Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          UJG57BP/NXEcJYJ2mLJJ697h/eha9qBAoMm7Nvht/s0=
Subject key identifier:   39:D3:FF:49:20:BF:DA:DB:E5:20:D6:BE:1B:41:52:C5:76:D4:1A:6E
Certificate issuer:       /CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
Certificate serial:       7A8D153AE344BAE0466C96BD2AA00BBDA2E6923C
Authority key identifier: D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
Signing time:             Wed 05 Apr 2023 11:55:09 +0000
ROA not before:           Wed 05 Apr 2023 11:50:09 +0000
ROA not after:            Wed 03 Apr 2024 11:55:09 +0000
asID:                     267091
IP address blocks:        45.229.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 13:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8d:15:3a:e3:44:ba:e0:46:6c:96:bd:2a:a0:0b:bd:a2:e6:92:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
        Validity
            Not Before: Apr  5 11:50:09 2023 GMT
            Not After : Apr  3 11:55:09 2024 GMT
        Subject: CN=39D3FF4920BFDADBE520D6BE1B4152C576D41A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:76:01:2d:ea:ae:1a:3f:34:21:bf:cc:15:2d:
                    2a:17:86:74:df:1d:35:9a:33:43:d5:59:57:4c:3a:
                    97:f3:12:65:ff:a7:25:1c:95:52:3a:a5:d4:13:83:
                    b5:da:ff:b7:0d:ff:1b:30:47:ff:8a:31:20:94:48:
                    8b:91:cf:d5:ba:5a:c0:8f:ac:29:fe:32:0e:4e:c4:
                    52:a4:93:fa:1b:d8:d9:bc:dd:be:86:09:14:b7:9b:
                    17:94:16:e2:80:24:9f:74:27:bf:cd:f2:77:79:c1:
                    9f:65:6f:6b:5e:e3:f6:97:9c:a8:d1:76:16:0b:1a:
                    4b:61:da:41:3d:1f:10:24:98:47:b2:64:93:1f:45:
                    63:bb:be:d6:08:0c:e4:cb:14:f3:39:85:d1:7c:dd:
                    59:a4:46:02:fc:07:97:0e:24:23:a6:c4:5f:56:26:
                    4a:53:a2:59:80:89:b4:cf:89:5e:f3:e7:9f:cb:d8:
                    1c:e3:07:81:8d:5b:cb:47:1e:00:b7:20:9f:af:0e:
                    0d:56:fe:cc:88:3b:58:21:f9:c5:6f:46:0a:9e:1f:
                    e2:39:38:05:d8:db:72:88:7a:74:94:ff:66:c9:97:
                    96:4b:b8:ff:8d:6e:1b:e8:cc:70:c3:37:f1:99:21:
                    3a:6e:8f:04:42:6b:6d:82:94:b2:36:83:e0:6f:d5:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D3:FF:49:20:BF:DA:DB:E5:20:D6:BE:1B:41:52:C5:76:D4:1A:6E
            X509v3 Authority Key Identifier:
                keyid:D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:e2:31:e5:a0:8e:f3:54:0b:a9:c7:0d:34:ff:e7:cf:96:69:
         2b:cc:bd:58:b1:db:cf:45:f5:dd:08:42:dd:12:b4:8a:7b:e6:
         b8:31:06:f6:a3:57:63:f2:8c:7f:b9:77:9d:c9:06:e6:02:ef:
         53:12:e0:c0:af:7f:eb:d3:48:24:58:48:ed:12:60:79:79:96:
         38:c8:8a:e4:d7:6b:68:af:c1:b2:41:87:ce:df:28:e1:8d:67:
         b1:16:4d:58:45:7f:34:6b:09:43:fb:98:4c:67:83:a6:50:30:
         76:9c:51:fa:ef:56:70:8a:e5:a5:b9:01:bb:90:0c:c8:8d:9d:
         5b:df:2b:2e:f6:54:a8:b1:7f:4a:c7:88:e3:75:dd:24:68:2a:
         bf:1e:1e:4f:cc:c0:ad:95:34:c1:bf:97:55:cd:8b:1f:4a:2f:
         07:5d:aa:8d:a1:5e:bd:23:cf:74:2a:32:20:fe:f2:99:93:2c:
         d4:aa:4a:14:38:bd:89:09:6f:b0:56:a9:e9:47:43:a9:fd:0b:
         5d:0c:dd:64:1e:22:75:90:37:29:73:c9:51:69:76:1b:4d:aa:
         62:5c:23:90:da:bf:5d:82:38:cb:bc:4e:ae:5e:90:6a:42:9e:
         b5:62:cd:e5:24:fa:55:67:de:a0:7d:cc:3b:a8:13:1f:55:60:
         b6:48:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:20 2024 by rpki-client on console.sobornost.net