Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/34352e3233372e3135362e302f32322d3234203d3e20323638323836.roa
File:                     34352e3233372e3135362e302f32322d3234203d3e20323638323836.roa (raw, json)
Hash identifier:          AyixVWWVAAkpKmodLA9uV31jQKniiwuoJk/ixtsF46E=
Subject key identifier:   DA:7E:FA:C4:8F:83:DF:28:71:0B:04:F5:B4:69:4B:6F:9D:E1:F5:9C
Certificate issuer:       /CN=5BE4378A5E0B1629852BDD255130076ED843FD31
Certificate serial:       3929900679F091FA7DB6A3B9ED04D173BE1C537A
Authority key identifier: 5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/34352e3233372e3135362e302f32322d3234203d3e20323638323836.roa
Signing time:             Thu 04 Apr 2024 18:34:52 +0000
ROA not before:           Thu 04 Apr 2024 18:29:52 +0000
ROA not after:            Thu 03 Apr 2025 18:34:52 +0000
asID:                     268286
IP address blocks:        45.237.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.crl
                          rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:29:90:06:79:f0:91:fa:7d:b6:a3:b9:ed:04:d1:73:be:1c:53:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE4378A5E0B1629852BDD255130076ED843FD31
        Validity
            Not Before: Apr  4 18:29:52 2024 GMT
            Not After : Apr  3 18:34:52 2025 GMT
        Subject: CN=DA7EFAC48F83DF28710B04F5B4694B6F9DE1F59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:8d:4b:24:73:20:e4:69:ad:e5:03:c5:1b:
                    c2:4e:36:c6:4f:61:c2:b6:52:70:d7:e2:55:7b:06:
                    1b:fc:87:5b:85:a8:1a:d4:69:d7:dc:26:19:0b:6b:
                    c8:5a:8d:90:cd:63:f7:f2:1e:db:89:0e:99:f0:17:
                    8a:ce:e7:db:0b:7b:50:ce:3c:e5:a5:41:3b:e0:c6:
                    40:b7:6b:3e:c9:99:1a:b0:15:9f:19:b3:c7:ce:1a:
                    70:1f:91:45:2e:d4:cc:ac:8b:ce:6f:02:f5:50:6d:
                    94:0e:8b:bc:a4:e8:23:49:e9:c4:b5:e3:24:4a:f3:
                    e6:7f:28:b0:0b:03:62:82:c1:5b:85:9e:cf:94:e8:
                    cf:99:b3:4e:26:7c:61:55:c9:df:3c:81:b9:d3:e5:
                    81:cf:3e:07:6b:47:7e:58:0d:ed:2e:8a:1e:75:4f:
                    fe:a4:ab:33:60:c5:0d:6a:29:ef:d3:2e:e2:e9:f3:
                    dd:1f:2d:e9:85:a4:06:b9:d3:3b:a6:3d:93:9b:b7:
                    9e:6c:ba:f4:1e:52:dc:35:73:6f:5c:97:8f:0a:a1:
                    a2:02:29:e5:7f:90:40:1c:05:28:41:da:38:1d:9f:
                    b6:cf:53:43:73:97:8a:8f:7d:c3:3b:b6:d0:71:a8:
                    b4:f5:df:74:bf:1c:af:11:fb:7f:1d:f9:10:f0:39:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:FA:C4:8F:83:DF:28:71:0B:04:F5:B4:69:4B:6F:9D:E1:F5:9C
            X509v3 Authority Key Identifier:
                keyid:5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/34352e3233372e3135362e302f32322d3234203d3e20323638323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:c2:95:bf:44:9d:ce:0c:ec:a6:ca:ac:4d:e2:55:4e:19:db:
         3f:05:56:27:98:27:ce:c6:2d:d0:7e:53:21:2b:7c:b0:08:7d:
         03:42:cf:e5:64:51:0c:25:14:a5:6f:4c:47:9e:67:0b:1d:f2:
         a0:f8:00:ad:be:f6:6c:3c:17:fc:57:06:b6:25:d7:cc:b7:d5:
         d6:2d:6e:e0:d6:ac:74:2a:8f:31:e6:2d:3c:69:07:09:62:a5:
         41:3f:23:82:89:d2:18:57:5b:bb:c6:b0:d2:84:2d:e9:1f:eb:
         f6:6a:84:78:7d:e9:7a:34:5f:2c:cc:15:d8:a9:a2:37:0e:5e:
         30:73:de:a1:82:e6:1b:0e:04:3d:7a:b0:c0:57:8b:c9:92:76:
         e7:7a:5a:2d:29:5c:b3:5b:5a:28:c9:2a:bf:c3:e7:4b:53:5d:
         c8:bc:04:76:86:66:19:9e:e7:be:dc:f4:ac:db:4b:14:b5:a2:
         56:ef:70:93:f6:f4:c1:c4:76:40:13:b2:8e:73:e2:02:8b:81:
         5c:4e:6b:60:54:9c:9d:8c:9a:86:04:d3:7d:8c:60:a5:2a:6f:
         9b:61:2f:5c:96:db:6a:c2:19:00:e7:a3:ef:e1:a2:5f:1c:d4:
         ac:89:68:68:fd:56:59:bb:00:68:fb:f7:6c:15:01:05:bd:1b:
         68:df:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org