Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa
File:                     34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa (raw, json)
Hash identifier:          RMuhQFXAi45llFvK5rbpNg5OQ0P9lD/On496gY7Sryc=
Subject key identifier:   75:AB:BE:D2:EE:32:3C:7E:AF:F5:B6:E7:DF:E7:6D:FD:AC:80:FB:2A
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       075D5C38726F4F9FBF4B501563A534804C3C5D59
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa
Signing time:             Thu 04 Apr 2024 15:13:31 +0000
ROA not before:           Thu 04 Apr 2024 15:08:31 +0000
ROA not after:            Thu 03 Apr 2025 15:13:31 +0000
asID:                     268261
IP address blocks:        45.236.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5d:5c:38:72:6f:4f:9f:bf:4b:50:15:63:a5:34:80:4c:3c:5d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Apr  4 15:08:31 2024 GMT
            Not After : Apr  3 15:13:31 2025 GMT
        Subject: CN=75ABBED2EE323C7EAFF5B6E7DFE76DFDAC80FB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:be:c5:64:93:5e:fc:a7:fb:7a:3f:84:c3:
                    bc:68:b5:31:86:0f:64:2d:4f:b3:cb:98:97:b8:c3:
                    9c:88:96:aa:4f:38:8d:3f:64:2c:2d:4f:ca:15:06:
                    f2:cd:a9:44:dd:c4:47:46:a5:90:6f:3d:c3:af:c9:
                    84:2f:2e:9b:af:88:5c:1a:d6:7f:05:5d:27:eb:f9:
                    8b:ba:fb:92:90:8c:0e:c4:e8:3f:95:6a:c8:67:9e:
                    80:2e:1f:49:1b:34:2b:5b:c9:86:66:d0:c0:6e:48:
                    a8:c3:b2:64:0b:bb:40:82:76:24:f7:45:62:98:43:
                    35:29:ec:bd:8f:86:5b:17:38:77:d7:2b:15:f6:c3:
                    13:bf:9e:40:ed:ac:f4:98:c4:f9:2e:54:a0:2c:80:
                    ff:ed:0c:6c:ff:45:ed:be:46:c2:81:dc:7e:03:6b:
                    e2:1f:02:22:c7:78:30:43:d6:f9:fe:5a:1f:7e:1a:
                    f5:79:34:f3:0b:27:58:6a:a9:2d:06:8d:ad:79:40:
                    b5:8e:da:83:21:c4:a7:df:96:67:d4:ed:3c:37:e6:
                    6a:f6:18:26:36:54:6b:21:9b:36:87:68:f0:2a:d2:
                    b8:44:e4:36:bd:a6:9f:47:8e:22:ca:07:3d:70:9e:
                    81:c1:2d:80:0d:d5:73:88:58:82:54:1a:71:0e:50:
                    12:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AB:BE:D2:EE:32:3C:7E:AF:F5:B6:E7:DF:E7:6D:FD:AC:80:FB:2A
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:23:93:0d:59:08:b1:73:e4:8f:ce:30:eb:cd:4c:2d:36:5c:
         31:32:74:b6:83:63:61:7d:0c:d1:f9:7d:c7:fb:86:f2:65:10:
         4d:03:15:c8:d0:c3:d1:73:73:d9:85:97:e9:67:27:cb:36:3e:
         90:29:df:21:0f:31:a2:e1:7b:9a:45:84:24:b3:9d:0e:3b:6e:
         91:98:41:22:d2:d6:38:1b:e2:e5:11:81:b8:28:ae:0b:d1:fa:
         c5:94:ca:bc:74:de:7c:77:1c:f3:95:b1:02:2f:cc:63:19:2b:
         f5:93:17:b3:3f:08:2c:6d:c3:f3:52:ca:dc:23:88:55:4c:20:
         39:1c:07:47:c8:93:c2:58:6c:f3:c8:72:a2:fd:98:41:a2:2c:
         2b:8e:57:05:73:6c:4e:0e:d6:1a:93:96:bc:71:dd:d9:ae:e1:
         9d:da:80:3b:d6:db:70:03:4a:e8:e3:27:3c:0a:a9:3e:9c:ca:
         eb:1d:1a:f8:02:71:54:43:58:7b:a5:a3:21:b0:6f:e6:d4:cc:
         a4:b9:4d:a7:dd:3c:a7:aa:94:5a:33:d4:30:03:69:ef:8b:34:
         a5:17:b2:c2:42:17:99:8e:ad:e5:b2:4c:cb:d5:4e:53:f8:a8:
         4b:b0:b4:02:b3:f2:ae:03:1c:51:e3:0b:03:ed:22:8e:96:af:
         4f:ce:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:54 2024 by rpki-client on console-fra.rpki-client.org