Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa
File:                     34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa (raw, json)
Hash identifier:          67LrB2wyMiuBjqmykBxq9ETh0nxuJqfh4JZ/AOIYWIA=
Subject key identifier:   12:2E:BA:27:36:33:45:36:CD:4A:92:86:2E:EE:B4:06:AD:62:37:4D
Certificate issuer:       /CN=EEAED5639DA591A226FB7469252567652499ADA3
Certificate serial:       04D288A2E01FFC0E2130042F9FC5E7BDD0E3E1CF
Authority key identifier: EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa
Signing time:             Thu 08 Aug 2024 12:46:50 +0000
ROA not before:           Thu 08 Aug 2024 12:41:50 +0000
ROA not after:            Thu 07 Aug 2025 12:46:50 +0000
asID:                     268077
IP address blocks:        45.168.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d2:88:a2:e0:1f:fc:0e:21:30:04:2f:9f:c5:e7:bd:d0:e3:e1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAED5639DA591A226FB7469252567652499ADA3
        Validity
            Not Before: Aug  8 12:41:50 2024 GMT
            Not After : Aug  7 12:46:50 2025 GMT
        Subject: CN=122EBA2736334536CD4A92862EEEB406AD62374D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:d1:0d:ec:96:64:fa:f4:c3:70:5e:b9:04:
                    dd:b3:6d:7e:4c:ec:52:d3:1c:43:02:ce:19:7a:fc:
                    5e:bd:9f:a0:b3:f6:ea:aa:58:e8:b4:f8:77:bd:35:
                    30:42:ac:0d:25:f7:64:08:29:fc:f3:47:68:d3:95:
                    ff:3f:37:17:d2:5e:8f:5a:7b:02:3e:0e:37:c0:e5:
                    51:35:36:a4:93:9e:60:cb:46:4a:a3:0c:8b:e1:02:
                    38:f3:2d:9c:c0:cf:58:0f:d9:fd:a2:57:43:3d:65:
                    e8:11:18:5e:ad:c3:83:96:22:f2:a6:7e:9c:ab:85:
                    a8:8e:17:d5:46:ba:d7:57:90:90:21:b7:a9:bd:f0:
                    5a:14:63:f1:54:b5:3a:6e:0d:6d:b0:6e:2f:0e:8c:
                    99:88:4e:a6:27:ce:1c:d6:00:4c:d0:54:36:76:fd:
                    59:8b:d0:c6:36:31:5b:be:dd:69:b9:c6:14:53:1c:
                    d4:15:03:30:ca:e6:fa:7f:85:7a:cd:c0:4b:01:e8:
                    cb:7b:4d:79:7a:68:1f:b5:f6:35:3e:99:50:1e:c6:
                    ae:b2:62:eb:5c:ae:13:8d:79:83:8b:21:c3:bf:a4:
                    ce:6a:a0:d1:41:e9:0e:27:ef:1d:0e:8b:21:0a:2c:
                    c2:a9:76:a5:8d:8f:4a:67:56:b1:7a:3d:68:6a:cf:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:BA:27:36:33:45:36:CD:4A:92:86:2E:EE:B4:06:AD:62:37:4D
            X509v3 Authority Key Identifier:
                keyid:EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:b2:78:92:57:ef:28:f9:1e:74:0c:02:21:85:58:a7:ef:0c:
         50:a3:8e:48:09:ec:ec:a1:5d:07:05:75:a7:84:85:58:52:92:
         af:bf:d1:ad:e3:a8:04:0f:6d:13:e3:14:0b:cd:aa:81:08:58:
         f2:69:74:27:19:11:cc:5d:4b:bd:d7:73:89:29:84:18:fe:ea:
         a4:9a:8b:ba:af:33:f0:73:42:df:70:17:39:62:84:08:4b:b1:
         41:c8:8e:a7:93:17:18:8e:34:92:ab:dc:1d:59:a5:43:7a:3b:
         10:8c:7f:62:de:6e:1e:bd:ae:e4:ff:ce:f6:ab:17:47:7c:28:
         96:54:dd:f7:d5:4d:c3:d3:33:9d:4e:c1:88:90:44:39:fa:12:
         60:e5:ad:b9:29:e6:a6:6e:64:db:a1:e4:94:f2:77:29:e9:7e:
         85:2d:b5:d2:78:b0:52:17:97:2d:67:73:c8:79:9f:fc:7e:9f:
         78:0d:0e:76:af:18:e0:08:74:db:b2:b8:67:2d:94:d5:2f:62:
         cb:e4:06:48:d6:a0:a9:ce:88:9e:74:bf:e5:80:70:30:b4:4c:
         d2:e2:d1:fb:d4:53:f3:ec:3c:4d:5b:dc:5b:39:8d:03:57:e3:
         56:47:58:e4:c6:a7:0f:db:ac:82:ad:3b:ae:0f:9c:23:a1:91:
         49:57:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:49 2024 by rpki-client on console-fra.rpki-client.org