Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa
File:                     34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa (raw, json)
Hash identifier:          5qBK2Zt8vngU+wMdjDMdYbQd0Z5LH8BGIDvGAD3/xkc=
Subject key identifier:   99:A4:2B:31:8B:DB:D0:91:8C:0C:9F:C4:8A:8E:BB:09:02:7B:26:8E
Certificate issuer:       /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial:       0B59CACD63C8F134B4E0E9BC1B1CDA39F88678E1
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa
Signing time:             Thu 04 Apr 2024 23:21:27 +0000
ROA not before:           Thu 04 Apr 2024 23:16:27 +0000
ROA not after:            Thu 03 Apr 2025 23:21:27 +0000
asID:                     268331
IP address blocks:        45.238.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl
                          rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:59:ca:cd:63:c8:f1:34:b4:e0:e9:bc:1b:1c:da:39:f8:86:78:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
        Validity
            Not Before: Apr  4 23:16:27 2024 GMT
            Not After : Apr  3 23:21:27 2025 GMT
        Subject: CN=99A42B318BDBD0918C0C9FC48A8EBB09027B268E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:70:a0:9c:2d:69:bb:d0:ea:14:6e:3a:0d:
                    62:88:c8:c7:6d:33:1d:72:19:a4:f4:bf:ca:83:ad:
                    36:8e:0b:c7:5b:90:b7:0f:03:90:99:9c:9f:0d:af:
                    5f:e8:52:c8:7b:61:4f:e3:64:28:ea:8f:2b:7f:1d:
                    20:d3:5a:b0:96:f2:25:64:c4:cd:4a:42:91:e0:95:
                    f1:be:1a:14:56:c9:c4:e8:b4:5b:2d:64:0a:39:4a:
                    cd:e0:cc:9d:57:7e:a8:c7:53:7d:1c:66:3d:43:55:
                    1a:74:08:37:83:56:ca:82:f3:30:d3:47:4f:a1:6d:
                    b4:b8:83:02:99:93:81:d9:2f:9c:c0:4f:e4:63:89:
                    b5:57:fb:5e:00:2c:4d:e4:85:10:85:f8:ce:6c:60:
                    c0:71:6b:08:c9:69:06:e3:4a:6f:ed:06:b8:c2:7a:
                    ca:08:9a:5d:93:cf:cb:25:b7:e9:94:eb:92:10:14:
                    75:64:ba:04:dc:ac:ac:27:f5:71:e3:27:a7:cf:05:
                    32:57:55:cf:af:a2:d6:a1:ba:a1:62:b6:0c:4f:b1:
                    c6:30:f8:af:5a:5e:44:3e:f6:c7:e2:41:d3:06:c5:
                    ec:75:29:0d:8f:db:2f:f2:45:56:25:6e:60:ef:23:
                    73:63:6a:33:a4:80:bb:65:9c:24:e3:0d:07:9c:2e:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A4:2B:31:8B:DB:D0:91:8C:0C:9F:C4:8A:8E:BB:09:02:7B:26:8E
            X509v3 Authority Key Identifier:
                keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:20:2a:0b:fc:5f:6a:24:ef:63:0f:ba:c5:2e:4e:3f:3d:db:
         36:fb:bd:75:de:da:95:16:19:78:ac:0c:75:d7:b8:01:40:5a:
         fb:e3:26:72:dc:b1:5f:b8:e9:cc:e6:70:4b:2a:6c:73:1a:dc:
         66:40:e5:7f:0e:da:68:cf:45:bc:09:ee:56:36:e3:f6:06:07:
         cd:f8:b8:34:79:ae:2e:2b:11:3c:02:5e:40:0a:da:1f:84:84:
         ac:b5:72:65:bd:5d:a7:a4:97:69:e1:e6:c2:d5:fe:c6:23:27:
         12:77:e3:3c:b8:75:66:6d:35:f2:ad:22:7e:09:42:23:f1:99:
         1b:73:f7:72:1a:b9:23:72:72:09:5c:41:f7:a8:27:ee:bc:8e:
         6f:59:a8:cb:a1:1a:da:38:a0:6a:e7:9f:06:bc:89:e3:75:9b:
         59:c4:f7:d3:95:98:28:d2:11:70:60:0a:a6:3d:8a:0d:df:3f:
         38:34:b3:f0:78:f5:ac:ff:0a:1f:de:5c:2e:7a:2c:c5:36:78:
         6e:3a:8f:c2:19:b8:35:78:ea:22:1a:41:e8:fd:79:06:86:c2:
         0a:ed:2f:48:6a:fc:ef:1d:cf:13:37:2b:c1:36:d7:21:e2:74:
         1e:30:26:a5:63:6e:a7:db:91:e6:53:64:cc:d3:06:0c:f9:7f:
         b3:35:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:53 2024 by rpki-client on console-ams.rpki-client.org