8c:0a:b5:c5:77:1c:09:e2:e8:80:7f:ad:f8:14:ad:1a:60:c6:
         af:88:2b:72:c6:58:22:06:7d:74:5d:b8:fd:44:c0:c5:ef:7c:
         0d:f4:b8:2e:5e:0b:b9:16:46:a1:1e:55:3c:1b:d5:5b:b3:4a:
         57:d8:b9:30:f5:47:07:20:54:43:be:76:27:f5:9b:a9:d6:2d:
         22:35:a3:24:8d:aa:bd:03:89:47:95:d7:d1:9b:12:95:57:cc:
         68:df:52:e4:4d:2e:10:d7:99:df:76:0c:d4:6a:e4:27:f9:21:
         72:50:3c:c2:24:ac:88:b2:bc:b8:64:e4:29:ed:cd:50:7a:d8:
         9a:ec:97:e5:b1:f5:3d:19:57:1c:7c:5a:04:eb:ba:d6:8f:43:
         ba:47:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org