Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138342e302f32322d3234203d3e20323637333236.roa
File:                     34352e3233332e3138342e302f32322d3234203d3e20323637333236.roa (raw, json)
Hash identifier:          QFiNIQT/+bvq7YaJ6fXd6bk3jcRTSIDtBOGEFMVXHbc=
Subject key identifier:   B5:66:E9:53:FA:BE:80:44:3C:26:DD:44:17:E8:95:A0:CE:F2:BD:4E
Certificate issuer:       /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
Certificate serial:       117F40D834D73A1055FC4DAE7CDC0C2C6F42834D
Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138342e302f32322d3234203d3e20323637333236.roa
Signing time:             Thu 04 Apr 2024 03:01:13 +0000
ROA not before:           Thu 04 Apr 2024 02:56:13 +0000
ROA not after:            Thu 03 Apr 2025 03:01:13 +0000
asID:                     267326
IP address blocks:        45.233.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl
                          rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7f:40:d8:34:d7:3a:10:55:fc:4d:ae:7c:dc:0c:2c:6f:42:83:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
        Validity
            Not Before: Apr  4 02:56:13 2024 GMT
            Not After : Apr  3 03:01:13 2025 GMT
        Subject: CN=B566E953FABE80443C26DD4417E895A0CEF2BD4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:e4:07:f8:06:2b:34:5c:d8:32:09:03:72:
                    4e:af:57:cc:7d:b1:08:cc:04:fc:5b:f1:a2:d8:a9:
                    a8:38:f8:33:1b:64:cc:90:8f:f3:92:ed:78:0e:e1:
                    b1:3e:85:3e:37:20:57:5f:f0:80:6c:56:f2:30:5e:
                    1b:fa:3f:ee:00:55:25:62:32:b6:e5:7d:df:d7:71:
                    a7:8c:34:8a:20:7b:ad:ec:34:97:66:32:8c:3d:88:
                    2e:5c:40:9a:ca:b6:22:ff:41:dd:72:40:91:7b:d0:
                    9d:9c:15:d0:b7:5f:e2:c3:62:62:c7:21:cf:54:85:
                    5c:cc:49:58:89:ef:57:7b:43:03:0d:69:35:40:65:
                    0e:e5:ec:20:f5:8a:83:db:6f:85:04:fb:a2:8d:ef:
                    14:98:1a:05:60:20:82:bb:8d:2d:a1:59:74:22:b5:
                    d6:76:43:d4:90:75:d8:36:45:b1:66:51:e2:9c:9f:
                    1e:70:33:36:28:a1:a5:3e:b6:0b:9b:3f:f7:6c:21:
                    eb:28:00:0e:07:f8:2d:a9:48:91:cd:a1:03:f5:92:
                    8f:88:50:37:f4:06:47:87:e3:28:1d:5d:8d:cb:a1:
                    0c:5e:c6:59:ec:b1:94:2f:27:e7:87:69:b5:02:a8:
                    22:1f:f6:6b:d2:96:f5:55:4d:e0:57:6f:3a:1c:7e:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:66:E9:53:FA:BE:80:44:3C:26:DD:44:17:E8:95:A0:CE:F2:BD:4E
            X509v3 Authority Key Identifier:
                keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138342e302f32322d3234203d3e20323637333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e6:68:9d:ea:0c:e7:8a:69:8e:ca:aa:da:97:fd:18:cf:a6:
         46:25:cc:2c:0f:a9:90:00:6d:3f:ad:7b:a2:82:40:be:c4:2d:
         3e:36:e5:e0:17:fb:a5:00:71:6c:41:db:65:22:47:ed:db:62:
         17:f7:2a:5f:83:c5:97:d5:e7:be:b1:ce:01:3e:c1:10:19:fb:
         5b:f9:97:be:66:3b:47:08:ff:14:42:5c:14:72:6a:7e:82:b1:
         4c:ff:1b:3c:a7:34:ae:63:a9:a9:ee:15:fb:4c:97:5c:de:eb:
         64:02:64:4b:e6:e5:b9:9a:a3:05:25:fd:29:e3:86:f0:5b:29:
         5d:1f:4a:24:3d:19:8b:6a:84:1e:6e:8e:0d:e6:58:d1:fd:26:
         5a:c6:8f:18:be:b6:ae:c4:66:f7:18:d9:de:3f:df:b3:20:af:
         47:47:a8:0d:09:b6:a2:ff:50:cf:27:70:f9:3e:ae:3e:3e:d3:
         3c:ab:94:77:bb:da:ac:33:5e:b9:56:e7:59:a0:66:d5:e4:bf:
         53:8e:49:c2:61:c4:41:6c:22:1c:c9:fa:94:e4:52:4a:34:5c:
         fa:a0:94:65:6b:33:c4:ec:5b:59:7a:bf:8f:3b:a1:c6:fd:3b:
         a6:c6:df:01:5a:ff:6a:69:4b:ab:43:28:d0:95:92:6d:25:f4:
         8f:d2:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:22 2024 by rpki-client on console-ams.rpki-client.org