Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232362e302f32332d3233203d3e20323637323039.roa
File:                     34352e3233302e3232362e302f32332d3233203d3e20323637323039.roa (raw, json)
Hash identifier:          rwjgh0aDe2Rmk4ll0e7XW42aPG4RkbYq+AqGJGXMl6E=
Subject key identifier:   03:23:FB:8A:83:AE:8B:5B:6E:AE:77:4C:7A:22:21:C7:D3:C9:E1:CD
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       51400E56D3992D870A7A57BBC7526FBD7383AE90
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232362e302f32332d3233203d3e20323637323039.roa
Signing time:             Thu 04 Apr 2024 10:56:50 +0000
ROA not before:           Thu 04 Apr 2024 10:51:50 +0000
ROA not after:            Thu 03 Apr 2025 10:56:50 +0000
asID:                     267209
IP address blocks:        45.230.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:40:0e:56:d3:99:2d:87:0a:7a:57:bb:c7:52:6f:bd:73:83:ae:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Apr  4 10:51:50 2024 GMT
            Not After : Apr  3 10:56:50 2025 GMT
        Subject: CN=0323FB8A83AE8B5B6EAE774C7A2221C7D3C9E1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:99:5e:48:05:a7:b7:d2:a4:ad:d0:48:a1:
                    8d:7c:4c:4c:e0:ab:da:9b:93:72:9c:78:c1:79:83:
                    99:8a:d1:5e:13:b2:e3:e2:3b:32:31:af:6c:61:37:
                    11:82:25:89:2c:ee:de:e9:e0:37:1c:46:a3:df:fc:
                    58:88:e7:97:eb:1f:5e:bd:b8:bc:2e:f4:0d:63:0f:
                    c1:7a:8b:ae:5a:f8:15:f1:b7:f4:50:e5:3d:b3:00:
                    4c:0b:f8:e5:7c:68:df:f7:f4:27:67:51:89:f6:11:
                    a8:db:76:82:c4:e6:66:18:9c:4b:a8:b4:df:4f:29:
                    7c:8f:64:15:3e:89:ee:ae:ec:87:ce:c2:5c:09:ae:
                    ae:bc:94:41:aa:52:95:ff:d8:bb:10:63:c0:6f:f6:
                    5d:5f:32:f9:32:a4:77:2f:5f:26:95:5f:fe:f3:22:
                    c0:4c:21:39:94:e2:ee:ff:bf:4b:f3:da:52:96:62:
                    b8:13:79:24:e7:9d:d6:2e:d2:42:c3:e6:09:42:b0:
                    8f:ce:89:e6:de:bb:95:f1:22:0c:0e:51:fd:98:02:
                    3b:01:50:7d:4e:d5:86:84:e5:6e:a8:12:eb:10:96:
                    f6:3f:37:f9:a9:42:33:43:38:f3:73:05:a9:82:cc:
                    e5:02:74:98:08:9a:ef:11:bd:94:2f:a9:5d:f9:23:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:23:FB:8A:83:AE:8B:5B:6E:AE:77:4C:7A:22:21:C7:D3:C9:E1:CD
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232362e302f32332d3233203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:e9:f7:0c:e8:85:c3:07:f0:eb:73:13:8b:b9:be:62:23:
         dd:4b:b4:69:04:fa:ba:92:cc:57:47:b8:c2:cc:c5:ec:43:f3:
         c3:9e:85:d0:b2:8d:70:5f:00:b7:69:8e:86:de:d0:75:2c:f5:
         9c:f3:6d:7f:2d:40:8a:67:41:ef:07:28:4e:67:c5:06:fa:e7:
         87:bf:26:c2:81:c3:6a:34:86:90:7d:d6:cd:9c:1b:2c:2d:06:
         16:e7:af:6a:1c:42:58:e6:bb:6d:6a:77:c2:4a:19:4c:32:0c:
         70:6e:76:42:83:aa:f4:23:d5:5b:ef:2f:4c:a9:36:35:44:39:
         94:45:a0:a3:bb:c0:e7:bc:00:26:68:1b:f2:fa:ed:24:8d:78:
         ff:b7:2f:94:8a:79:bb:a4:6a:28:b4:c2:9b:25:b0:d1:7c:6c:
         2d:40:53:f6:29:e7:75:12:e3:eb:0b:10:f4:6b:e2:28:37:2a:
         8c:09:aa:33:44:14:02:62:d1:c7:4c:6d:c3:e7:36:77:46:55:
         f9:2f:2c:8c:6e:d9:34:02:e5:5e:a1:e5:09:86:d7:c4:33:00:
         fe:db:bf:ad:f7:ca:3b:cc:3d:3c:65:cd:c5:a0:d0:f6:bc:d9:
         5a:73:a1:bd:1d:10:05:44:fc:84:50:b1:ea:33:90:bc:ee:fb:
         e2:e1:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:08 2024 by rpki-client on console-fra.rpki-client.org