Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32342d3234203d3e20323637323038.roa
File:                     34352e3233302e3230302e302f32342d3234203d3e20323637323038.roa (raw, json)
Hash identifier:          XIPvUlgoIxNndFXM5t8cQ5oXn8dLVPeSoKhuw1mMuQ4=
Subject key identifier:   35:89:E0:0C:79:C6:F3:1E:31:A0:65:63:7C:EC:FC:90:D8:7B:B4:6C
Certificate issuer:       /CN=53EC22A33F497635F359DEC21142573B35201F35
Certificate serial:       753E55E4D8AA2A5FB4D816431951E47CEECD4294
Authority key identifier: 53:EC:22:A3:3F:49:76:35:F3:59:DE:C2:11:42:57:3B:35:20:1F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53EC22A33F497635F359DEC21142573B35201F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32342d3234203d3e20323637323038.roa
Signing time:             Thu 18 Apr 2024 11:57:25 +0000
ROA not before:           Thu 18 Apr 2024 11:52:25 +0000
ROA not after:            Thu 17 Apr 2025 11:57:25 +0000
asID:                     267208
IP address blocks:        45.230.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/53EC22A33F497635F359DEC21142573B35201F35.crl
                          rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/53EC22A33F497635F359DEC21142573B35201F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53EC22A33F497635F359DEC21142573B35201F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3e:55:e4:d8:aa:2a:5f:b4:d8:16:43:19:51:e4:7c:ee:cd:42:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53EC22A33F497635F359DEC21142573B35201F35
        Validity
            Not Before: Apr 18 11:52:25 2024 GMT
            Not After : Apr 17 11:57:25 2025 GMT
        Subject: CN=3589E00C79C6F31E31A065637CECFC90D87BB46C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:d0:18:d4:c4:41:ea:af:77:03:55:0c:9f:
                    db:f4:d7:e3:f1:41:1b:72:b2:72:33:e2:cd:b2:a4:
                    67:a9:f5:e0:98:5e:f2:29:52:96:27:24:9f:cb:dc:
                    db:b7:6f:b0:73:9f:cb:61:77:64:6b:25:a1:07:00:
                    27:f2:27:9d:17:91:49:91:53:e6:05:ec:cc:57:46:
                    ff:aa:fe:1e:2e:b2:ca:ba:52:b7:65:1d:1a:d1:1c:
                    2f:38:5d:13:17:0d:1e:20:ed:4e:3b:f9:5f:e9:61:
                    3e:66:20:1d:0c:bf:19:ec:57:72:13:2b:27:b0:e5:
                    35:b2:7f:3f:5c:83:d5:34:10:ff:97:f1:e9:93:15:
                    31:25:cb:c6:2c:2e:e0:62:38:9b:b7:be:38:23:35:
                    4d:18:95:e8:1a:c0:4c:23:15:c2:c6:5a:f2:78:cc:
                    11:0a:da:de:29:16:62:47:79:28:65:d2:23:3b:39:
                    c9:01:7d:96:15:09:7e:64:9a:68:24:4a:ee:dc:89:
                    58:e1:aa:8f:b5:ff:80:f8:1e:a6:92:16:57:3b:3c:
                    f6:d6:b0:65:b9:f7:5b:51:13:71:e4:ab:b9:31:21:
                    8d:e9:f7:d9:dd:9d:b9:fc:a6:f9:34:a4:ed:5c:40:
                    4a:e5:dc:26:7e:f4:c0:4c:93:d1:a3:60:c2:6c:cf:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:E0:0C:79:C6:F3:1E:31:A0:65:63:7C:EC:FC:90:D8:7B:B4:6C
            X509v3 Authority Key Identifier:
                keyid:53:EC:22:A3:3F:49:76:35:F3:59:DE:C2:11:42:57:3B:35:20:1F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/53EC22A33F497635F359DEC21142573B35201F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53EC22A33F497635F359DEC21142573B35201F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32342d3234203d3e20323637323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:6c:f3:3b:7f:c0:c2:9e:b9:21:79:e4:40:b0:60:93:3a:
         45:0b:17:4c:9d:96:27:b0:0c:a9:54:f5:a3:6b:71:ab:e6:55:
         7c:6b:ed:39:b3:57:62:b5:5c:b2:a1:56:fd:27:37:34:fb:d7:
         b6:15:c1:93:7f:a8:29:e5:aa:b5:35:10:9d:a8:8b:c4:08:1c:
         72:3b:5a:83:45:38:aa:71:3b:6e:63:af:11:3e:b0:ab:2b:3a:
         4d:99:c8:7f:ca:07:25:5a:d9:ce:05:d9:dc:e6:b5:ac:83:8a:
         5b:08:5a:ad:98:4b:b1:44:9d:30:76:6c:0c:f5:a4:8d:19:37:
         d5:62:eb:59:4a:9d:b0:1e:95:b9:60:3d:22:3c:d0:b2:00:bb:
         2a:ee:97:f6:19:36:68:51:ec:77:47:76:ec:95:bb:df:b7:30:
         69:57:ac:53:8a:51:72:b7:fd:58:30:b0:9e:82:33:99:98:a3:
         c4:b3:86:44:8d:11:96:79:a4:b1:82:1c:f7:ac:73:39:bb:4c:
         0a:52:84:36:1b:ba:4e:7e:e9:34:32:e7:c7:14:43:2f:c4:99:
         20:5b:e5:b5:fb:75:6b:e1:c6:05:86:80:60:f2:da:b1:27:ac:
         e0:b5:21:60:8a:04:82:75:30:bb:ff:71:93:43:2e:58:ee:6e:
         25:af:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:26:39 2024 by rpki-client on console-fra.rpki-client.org