Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231342e302f32332d3233203d3e20323638353634.roa
File:                     34352e3136322e3231342e302f32332d3233203d3e20323638353634.roa (raw, json)
Hash identifier:          hkTWOSF4esokc76LpZY8Bu0W6c/uc8gflVFgytj3tOI=
Subject key identifier:   EB:49:D8:5E:3A:69:9D:AD:3A:19:FF:2D:CF:F9:D1:41:94:55:33:41
Certificate issuer:       /CN=48B65496F1100A4BEC2A103360694784DE4E87AA
Certificate serial:       2F0568C99F94052802076A8340A3D75A0A0D77E3
Authority key identifier: 48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231342e302f32332d3233203d3e20323638353634.roa
Signing time:             Wed 03 Apr 2024 19:00:12 +0000
ROA not before:           Wed 03 Apr 2024 18:55:12 +0000
ROA not after:            Thu 03 Apr 2025 19:00:12 +0000
asID:                     268564
IP address blocks:        45.162.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl
                          rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:05:68:c9:9f:94:05:28:02:07:6a:83:40:a3:d7:5a:0a:0d:77:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Validity
            Not Before: Apr  3 18:55:12 2024 GMT
            Not After : Apr  3 19:00:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:c3:fa:d8:4c:cd:08:af:98:62:df:4c:c4:
                    8b:25:7f:1a:ca:9d:38:56:c3:7e:66:91:a3:3f:3e:
                    89:35:38:47:f9:b6:1f:91:9d:2a:eb:d4:cf:3f:ee:
                    0d:74:79:9b:c2:2a:03:4f:55:59:d4:5d:b6:5c:23:
                    9b:5e:e8:ec:93:34:d0:e8:f6:78:58:ad:c9:84:12:
                    87:23:43:9a:a6:65:cc:be:c6:8f:a9:67:da:86:1f:
                    e0:3c:3a:44:f8:4a:bf:d6:2e:44:81:96:85:24:8a:
                    62:35:5f:42:6d:6e:5e:2b:d3:5f:9d:6f:1e:e5:1b:
                    0c:a1:0e:56:0c:b7:63:c9:4a:22:8d:97:8b:ea:7b:
                    61:7b:eb:f1:13:52:35:b5:b4:09:c1:08:ce:69:91:
                    47:65:95:7f:71:09:c4:71:bd:80:36:14:59:e6:d5:
                    37:cc:a4:48:bb:44:c7:9a:48:6d:cb:06:e6:88:7d:
                    fb:89:35:f7:dc:72:d0:c9:b6:2c:01:97:49:bc:f3:
                    fa:e6:fb:2d:a3:40:bf:cd:da:e9:d5:dc:b4:18:8b:
                    dc:bd:28:b9:4a:81:75:c6:5b:75:c2:17:91:ac:e8:
                    5d:7c:78:41:eb:12:41:e8:8a:3f:e5:4a:aa:2a:57:
                    5f:31:85:a8:40:0c:ec:50:ad:96:5b:bd:e9:73:84:
                    b5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:D8:5E:3A:69:9D:AD:3A:19:FF:2D:CF:F9:D1:41:94:55:33:41
            X509v3 Authority Key Identifier:
                keyid:48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231342e302f32332d3233203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:0a:16:8e:f9:5d:e3:ae:28:a2:7d:00:9f:e5:0d:32:18:ea:
         c2:f3:3e:c7:8b:8c:4b:02:7c:a7:b1:55:af:70:18:6e:f0:10:
         35:72:d9:88:e1:e7:05:13:51:47:12:6f:74:ea:77:a6:48:a9:
         42:c8:98:6c:fa:56:da:41:90:0a:27:2b:6c:dc:83:8d:d7:c4:
         79:b3:0f:f9:21:86:0e:9f:6f:37:3f:78:e4:7f:23:52:a3:fe:
         b0:fc:44:2e:e3:b0:f6:7b:0a:d0:9b:5a:15:1f:1c:23:db:72:
         2b:ef:08:c2:62:25:d3:ac:5c:b8:21:21:78:72:db:cc:c9:0d:
         9f:38:df:44:bd:01:c3:d8:a3:8b:85:2c:6d:30:20:2e:6c:f8:
         ca:47:59:54:40:cc:3c:48:5f:49:58:39:76:4d:a5:9c:34:74:
         e7:8a:01:fe:b6:ac:df:ed:48:53:dd:16:ee:ed:31:6c:6a:d4:
         28:13:89:96:98:52:80:c1:15:2a:5b:ba:62:74:71:55:69:e8:
         bb:d6:4c:2b:d0:cd:e2:fe:7a:c3:eb:5e:e7:58:7e:72:6b:ca:
         83:c7:5a:fe:16:2a:94:20:09:91:9f:7b:43:7e:c6:17:19:b2:
         8e:61:a9:cb:0c:98:ae:63:31:ea:ef:66:e7:2a:eb:c3:2e:e4:
         3e:b8:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:03 2024 by rpki-client on console-fra.rpki-client.org