Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
File:                     34352e3232382e38362e302f32332d3233203d3e20323637303637.roa (raw, json)
Hash identifier:          WKOxHc2XvpBpRA7AYnNGDJelwyfoY7cbwbnCW23fbA8=
Subject key identifier:   14:74:80:DE:0E:74:62:39:2A:C4:A8:34:9F:65:CE:EB:0E:6C:5B:FE
Certificate issuer:       /CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
Certificate serial:       2499A387D1339981682692B97204F7AF4CCCC553
Authority key identifier: E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
Signing time:             Thu 04 Apr 2024 13:38:10 +0000
ROA not before:           Thu 04 Apr 2024 13:33:10 +0000
ROA not after:            Thu 03 Apr 2025 13:38:10 +0000
asID:                     267067
IP address blocks:        45.228.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:99:a3:87:d1:33:99:81:68:26:92:b9:72:04:f7:af:4c:cc:c5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
        Validity
            Not Before: Apr  4 13:33:10 2024 GMT
            Not After : Apr  3 13:38:10 2025 GMT
        Subject: CN=147480DE0E7462392AC4A8349F65CEEB0E6C5BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:ec:63:13:16:54:f3:87:d0:fb:59:20:0e:
                    b9:d4:f2:bd:b9:8b:38:6d:e0:77:9f:2a:34:66:8d:
                    75:21:d9:dc:07:26:1f:9c:91:8e:89:cd:7c:e9:dc:
                    0a:43:bf:25:ce:f2:c9:76:06:b6:5e:d2:af:22:8f:
                    19:e7:a1:3a:54:b1:5f:d7:ef:d5:f7:1e:be:63:b2:
                    45:aa:6c:93:ef:c7:4f:84:40:dc:5d:d6:82:6e:d9:
                    ae:c5:23:bb:e4:7b:36:2f:13:f7:fc:95:da:e8:a7:
                    05:76:dc:38:ed:03:90:d3:8a:f2:b6:50:9f:33:20:
                    81:19:77:f4:e8:b5:e1:8d:ad:0f:40:f2:0c:2c:47:
                    0d:35:fe:00:3c:19:00:a1:a5:57:74:40:f8:ed:7b:
                    4c:64:3d:7f:af:d3:18:8c:79:dd:d7:dd:3c:af:56:
                    35:9b:d6:c8:69:06:fa:cf:08:da:f1:51:ad:c0:7e:
                    78:2b:f5:e3:03:2f:d0:ba:17:18:85:81:9a:33:cc:
                    e6:38:5c:a8:e4:4c:ca:7b:ba:88:b5:1c:c2:0a:82:
                    3a:52:9e:9b:31:38:2e:74:2e:49:43:5d:39:20:28:
                    7c:01:a3:00:a3:ad:0c:a2:f2:64:09:37:ef:e2:6b:
                    53:e6:fd:d7:a9:a3:db:b7:70:bc:60:f8:77:04:8a:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:74:80:DE:0E:74:62:39:2A:C4:A8:34:9F:65:CE:EB:0E:6C:5B:FE
            X509v3 Authority Key Identifier:
                keyid:E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:30:d4:5c:67:f1:59:fc:93:31:9b:96:ab:b8:a1:95:b7:de:
         58:04:43:e5:29:a9:30:0a:8c:d5:d0:8f:c4:80:27:8b:a0:1c:
         1b:19:b9:b8:a7:e4:90:97:98:94:d2:93:d9:70:3f:41:bb:59:
         f2:03:a7:4a:49:54:93:0c:73:bf:60:27:8c:31:6d:85:b1:1f:
         11:ae:1b:3c:de:b5:52:a6:27:8f:e3:95:12:e6:14:78:bc:5c:
         65:1a:14:be:f2:85:64:ee:eb:29:37:1d:0d:78:62:4b:26:23:
         ab:38:db:6b:e6:ef:f1:2e:1e:3f:26:23:d3:60:2d:3f:b1:f7:
         cf:5a:1d:69:38:de:0f:21:e0:46:fa:fb:2d:94:5e:f4:e4:c9:
         1e:04:83:4c:b1:1c:39:74:00:a6:4d:f5:4b:a6:28:65:a0:dc:
         ad:d4:93:cf:26:6a:2e:50:7a:9b:f9:c5:cf:39:61:e9:2e:28:
         8b:8d:63:c7:cc:5c:98:95:d5:b9:40:d2:2f:b8:93:59:7d:cf:
         b8:1a:91:0f:43:0d:d5:22:c0:e7:a9:ac:7e:64:e4:b3:55:05:
         a6:db:1b:7b:53:18:9d:c1:56:da:4f:56:bf:80:ae:13:1b:7d:
         47:e8:67:2d:9a:00:61:e8:fc:8f:77:e0:c7:a3:0e:cd:ad:ae:
         d6:ea:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:33 2024 by rpki-client on console-ams.rpki-client.org