Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
File:                     34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (raw, json)
Hash identifier:          rTRrFOsYxmaLwbBjzUZsFRmrhFqaGyc0h0wJxrcntjA=
Subject key identifier:   02:BC:9E:CF:AA:A8:05:8A:B8:7E:45:6C:AB:C4:5C:CA:89:CB:99:9A
Certificate issuer:       /CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
Certificate serial:       4D5C8888ECAEBF9367E5DB0E41A092832ED8744E
Authority key identifier: C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
Signing time:             Tue 09 Apr 2024 16:49:45 +0000
ROA not before:           Tue 09 Apr 2024 16:44:45 +0000
ROA not after:            Tue 08 Apr 2025 16:49:45 +0000
asID:                     268205
IP address blocks:        45.236.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5c:88:88:ec:ae:bf:93:67:e5:db:0e:41:a0:92:83:2e:d8:74:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
        Validity
            Not Before: Apr  9 16:44:45 2024 GMT
            Not After : Apr  8 16:49:45 2025 GMT
        Subject: CN=02BC9ECFAAA8058AB87E456CABC45CCA89CB999A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:1f:70:3a:52:48:c4:8c:6b:79:b1:54:b7:
                    df:4a:ec:2a:ab:34:91:ea:ad:9b:e8:bc:b4:92:4e:
                    46:3d:5b:07:73:1c:63:95:bf:dc:3a:9f:8a:b3:38:
                    06:c6:0a:28:06:11:92:98:0d:8d:31:93:bf:60:00:
                    c9:4b:62:32:9d:29:42:f3:dd:16:01:e9:07:cc:28:
                    fb:52:7a:ea:03:20:da:97:b4:8f:13:55:5e:c5:0c:
                    c6:c8:81:5d:0c:e6:3e:08:11:10:06:56:85:9d:65:
                    01:4d:8f:4a:2e:e9:0a:a8:ab:a3:19:2c:9f:5d:a9:
                    6b:3a:e0:84:20:f6:4c:af:3c:a9:22:70:6c:08:f1:
                    59:25:1a:c4:cd:d7:2f:40:f7:ca:99:a8:3f:e3:8d:
                    6e:6b:39:51:75:58:84:ac:b3:f8:ce:f9:c3:a2:ce:
                    df:d6:a2:6c:03:19:ea:bd:76:58:c9:8f:e1:dd:24:
                    3a:9e:64:35:10:df:e1:35:f7:0a:f3:29:99:ce:a8:
                    86:11:9b:b0:4a:40:00:56:ad:f3:15:89:e9:f9:c5:
                    c1:7f:fc:8a:ca:57:43:fe:d3:f6:9d:a3:32:8e:85:
                    3c:eb:e6:13:8d:1d:9b:83:ab:a8:9c:a6:86:51:7b:
                    10:ce:1b:52:8d:40:c4:5f:59:cc:ab:7b:00:75:c5:
                    ec:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BC:9E:CF:AA:A8:05:8A:B8:7E:45:6C:AB:C4:5C:CA:89:CB:99:9A
            X509v3 Authority Key Identifier:
                keyid:C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:48:e8:1e:6f:24:20:8d:ca:fe:5a:a5:b7:20:bf:c1:82:
         34:8d:d3:0f:f7:1d:09:96:51:ff:29:8e:45:49:d9:8b:b3:48:
         9b:d2:e4:67:4c:3d:33:3c:1e:58:e4:12:72:07:18:d1:fb:a6:
         9b:f8:23:77:d0:ce:ef:56:80:16:30:7c:d8:bc:bc:a9:72:7c:
         6a:69:d7:62:a2:40:4b:c3:58:34:22:dc:0b:2d:ed:ba:12:39:
         36:af:64:06:9d:a7:fc:66:3e:aa:35:72:18:f1:89:03:fc:d2:
         2e:69:d7:1a:06:13:a8:62:45:d7:ee:33:cd:92:c2:a6:02:96:
         81:06:2e:61:ca:d3:ac:01:56:3b:98:b7:a3:30:9b:72:f4:b1:
         d5:9c:04:6e:46:c2:57:52:86:f1:09:1f:68:c2:7d:c9:15:6d:
         1e:de:95:42:91:4f:82:08:3c:d1:35:23:ae:45:55:fd:8b:44:
         35:51:d6:a1:cb:83:e5:6c:76:3a:3b:5f:ac:a9:58:b4:00:10:
         f1:59:73:e6:19:b1:24:de:9b:43:93:2d:06:c3:2c:2a:74:85:
         7c:2a:36:b0:e1:8d:2e:14:ed:71:90:ff:86:6a:76:82:d0:fa:
         2a:eb:35:26:d2:02:73:c7:80:5b:6e:28:d9:3d:38:65:4c:01:
         df:50:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:23 2024 by rpki-client on console-ams.rpki-client.org