Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/34352e3232382e33322e302f32322d3234203d3e20323637313031.roa
File:                     34352e3232382e33322e302f32322d3234203d3e20323637313031.roa (raw, json)
Hash identifier:          0lU64vn3jUNU3MRDaRmwE9GY7QV7J8K69cPvGICT7d8=
Subject key identifier:   FA:90:18:B7:37:18:C6:6B:90:88:47:CA:E2:C4:4A:88:63:54:8C:AC
Certificate issuer:       /CN=B81349D6DE12F72CBE07E6A9581BD93607C25C4E
Certificate serial:       0F893286E4C675EC6E6BDCB443093E480E17F107
Authority key identifier: B8:13:49:D6:DE:12:F7:2C:BE:07:E6:A9:58:1B:D9:36:07:C2:5C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/34352e3232382e33322e302f32322d3234203d3e20323637313031.roa
Signing time:             Thu 04 Apr 2024 20:37:13 +0000
ROA not before:           Thu 04 Apr 2024 20:32:13 +0000
ROA not after:            Thu 03 Apr 2025 20:37:13 +0000
asID:                     267101
IP address blocks:        45.228.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.crl
                          rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:89:32:86:e4:c6:75:ec:6e:6b:dc:b4:43:09:3e:48:0e:17:f1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B81349D6DE12F72CBE07E6A9581BD93607C25C4E
        Validity
            Not Before: Apr  4 20:32:13 2024 GMT
            Not After : Apr  3 20:37:13 2025 GMT
        Subject: CN=FA9018B73718C66B908847CAE2C44A8863548CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7d:49:ef:2f:6e:b3:b0:dc:b4:be:f7:d3:41:
                    de:10:41:9c:41:bd:b5:c4:be:cd:86:5e:3f:b8:1b:
                    15:86:49:25:ea:88:6c:2f:fb:7f:d7:96:a9:ed:03:
                    5a:b2:a6:6f:24:7a:1d:ac:4e:0b:e1:33:6b:61:32:
                    40:de:cd:f1:aa:ae:a3:17:d5:ef:dd:d7:c6:f1:a2:
                    ea:98:15:a6:b8:99:33:6c:bb:1c:0a:04:56:68:49:
                    7e:ca:3f:a5:46:cb:9a:46:44:cc:c1:75:57:93:9c:
                    f3:53:cd:36:63:4c:13:7e:eb:3e:a5:e2:6a:da:f1:
                    9c:ee:6c:d8:51:ef:0c:79:45:a2:2a:d5:83:e2:3b:
                    4d:e8:56:c1:51:39:99:01:d0:fa:42:a9:93:90:89:
                    6e:c7:91:c2:bb:ab:3b:62:bf:81:73:df:ae:05:81:
                    ff:58:c8:bf:df:2f:42:e6:84:d1:87:21:3f:f1:96:
                    1f:fe:40:8d:61:01:30:22:77:8a:d9:6c:f6:4a:0d:
                    32:7e:35:0b:c8:5c:c7:52:df:68:15:34:f4:66:7d:
                    d5:5a:d5:47:af:65:02:69:55:a0:20:50:4d:34:f5:
                    5f:0b:46:a6:bc:0a:7c:aa:48:8a:13:2e:1d:28:52:
                    d6:bc:99:60:94:48:fd:e6:cd:97:e4:d4:b6:00:94:
                    ce:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:90:18:B7:37:18:C6:6B:90:88:47:CA:E2:C4:4A:88:63:54:8C:AC
            X509v3 Authority Key Identifier:
                keyid:B8:13:49:D6:DE:12:F7:2C:BE:07:E6:A9:58:1B:D9:36:07:C2:5C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/34352e3232382e33322e302f32322d3234203d3e20323637313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:4d:14:67:57:d2:f1:36:ba:32:71:d2:3e:fc:2c:49:d2:
         38:6c:d2:de:90:55:0b:a9:55:87:00:77:b2:21:62:99:59:3e:
         0c:4a:63:a6:eb:c1:70:26:72:91:19:17:37:6d:8f:2c:03:22:
         13:51:63:29:b7:a3:35:5e:f9:d2:96:09:57:49:ed:18:3f:0c:
         b3:38:a3:87:9f:7a:7c:f9:e9:b7:73:d1:e7:40:41:c2:29:53:
         75:41:52:73:cf:82:cc:2d:26:3e:64:f6:27:57:80:60:bc:c6:
         87:41:62:7a:76:6c:f9:bf:85:bb:fa:fa:c6:64:dd:59:d4:59:
         2e:97:d1:93:3f:b5:25:fd:b0:ed:7b:51:33:d6:9f:37:5b:ee:
         c9:04:27:0d:12:e7:b9:b0:bd:e3:2e:5c:ac:ba:6c:85:bd:7e:
         ad:2d:ca:82:ac:a9:c5:27:e7:0d:2e:28:95:a3:01:66:d5:e0:
         c6:a4:a6:fb:9a:f4:a1:3f:2c:4a:be:b2:66:f1:c1:e3:74:8f:
         50:83:54:08:7e:84:9c:72:31:6b:b7:af:98:ec:5d:c8:f3:49:
         39:f0:c0:86:82:86:13:94:af:a8:5e:46:7c:8b:36:aa:3d:c9:
         71:7a:17:14:3d:ac:a1:f1:4b:bc:c1:90:ac:d3:be:d8:ef:30:
         33:cc:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:11:29 2024 by rpki-client on console-ams.rpki-client.org