Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa
File:                     34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa (raw, json)
Hash identifier:          k4Spmwbgabxa9W+pOVqzpH1KKHmcKoB/HsZl54sYVO4=
Subject key identifier:   88:A5:69:11:A0:A4:D0:75:58:DB:18:8C:10:F4:5A:21:23:2F:0E:87
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       4A76A2ACD5C4A74239440BBA250953A7D6543CB7
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     268235
IP address blocks:        45.236.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl
                          rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:76:a2:ac:d5:c4:a7:42:39:44:0b:ba:25:09:53:a7:d6:54:3c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:41:b5:ec:39:21:0a:7a:8e:28:2c:dd:59:
                    bd:ed:4a:ae:8a:89:5b:18:af:8a:c4:89:f6:3c:af:
                    e9:3f:ec:61:17:ec:3e:21:e0:30:60:43:4d:5a:10:
                    a3:06:94:01:f1:60:32:0a:07:84:f0:f4:98:fc:1d:
                    1e:81:78:be:26:67:03:39:65:1d:6e:d0:20:75:d7:
                    75:f3:a6:6d:ab:a1:40:5a:60:7a:aa:bd:e9:5b:cf:
                    8a:9b:ab:73:01:27:ea:eb:18:67:a3:3f:50:32:43:
                    94:2e:a6:bb:39:6c:ea:f0:83:dd:ae:83:d1:3d:bc:
                    80:6b:b5:c6:d2:23:18:6c:bf:fe:d0:c9:85:19:cb:
                    eb:69:e2:39:dc:31:a0:50:40:cd:8e:02:1c:ca:e3:
                    b8:ac:77:76:53:e1:cb:fb:cd:a3:f1:e0:0c:ca:19:
                    68:9d:53:72:cc:97:f2:77:2e:29:c0:a8:87:84:b2:
                    d1:c9:b1:b5:7d:9d:fa:2b:86:fa:bc:36:62:3b:40:
                    fa:2f:da:9d:22:70:01:1a:8f:3c:2e:71:43:b4:17:
                    e6:d0:0b:67:5b:31:c0:1e:e0:93:19:e4:77:3b:28:
                    7f:1e:ff:63:71:1f:f3:2a:ae:ff:2f:36:8a:4e:da:
                    6b:f3:1e:06:77:cc:bb:71:20:6a:b7:1c:52:3c:76:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:69:11:A0:A4:D0:75:58:DB:18:8C:10:F4:5A:21:23:2F:0E:87
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:c3:c9:22:0a:9a:ad:e6:0b:37:23:f1:88:0a:af:91:83:ac:
         d8:81:a3:03:ac:f2:2b:0b:89:15:50:3c:d8:86:95:9a:29:07:
         13:4c:a9:9a:3e:bf:00:c4:f0:07:63:5e:cf:0c:a3:d5:75:22:
         2b:e0:10:f4:e8:e7:75:7b:a1:fb:c8:5a:d9:46:8b:c1:f4:fd:
         ce:4d:ad:b6:59:d3:54:cc:51:90:ff:94:a0:b1:9a:13:a3:fe:
         0b:49:ff:41:89:bf:ac:c8:ef:15:d4:96:ff:f4:bc:9f:82:1e:
         83:63:59:09:2c:af:ec:fa:d5:9c:5e:28:aa:68:98:08:7b:d1:
         2f:38:13:d2:97:eb:19:cd:c7:71:3c:6c:46:90:4b:b4:70:37:
         cf:c2:30:fa:eb:48:fb:3f:e6:c7:71:26:bd:2c:86:87:a1:cf:
         e3:ef:28:4a:99:04:64:32:3d:0c:cd:e5:97:9c:b7:46:25:28:
         40:c5:46:7f:8d:9e:ad:97:47:ba:93:75:ef:7b:a6:7e:9d:c7:
         23:59:ce:24:d6:1e:eb:a5:69:5f:42:62:36:0e:c4:b2:fa:03:
         4f:79:25:fe:69:5e:76:ab:8a:a5:52:b5:74:ff:6b:37:08:11:
         81:0b:97:55:25:a4:7a:57:0f:76:90:f5:7e:e5:b4:7c:30:56:
         c6:40:9f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:11 2024 by rpki-client on console-fra.rpki-client.org