Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38372e302f32342d3234203d3e20323637303637.roa
File:                     34352e3232382e38372e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier:          qum0dIm+Oh98gYdOfrebjdqSMxTaoirOP1HJqwA2ygY=
Subject key identifier:   0E:FB:76:30:62:89:30:57:5E:73:FB:35:D8:E5:B6:04:57:C9:CC:7C
Certificate issuer:       /CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
Certificate serial:       204F884C93BC9AF68357D72B6530AAD26E0D1A4A
Authority key identifier: E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38372e302f32342d3234203d3e20323637303637.roa
Signing time:             Mon 09 Sep 2024 12:37:08 +0000
ROA not before:           Mon 09 Sep 2024 12:32:08 +0000
ROA not after:            Mon 08 Sep 2025 12:37:08 +0000
asID:                     267067
IP address blocks:        45.228.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4f:88:4c:93:bc:9a:f6:83:57:d7:2b:65:30:aa:d2:6e:0d:1a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
        Validity
            Not Before: Sep  9 12:32:08 2024 GMT
            Not After : Sep  8 12:37:08 2025 GMT
        Subject: CN=0EFB7630628930575E73FB35D8E5B60457C9CC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e1:ea:9f:6e:d4:11:af:7e:55:3b:5a:10:e0:
                    9c:81:98:1d:e8:78:02:48:f6:b4:b3:95:5f:15:e3:
                    b2:be:11:ac:83:25:77:51:c9:8b:99:9b:43:87:91:
                    5f:c0:54:03:80:1b:7c:18:eb:41:9f:f1:c3:a0:dc:
                    3f:9d:4b:5d:fe:4f:61:cd:0d:5d:15:e6:44:36:80:
                    53:84:fd:65:89:89:f3:2f:ff:9a:07:f9:fa:cf:7e:
                    30:03:72:b6:49:54:99:1a:9e:a7:29:41:95:5c:f1:
                    30:6c:7b:77:27:d9:7b:e3:52:5e:23:2c:75:e3:1f:
                    d2:27:b3:a6:2f:ca:f1:c7:05:6b:46:55:40:bc:79:
                    9e:36:94:73:98:ef:9a:82:62:98:9a:c2:24:17:cd:
                    ed:e8:97:7c:9f:21:24:d6:c1:76:ec:40:68:f8:46:
                    a0:dd:2f:5f:30:dc:cb:2b:8b:d7:cf:19:12:0f:4f:
                    59:bd:6b:ba:10:d7:b7:e9:c5:a9:af:de:35:03:09:
                    c8:18:8f:ea:77:2e:29:91:81:da:c3:22:94:29:c0:
                    16:dc:5f:84:f6:d7:19:3f:9c:95:cc:03:ad:55:94:
                    3b:15:22:bf:cb:4f:f0:e9:2d:9e:d8:ec:93:9e:5b:
                    2c:27:1d:c7:b8:4f:77:6f:0a:fb:3a:7c:2f:83:d8:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FB:76:30:62:89:30:57:5E:73:FB:35:D8:E5:B6:04:57:C9:CC:7C
            X509v3 Authority Key Identifier:
                keyid:E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38372e302f32342d3234203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:94:2c:08:34:f0:c4:ae:87:8f:0c:d8:b0:91:ee:f0:fd:b3:
         ff:38:49:79:28:4a:5f:f6:66:13:bb:ab:08:2d:88:00:d8:13:
         58:e0:12:58:c0:f4:91:57:06:79:6e:a4:45:3e:1d:c3:38:94:
         f7:46:73:9a:76:8d:21:27:41:1c:d2:87:b6:ff:06:83:4c:24:
         dd:6a:48:e0:c5:40:c8:49:bd:e9:03:0d:00:3f:0d:cb:e3:5c:
         35:fd:be:d0:b4:ef:b0:6c:3b:3d:42:e7:14:9e:7c:43:1c:b2:
         82:8c:6e:45:eb:16:11:05:e2:41:53:03:02:e9:e6:60:36:a3:
         43:1c:87:04:78:27:d7:46:50:d8:7a:c4:d7:23:cf:77:91:54:
         7f:5c:f9:3d:77:22:99:1e:c1:78:78:a3:13:14:d3:52:43:23:
         11:62:fb:61:bf:74:36:95:86:73:35:d8:98:8d:41:f2:70:20:
         fe:04:d3:15:38:7f:cc:51:08:f2:c9:d6:73:2e:ba:03:1b:b3:
         1f:3e:d4:3d:a5:5b:0b:cc:02:64:63:da:03:b3:e0:cc:6b:65:
         e3:28:de:68:ca:6b:cd:e1:1a:ce:b9:68:1d:c2:17:7b:28:c7:
         7d:d1:31:95:ec:24:46:04:56:d5:6e:c8:e4:6e:02:d5:6b:2b:
         4e:e0:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org