Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32332d3233203d3e20323636323530.roa
File:                     34352e362e3230382e302f32332d3233203d3e20323636323530.roa (raw, json)
Hash identifier:          28tTtyllXSG2II+cs/sY/UiLS1Fkv0KJdKBH82gEPV8=
Subject key identifier:   E8:66:BE:91:62:C8:1D:9A:17:EF:77:CC:72:46:87:D4:B3:E4:FB:59
Certificate issuer:       /CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
Certificate serial:       4C09E06EC08D4FC96358E8366055F66FCAF7A36C
Authority key identifier: A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32332d3233203d3e20323636323530.roa
Signing time:             Thu 16 May 2024 16:57:28 +0000
ROA not before:           Thu 16 May 2024 16:52:28 +0000
ROA not after:            Thu 15 May 2025 16:57:28 +0000
asID:                     266250
IP address blocks:        45.6.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl
                          rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:09:e0:6e:c0:8d:4f:c9:63:58:e8:36:60:55:f6:6f:ca:f7:a3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
        Validity
            Not Before: May 16 16:52:28 2024 GMT
            Not After : May 15 16:57:28 2025 GMT
        Subject: CN=E866BE9162C81D9A17EF77CC724687D4B3E4FB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:35:b2:b0:c4:4b:8a:a0:d3:3f:f3:7b:66:
                    54:81:3f:b1:10:cb:62:53:0c:43:68:a5:36:f2:c0:
                    9f:b8:0c:4a:78:4e:0a:17:68:4f:11:99:a1:1e:0e:
                    88:cc:c8:2e:26:75:3a:81:a5:9f:b9:8a:d7:99:2b:
                    07:7f:69:5b:bc:54:72:6c:d6:c9:53:33:9c:bd:32:
                    f1:10:88:4f:e6:65:3e:ce:e3:71:d0:73:eb:f1:51:
                    f1:41:c8:4a:b9:13:a9:9c:b6:21:d5:34:3f:33:f8:
                    c3:14:3b:1e:be:68:f3:dc:39:72:59:8d:ac:a8:56:
                    0a:13:ef:8f:79:a4:8b:41:04:84:a0:5c:9b:f3:b4:
                    05:7a:3c:d3:c6:43:4f:d1:9d:cf:66:12:16:f2:9e:
                    58:eb:91:41:af:c0:db:d0:fe:4e:60:0c:05:07:b8:
                    be:84:2e:85:8e:59:48:b4:e3:cf:09:4e:e8:3e:36:
                    f6:8c:46:b2:6e:65:fe:9d:d6:50:98:0b:f6:63:9f:
                    8a:6d:04:97:99:7c:0a:8f:89:02:42:3c:45:0c:48:
                    44:11:e4:53:77:86:5d:34:06:b2:3d:88:a9:19:91:
                    ca:cf:ae:b9:dc:43:bd:9d:ea:b9:65:6f:de:b6:83:
                    5a:65:08:98:2a:fe:1f:7a:50:36:dd:a7:65:18:98:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:66:BE:91:62:C8:1D:9A:17:EF:77:CC:72:46:87:D4:B3:E4:FB:59
            X509v3 Authority Key Identifier:
                keyid:A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32332d3233203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:8a:5f:08:e6:7d:e3:cf:d1:2b:2d:5c:37:a3:89:4c:c3:
         f4:9b:08:47:29:1a:b7:bf:d1:0b:f3:3e:bb:5d:d7:44:63:8d:
         b1:52:9c:22:d6:a7:b6:c3:2d:71:de:40:69:92:43:72:3d:ea:
         72:24:0c:a2:88:a7:5c:36:b9:4a:bb:f4:01:89:6a:e1:e0:92:
         6b:66:c4:1a:1d:3b:32:11:73:c9:2c:b7:2f:15:4c:d6:b8:03:
         2e:56:4a:39:f7:07:ac:59:b4:86:7c:67:f3:fe:1f:d4:fd:a6:
         f4:28:2f:d0:bc:a2:51:94:4a:80:62:b0:9a:78:d0:34:cb:64:
         11:79:71:46:56:c1:60:57:e9:2e:16:33:36:2b:01:dc:67:51:
         f2:6c:b2:c8:4a:66:56:15:9e:0a:a5:40:03:8f:48:e6:b4:87:
         9a:a9:27:61:b5:5f:30:4d:e9:21:5d:97:16:56:df:63:1a:f3:
         71:42:95:d3:f0:1d:d1:85:b9:6b:56:3e:05:be:97:16:a9:d3:
         79:93:58:df:c7:2b:84:d6:10:17:ff:b7:be:f0:dd:b4:19:96:
         c5:0d:3a:0e:fe:7e:cd:33:40:f9:46:f8:f3:e2:56:c9:fe:f9:
         82:3a:b3:c3:d2:16:51:7e:82:80:a0:76:01:ea:7b:ce:d0:10:
         64:8e:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:30 2024 by rpki-client on console-ams.rpki-client.org