Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa
File:                     34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa (raw, json)
Hash identifier:          jKPPtPPMiLG/hqHkm5Rnd/AzWUNjSChji23P9jGLseg=
Subject key identifier:   5D:8A:5C:A6:ED:12:11:A4:3C:41:7D:5A:06:D8:61:37:EC:BF:42:51
Certificate issuer:       /CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Certificate serial:       2971659FD438E3D6D54D9BA3C9B4A20BE2B44342
Authority key identifier: 63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa
Signing time:             Thu 04 Apr 2024 16:12:39 +0000
ROA not before:           Thu 04 Apr 2024 16:07:39 +0000
ROA not after:            Thu 03 Apr 2025 16:12:39 +0000
asID:                     267389
IP address blocks:        45.234.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
                          rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:71:65:9f:d4:38:e3:d6:d5:4d:9b:a3:c9:b4:a2:0b:e2:b4:43:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
        Validity
            Not Before: Apr  4 16:07:39 2024 GMT
            Not After : Apr  3 16:12:39 2025 GMT
        Subject: CN=5D8A5CA6ED1211A43C417D5A06D86137ECBF4251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:db:71:5c:7b:93:bb:95:11:64:07:80:a1:
                    bd:2c:b4:82:ec:ad:6e:2d:57:95:dc:65:fa:66:4a:
                    23:7c:ac:70:92:78:5c:28:c5:f7:3d:2b:b0:41:33:
                    71:a2:a4:39:a5:a1:6e:85:c1:43:d4:f2:07:7b:c9:
                    37:2f:4d:40:38:ff:b4:78:19:57:99:c5:35:aa:16:
                    fb:01:42:94:e0:ea:94:68:86:d1:c5:17:b5:c4:8d:
                    59:7d:6b:0b:30:77:36:d9:01:3e:7f:f2:25:40:3c:
                    92:1b:8a:19:8b:48:fb:58:55:86:9a:95:1c:a2:aa:
                    3b:21:04:fd:db:40:66:ad:3e:d6:3e:cf:ea:fd:88:
                    2d:57:76:d5:05:92:06:01:a1:b7:d1:fb:35:a6:99:
                    c7:5c:42:73:48:58:9e:ac:81:8c:36:82:c9:7e:97:
                    31:2e:e7:bd:11:92:5a:9d:7b:61:e3:ff:a3:0a:4f:
                    f6:8a:03:86:d0:8b:8d:ff:8c:bc:b3:67:39:5b:29:
                    a0:89:b6:62:eb:a4:05:ae:43:dd:40:f7:7e:49:40:
                    7c:ee:73:19:69:6a:90:06:e1:50:d8:0a:c7:a9:2b:
                    25:9a:9e:74:26:40:d8:00:a0:b3:29:b6:bb:7d:b5:
                    27:1b:cc:2d:a1:21:c6:31:e3:a8:93:59:3c:f6:dc:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8A:5C:A6:ED:12:11:A4:3C:41:7D:5A:06:D8:61:37:EC:BF:42:51
            X509v3 Authority Key Identifier:
                keyid:63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:72:b5:7d:2b:bf:25:82:d5:1a:d7:24:02:a9:ba:b8:82:ff:
         96:ad:a4:36:3a:da:e7:0d:36:08:21:09:7e:e3:2d:51:bf:48:
         15:1c:ce:51:a3:c1:59:a2:03:b3:ea:23:63:85:9b:52:46:a5:
         f5:2c:fe:6e:62:d9:93:14:ac:e1:f2:c9:ba:13:4c:82:92:e5:
         91:95:35:9c:bb:8a:1d:64:1e:e5:bf:26:48:7d:62:b9:51:1e:
         c1:2a:89:74:c5:23:03:a8:4a:55:e3:9f:aa:d3:2a:5f:f9:d0:
         0c:fb:98:4d:9b:3f:7b:9a:48:d6:d4:8c:63:8b:a6:26:03:33:
         f7:5d:8f:1e:89:79:2e:f4:3a:2e:eb:05:66:71:ac:96:7c:a7:
         2c:9b:7b:1e:76:31:cd:cd:0a:cb:3f:a6:61:6c:bc:8a:a2:95:
         3b:c4:39:69:99:93:05:31:77:fa:fc:93:57:5e:f6:92:ad:6c:
         95:15:e8:16:e4:b4:bc:d5:f5:db:25:72:2b:f0:8f:07:63:3b:
         8a:e5:be:04:29:c5:36:59:40:d7:bc:f4:29:dc:49:dd:21:32:
         0b:f2:f0:c3:ea:81:2e:a9:24:0b:49:58:9c:3a:ee:cf:db:3c:
         3e:b6:16:a3:a0:1a:44:bc:cc:88:dd:42:a4:e1:d0:ba:b4:a7:
         a4:5e:84:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:12 2024 by rpki-client on console-ams.rpki-client.org