Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231302e302f32332d3233203d3e20323636323530.roa
File:                     34352e362e3231302e302f32332d3233203d3e20323636323530.roa (raw, json)
Hash identifier:          /gUN+Hwr8OcikJ/iuxbJZNoxAoXJHPEM+HA+TYKWAsI=
Subject key identifier:   C4:09:91:F8:DA:09:9F:29:C0:86:20:68:66:61:61:C0:C7:DE:93:5E
Certificate issuer:       /CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
Certificate serial:       7196BBE3D3D22C6784246DD82A823DDBAFC15759
Authority key identifier: A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231302e302f32332d3233203d3e20323636323530.roa
Signing time:             Thu 16 May 2024 16:57:27 +0000
ROA not before:           Thu 16 May 2024 16:52:27 +0000
ROA not after:            Thu 15 May 2025 16:57:27 +0000
asID:                     266250
IP address blocks:        45.6.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl
                          rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:96:bb:e3:d3:d2:2c:67:84:24:6d:d8:2a:82:3d:db:af:c1:57:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
        Validity
            Not Before: May 16 16:52:27 2024 GMT
            Not After : May 15 16:57:27 2025 GMT
        Subject: CN=C40991F8DA099F29C0862068666161C0C7DE935E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:2d:45:79:56:f1:10:91:7d:e8:36:22:09:
                    f2:04:c2:d1:cf:aa:06:bf:a8:fb:6a:27:85:e4:d4:
                    f7:55:2b:f5:53:78:7f:f0:f6:8f:9f:c0:bb:cc:5f:
                    14:e7:9f:b3:8d:e7:89:8e:f8:22:44:77:4f:fe:2b:
                    25:10:a9:02:aa:ba:89:22:3c:1c:6c:73:d2:f6:a4:
                    f3:66:40:fc:97:5f:8e:4d:0f:84:67:de:77:4e:ad:
                    de:04:6c:30:2a:57:6e:ac:9d:9d:db:fe:a8:d4:cf:
                    cb:e4:ff:a4:7c:4d:1c:92:bb:46:67:0a:5b:2a:ee:
                    03:d9:9e:04:ce:52:cf:19:cd:ae:0d:92:d0:7c:65:
                    5c:3f:33:3a:b4:40:67:7a:c3:9d:d1:d5:38:a1:8a:
                    0b:32:d2:28:93:a5:cc:14:ae:d1:e4:a8:f4:e2:f2:
                    be:a0:2f:1e:99:4a:76:ba:d9:e4:d0:d8:5d:46:a9:
                    44:12:bf:18:74:02:38:d4:da:68:77:56:b2:75:f1:
                    7e:e4:2a:3e:23:cd:aa:f6:b3:09:4b:2c:b3:3a:1f:
                    7c:08:f8:91:bf:35:fe:1b:12:21:0c:db:62:aa:d6:
                    f5:b6:e2:5b:e1:70:c7:d9:f5:11:0f:12:9e:7e:cd:
                    e2:4d:f2:e0:b2:de:2c:04:64:22:bf:64:15:24:fe:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:91:F8:DA:09:9F:29:C0:86:20:68:66:61:61:C0:C7:DE:93:5E
            X509v3 Authority Key Identifier:
                keyid:A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231302e302f32332d3233203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:dc:64:30:47:a2:b2:e7:29:39:c6:d2:c9:a6:2f:88:0e:87:
         0c:08:26:77:8e:3d:72:f2:80:83:ef:ef:e1:d8:36:df:fe:90:
         73:62:da:eb:b7:35:3a:9f:a9:c6:87:95:1c:68:39:1c:32:49:
         cd:99:d1:45:05:e2:ac:41:1d:58:5e:9e:fe:72:fe:fc:3c:6a:
         4e:25:99:74:d6:d9:d0:9f:c5:78:a6:89:2a:cc:07:f3:df:d3:
         62:d5:9a:50:c8:a0:0b:ac:dc:49:ee:2f:6a:61:04:87:63:9c:
         22:36:37:2d:46:4f:c0:55:a6:42:e6:a1:2f:25:50:9d:ef:16:
         49:83:8c:a9:8b:8b:dc:3a:ea:e6:41:52:ec:57:e0:1c:84:06:
         cc:9f:55:d6:12:6a:7d:f7:03:7e:18:58:1e:89:25:03:c4:70:
         38:19:c8:f6:21:6c:83:02:88:cf:30:5b:59:b5:10:4b:47:0f:
         35:c3:69:80:c1:87:fa:06:b9:75:f8:1a:98:ca:d0:bd:bb:2c:
         cd:d6:6d:89:dd:be:d2:12:c1:6f:c4:4e:51:77:a3:af:1d:43:
         e5:52:d7:89:bd:28:bb:ca:95:bc:38:fe:3f:39:a7:fd:15:bd:
         4b:1c:a7:e1:52:81:8a:27:bc:5e:f3:51:b4:d4:2f:ca:98:47:
         f6:51:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:57 2024 by rpki-client on console-fra.rpki-client.org