Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa
File:                     34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa (raw, json)
Hash identifier:          ytk7/YDM+zAtloV6Yg2aeWd9bBlddRpen2xJsjXr0AY=
Subject key identifier:   D6:DF:39:A0:31:23:6A:5F:0F:15:3E:96:2E:11:46:01:52:2F:7A:94
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       2A03754EA3D08498870F1C9010B03C5AE307E777
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa
Signing time:             Thu 04 Apr 2024 15:13:30 +0000
ROA not before:           Thu 04 Apr 2024 15:08:30 +0000
ROA not after:            Thu 03 Apr 2025 15:13:30 +0000
asID:                     268261
IP address blocks:        45.236.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:03:75:4e:a3:d0:84:98:87:0f:1c:90:10:b0:3c:5a:e3:07:e7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Apr  4 15:08:30 2024 GMT
            Not After : Apr  3 15:13:30 2025 GMT
        Subject: CN=D6DF39A031236A5F0F153E962E114601522F7A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:31:6d:96:aa:47:46:82:b4:b0:2e:3d:1f:
                    92:34:6b:42:1a:42:93:4b:2b:b7:0d:11:7d:d6:46:
                    8e:e5:86:16:ed:6b:fd:ac:ea:52:29:b1:7e:f4:dc:
                    4c:04:7d:2b:68:86:c3:68:f1:17:58:a4:07:1c:46:
                    32:8a:74:98:66:09:7c:e6:bb:01:c6:71:bc:2a:9c:
                    c5:0a:47:f8:51:eb:6d:78:65:f5:f3:90:2e:06:29:
                    28:34:62:41:8b:da:a3:8c:0a:1c:78:e5:14:7b:7e:
                    f3:76:8c:3d:54:58:4a:57:b6:97:1a:17:49:1c:f1:
                    13:f9:fa:dd:1b:17:27:f5:52:e5:09:8c:38:2b:ac:
                    90:c9:3a:08:0e:95:5f:06:eb:d6:fa:c6:da:4e:44:
                    82:c9:a2:75:31:af:30:41:a1:45:3a:f2:ba:16:ee:
                    72:12:ba:f2:5e:53:38:f4:fb:35:8a:ba:d0:c5:21:
                    0d:b9:39:fe:ca:25:43:c3:96:f9:77:fc:ed:92:84:
                    03:7b:ba:a6:e9:f1:41:d6:9d:da:ed:8e:5f:06:48:
                    47:93:5c:02:fa:09:4f:f1:42:51:02:51:0d:57:71:
                    36:04:e5:62:34:9e:de:f4:d0:e1:8f:37:9a:cc:1a:
                    9e:1d:70:22:8a:45:14:dc:5f:06:b0:de:d3:9d:18:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DF:39:A0:31:23:6A:5F:0F:15:3E:96:2E:11:46:01:52:2F:7A:94
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:6a:b1:55:06:e9:0e:02:2e:df:e0:f3:23:51:9f:04:bd:1c:
         ce:16:16:7a:70:b1:35:f8:f9:05:f1:d4:9e:b1:a0:a7:cc:a5:
         95:00:ca:4c:aa:be:ad:42:c0:8c:54:8c:0c:82:4a:db:f5:77:
         f8:ed:22:2c:01:3d:38:e4:f5:ec:4e:36:20:31:cb:f1:07:2e:
         33:49:5f:69:ba:23:49:71:f7:ba:4c:90:d8:77:57:72:02:0e:
         61:c4:6d:be:5b:29:2f:0a:c9:84:53:a3:d0:f4:b2:14:8a:88:
         06:e6:e0:e8:3b:53:67:be:b7:89:20:fe:71:13:ef:9d:4c:8d:
         21:e2:eb:7f:e3:9c:c4:ce:08:4c:20:45:15:b9:e2:e3:86:d8:
         58:de:3a:9d:ec:a1:7a:a4:53:01:97:bf:69:c3:68:c5:73:e1:
         c9:79:7d:49:90:04:31:da:5a:7e:4b:51:fa:f8:7c:48:18:e0:
         ab:9b:19:b3:3f:08:29:28:54:96:81:bb:9b:8c:f5:59:e8:33:
         1f:e7:e4:56:f5:7d:da:6a:27:5a:90:81:07:ad:bc:6c:06:98:
         f0:ef:68:2e:fe:95:88:33:fb:b3:fa:7d:e3:1c:5e:e7:e4:51:
         fe:d8:ca:fd:2a:26:a9:e6:29:39:28:87:dc:4d:a4:4a:29:a0:
         1f:1f:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:54 2024 by rpki-client on console-fra.rpki-client.org