Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38322e302f32332d3233203d3e20323634353235.roa
File:                     34352e37312e38322e302f32332d3233203d3e20323634353235.roa (raw, json)
Hash identifier:          IWLgXOqBZviHSIktvUJDz+daROyz+WoxtlHYPeymkHc=
Subject key identifier:   E1:40:60:57:AA:5D:8E:B4:95:35:CA:8D:75:D4:41:AD:BD:F9:30:5A
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       0F650CB7506C498769D1D7242764F9E8CB4E3737
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38322e302f32332d3233203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 20:58:46 +0000
ROA not before:           Tue 30 Apr 2024 20:53:46 +0000
ROA not after:            Tue 29 Apr 2025 20:58:46 +0000
asID:                     264525
IP address blocks:        45.71.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:65:0c:b7:50:6c:49:87:69:d1:d7:24:27:64:f9:e8:cb:4e:37:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 20:53:46 2024 GMT
            Not After : Apr 29 20:58:46 2025 GMT
        Subject: CN=E1406057AA5D8EB49535CA8D75D441ADBDF9305A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:0c:33:99:bd:56:e7:22:e6:1f:11:ba:1b:
                    b6:c6:71:34:f4:5e:2e:0f:89:e1:0f:6b:46:46:ec:
                    b6:34:05:73:7d:4f:fd:39:a4:01:13:d4:f5:36:8c:
                    a8:bb:e0:c1:c7:e8:71:87:41:8b:e8:0e:33:49:27:
                    4e:39:1b:21:67:ad:64:47:a0:83:6f:36:85:ad:98:
                    0e:bc:dc:b6:17:94:49:1d:64:f2:4e:e8:94:10:77:
                    9e:c1:bc:dd:23:37:04:ed:81:d2:39:92:a2:b5:c3:
                    12:cf:6e:f0:2f:0d:e8:f9:dd:58:71:6e:09:7e:74:
                    b3:63:18:a8:fb:98:92:02:0d:33:36:9a:79:22:6b:
                    55:39:d8:35:fa:4d:7c:c2:e0:9e:a3:fb:1f:24:2d:
                    00:60:8e:54:fb:3f:91:01:28:75:1b:d5:01:44:6f:
                    2a:68:7b:3f:6e:3a:40:47:df:6a:2d:fb:2c:21:85:
                    cb:e4:f6:2e:53:ac:f3:22:30:5a:5e:c3:94:3a:63:
                    55:08:0e:4b:af:4c:02:e4:a2:0a:57:5b:2d:7c:0b:
                    9c:ea:8e:ea:4b:c4:6e:39:77:e1:a5:38:fb:5d:c5:
                    75:58:be:9a:17:0e:dd:38:84:de:96:ae:7f:b1:6c:
                    9e:fd:76:da:53:2e:0f:b3:bc:fb:28:a4:6a:76:c3:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:40:60:57:AA:5D:8E:B4:95:35:CA:8D:75:D4:41:AD:BD:F9:30:5A
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38322e302f32332d3233203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:82:95:76:68:1c:64:96:4c:86:6e:23:f6:62:f8:fc:86:
         4c:e0:ac:fb:bf:69:a6:98:c9:39:7e:45:ee:ed:9f:57:10:b2:
         a3:3a:4f:4f:f5:4c:02:c7:5c:f5:79:4d:77:99:ec:60:9e:99:
         ab:45:d4:c3:b4:db:01:99:ad:ce:49:5c:0f:3d:d9:bc:f9:06:
         73:fb:3d:aa:cc:46:21:7d:03:3c:09:36:f9:8e:ce:a3:43:3e:
         8c:65:7a:c9:a3:3e:67:65:f4:29:c2:d9:e5:93:a3:2d:09:7b:
         03:ec:98:63:2b:13:88:1a:f4:60:1f:de:12:c6:b0:7c:e7:50:
         60:5d:17:8d:fe:f8:ba:d7:16:86:ad:2b:0b:77:9c:c4:d7:5f:
         c2:0c:f5:3e:26:12:39:a5:49:79:79:71:a7:19:32:cc:af:35:
         7a:4c:d5:95:9e:8f:f5:76:f7:2e:87:c9:cf:de:6d:15:a5:70:
         03:b1:52:2c:a9:a5:08:c0:dd:47:7d:7f:2b:d9:fb:85:d9:5a:
         57:8d:a3:bd:42:9c:5a:15:86:3c:74:55:95:05:bb:c9:10:b6:
         5f:9c:e9:70:ba:59:ab:5f:f7:75:67:2e:86:26:6f:b5:08:e2:
         2a:c7:14:19:9e:af:ff:b3:d6:84:f6:54:e1:32:d3:df:6e:8e:
         25:f7:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org