Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa
File:                     34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa (raw, json)
Hash identifier:          fIH0q3SQiWTpqOvsTK1EkJookPraTiyshbwkS/qu2AQ=
Subject key identifier:   5D:CD:29:72:58:3D:AB:CE:94:34:23:9D:82:46:DB:06:77:78:7B:8C
Certificate issuer:       /CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
Certificate serial:       0D1C13796119102BE47CFAD431DFF9FA24838966
Authority key identifier: F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa
Signing time:             Tue 16 Jul 2024 17:23:40 +0000
ROA not before:           Tue 16 Jul 2024 17:18:40 +0000
ROA not after:            Tue 15 Jul 2025 17:23:40 +0000
asID:                     268364
IP address blocks:        45.238.240.0/22 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl
                          rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1c:13:79:61:19:10:2b:e4:7c:fa:d4:31:df:f9:fa:24:83:89:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
        Validity
            Not Before: Jul 16 17:18:40 2024 GMT
            Not After : Jul 15 17:23:40 2025 GMT
        Subject: CN=5DCD2972583DABCE9434239D8246DB0677787B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:3c:ed:53:f6:6c:2e:c2:e9:cd:9e:3d:ad:
                    ce:18:d3:00:f4:0d:12:01:31:87:fa:17:ad:6c:cc:
                    a1:a0:b1:ae:92:30:af:76:36:44:c1:ec:6a:41:4e:
                    a6:1a:6b:b4:32:78:22:bc:fd:68:a2:04:4d:c5:7d:
                    1c:6d:e3:9d:31:e8:85:67:6b:5e:01:9e:bc:eb:8f:
                    c0:56:da:e6:95:d3:db:2d:80:74:1c:ed:fa:72:cb:
                    17:81:f2:c8:68:5a:0b:d3:e5:89:b6:9e:23:08:c2:
                    79:f4:9a:52:e8:0f:a9:68:ea:57:b9:a2:b1:bf:56:
                    af:54:2f:26:61:7e:24:3a:32:ec:4c:0c:be:27:1d:
                    53:2c:7f:1f:9c:93:85:a8:77:7e:c1:5a:d7:ee:81:
                    17:50:ec:ba:7a:7c:4f:c6:9c:02:dd:84:1d:27:ce:
                    9c:0a:17:a1:ff:96:d4:1c:e6:43:b7:ca:50:45:28:
                    a6:2e:e7:3d:50:11:ae:f7:24:10:e0:af:d6:37:75:
                    54:8d:be:c6:68:bb:bf:fe:97:fd:12:08:23:07:3d:
                    ff:a7:ca:8f:8f:dc:58:95:71:69:5f:af:79:2f:56:
                    fd:8a:b7:fc:8e:f6:e2:8a:93:2c:d0:aa:46:16:2e:
                    60:df:2c:6c:3f:63:d0:14:6f:5d:78:07:69:f0:9c:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:29:72:58:3D:AB:CE:94:34:23:9D:82:46:DB:06:77:78:7B:8C
            X509v3 Authority Key Identifier:
                keyid:F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:18:dd:7a:47:85:65:69:b3:1d:2f:44:a6:c8:67:ea:0b:99:
         9a:fd:be:5a:e6:b0:14:25:33:c5:80:09:ea:79:bf:79:1b:4c:
         46:0b:d4:e0:31:38:93:2e:7c:49:18:bc:0b:1c:25:40:b4:b8:
         7b:c0:a3:5e:73:c6:db:71:70:5e:04:41:3b:da:1d:eb:e0:d0:
         92:46:af:5c:a4:33:24:26:f6:82:11:8c:1f:b9:53:7a:00:e2:
         a5:ac:d5:1e:ae:28:37:16:01:64:e6:c4:2c:5e:cf:bc:da:ee:
         2a:ee:4f:ba:6d:16:88:c4:b9:af:e0:40:65:bb:2a:3d:26:f8:
         52:22:c7:89:5e:9f:aa:9a:6d:e7:76:36:42:56:80:a4:e5:c1:
         5e:30:c4:62:5a:b6:d1:85:78:42:2c:80:fa:21:62:72:87:08:
         db:cf:f2:2b:f9:3f:7a:fb:80:03:1f:fc:37:4e:0f:66:77:8c:
         21:ac:d4:e0:7f:bc:95:7a:2e:41:ad:d8:38:b8:9d:a7:18:80:
         a5:cc:d4:7e:20:45:23:f6:9d:60:5e:d5:83:63:cb:f8:4a:eb:
         06:e3:00:78:db:09:86:d2:ba:f9:ca:29:a4:1b:05:0c:fe:e7:
         dd:0a:c0:c8:cb:c3:f4:72:62:28:4f:f3:98:dd:ef:34:6c:a3:
         10:e6:2b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:13 2025 by rpki-client