Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32322d3232203d3e20323637313335.roa
File:                     34352e3232392e3232382e302f32322d3232203d3e20323637313335.roa (raw, json)
Hash identifier:          yLD6CYA/+eEkpYE/18bN62zgD77rvtkyM5Nam4IaVBo=
Subject key identifier:   FB:C8:FE:17:75:46:A2:84:63:E3:AB:3C:EA:45:8D:A2:8C:C3:DC:FE
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       7A3D0D931036FB3125767233A3597DEF88E32AFA
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32322d3232203d3e20323637313335.roa
Signing time:             Tue 26 Nov 2024 17:23:05 +0000
ROA not before:           Tue 26 Nov 2024 17:18:05 +0000
ROA not after:            Tue 25 Nov 2025 17:23:05 +0000
asID:                     267135
IP address blocks:        45.229.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
                          rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 18:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3d:0d:93:10:36:fb:31:25:76:72:33:a3:59:7d:ef:88:e3:2a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Nov 26 17:18:05 2024 GMT
            Not After : Nov 25 17:23:05 2025 GMT
        Subject: CN=FBC8FE177546A28463E3AB3CEA458DA28CC3DCFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:b9:bc:10:39:09:13:de:e7:d2:90:94:4b:
                    b2:c0:28:8e:6c:0a:a1:d6:f5:93:25:f6:15:ef:d8:
                    de:dd:30:d4:63:55:d4:c6:f6:a8:ea:df:7b:1a:b3:
                    5a:f4:43:10:6c:3d:eb:aa:d4:bf:5b:08:6b:8b:c6:
                    3f:ed:f6:1f:0a:c8:2e:ca:1c:c5:8c:71:f9:5e:1b:
                    da:d1:40:23:b5:26:e8:3e:55:9f:22:72:b6:7f:7e:
                    0f:b8:27:f3:c2:d1:98:57:fd:53:fa:9c:94:9c:d4:
                    c3:5e:e6:1a:9d:56:24:ef:1e:d5:21:3c:38:7a:dc:
                    6f:72:3d:e3:a3:fc:0d:98:4b:56:53:6c:f0:9c:62:
                    50:66:8d:c0:be:5a:53:4f:3c:b6:f2:4f:0b:33:66:
                    f2:9d:79:99:c3:f6:cf:6d:90:1a:08:11:eb:89:26:
                    5e:05:a4:c6:2f:c7:21:a8:27:aa:b4:30:f8:d5:d0:
                    e9:2c:1f:59:cf:5b:53:bf:34:14:6c:87:c6:dc:ed:
                    42:92:a5:83:89:f0:7a:44:33:f6:71:33:d8:e5:d0:
                    68:63:eb:77:e5:f2:db:fb:cc:62:68:7d:22:b4:62:
                    cd:ac:28:3a:2e:2c:0d:c0:97:f5:6d:89:2e:22:2d:
                    c7:08:9c:f4:1d:51:95:7c:df:d2:ac:56:ee:2a:e5:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C8:FE:17:75:46:A2:84:63:E3:AB:3C:EA:45:8D:A2:8C:C3:DC:FE
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32322d3232203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:77:44:90:17:cc:8e:ef:69:b7:80:04:76:ed:46:e4:55:
         68:17:a7:51:de:14:cc:e9:4f:99:d2:0c:aa:76:c5:c1:da:fb:
         fb:a4:d8:43:d6:d2:e7:da:ab:db:e7:45:ac:01:7c:bd:8c:bf:
         54:1d:0a:f9:7c:3a:04:c3:e3:9b:ae:a4:a9:26:06:30:88:44:
         86:e6:84:05:cc:69:f8:62:03:89:af:cf:4a:58:e3:64:b7:17:
         48:0d:3a:2c:e9:64:49:ec:02:02:44:35:a3:18:7d:8b:64:88:
         9a:82:fc:42:cc:7e:11:d3:91:fe:d9:64:c7:07:cd:f4:47:01:
         d6:df:f5:1d:a2:9c:fd:9e:24:31:36:a8:04:30:de:5b:08:01:
         36:a7:a9:d2:c1:ec:ee:c6:36:d1:ab:1d:84:58:96:da:bc:46:
         9a:3e:fb:70:77:52:81:4e:ee:1d:e3:bc:34:a9:ee:57:7d:be:
         3d:d6:43:07:d3:9b:7b:0c:fe:3f:bd:56:2c:43:d7:95:8c:84:
         e0:8a:ad:72:4d:09:c8:96:c6:2b:de:6d:29:ab:05:b2:80:23:
         73:08:aa:50:30:7d:bf:95:10:31:49:f9:43:28:b2:65:46:4e:
         04:5c:8d:dc:e1:aa:be:b4:34:3d:6c:f8:5f:8e:70:6e:bd:6c:
         be:e2:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:02 2024 by rpki-client on console-ams.rpki-client.org