Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa
File:                     34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa (raw, json)
Hash identifier:          WZa5s+GWpUdcHm1c2LJ6iatQ7PSOYmv/WrXfftXHm84=
Subject key identifier:   BC:FC:8E:31:E8:C2:39:6C:E1:90:B0:8B:4C:B3:57:C5:F5:52:2D:09
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       29EBDDE92F0EAA168DC669F3D983D44DAFBF506F
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa
Signing time:             Fri 23 Aug 2024 02:38:40 +0000
ROA not before:           Fri 23 Aug 2024 02:33:40 +0000
ROA not after:            Fri 22 Aug 2025 02:38:40 +0000
asID:                     268513
IP address blocks:        45.161.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:eb:dd:e9:2f:0e:aa:16:8d:c6:69:f3:d9:83:d4:4d:af:bf:50:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Aug 23 02:33:40 2024 GMT
            Not After : Aug 22 02:38:40 2025 GMT
        Subject: CN=BCFC8E31E8C2396CE190B08B4CB357C5F5522D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:9a:df:23:79:fa:a8:cc:8f:29:9c:3c:f7:
                    3d:2d:48:d5:ca:b6:5d:62:73:de:c0:8f:d6:9f:45:
                    92:57:e1:9b:f5:ee:fd:f7:d8:89:cb:c9:55:d9:26:
                    e3:4c:df:7c:16:bd:ea:44:48:d9:e8:b8:d7:4e:92:
                    a5:e0:80:0a:b3:f0:a1:30:e0:1e:8f:e3:e1:f0:38:
                    66:60:34:32:24:2c:58:fe:6e:61:2f:d0:1e:56:a7:
                    bf:31:cf:89:c4:59:4e:0e:6e:67:4d:05:83:0e:19:
                    03:be:10:e5:59:c1:83:ec:d8:94:12:fe:d9:69:cb:
                    03:59:be:31:c2:3d:31:aa:05:a4:a8:6a:d1:01:ea:
                    78:55:d9:de:0b:54:e5:fe:3d:1c:fd:fc:ea:f9:15:
                    82:ae:3e:af:29:1d:7b:60:47:b2:ba:72:90:29:6b:
                    76:72:e6:36:3a:fb:7f:1c:76:04:94:97:e0:68:70:
                    4b:fd:b6:15:5b:68:0a:f4:da:ce:21:6b:1e:8b:f8:
                    fd:66:13:7b:fe:5a:34:fd:45:42:81:31:59:c7:46:
                    55:7d:17:30:4e:14:c1:30:0c:0a:73:06:52:45:74:
                    57:93:a1:b3:9c:f8:d2:80:a3:e0:74:6e:46:13:76:
                    e1:e3:b4:3c:db:53:73:59:76:3e:e7:c5:90:43:fa:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FC:8E:31:E8:C2:39:6C:E1:90:B0:8B:4C:B3:57:C5:F5:52:2D:09
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:92:28:f1:3e:72:7a:a9:e6:e1:36:ba:36:b3:0b:5b:ab:b6:
         78:76:10:20:3f:3e:f5:aa:13:4f:63:ce:44:51:3a:00:50:b5:
         bf:8a:74:8f:20:00:dd:02:9b:ea:0b:5b:70:df:6e:ff:87:f6:
         fe:aa:f5:db:e6:1a:7b:9a:6a:05:2f:60:2f:e0:6c:1e:14:12:
         17:eb:36:ab:3d:70:18:56:b3:63:d5:53:47:56:c7:fc:fa:17:
         20:61:57:7d:3a:48:a4:c8:de:00:92:aa:81:25:bf:1a:3a:83:
         56:4d:e5:db:7a:9d:6b:39:2d:9e:3e:2a:88:38:ea:b2:0d:2e:
         5c:60:09:ea:d5:3e:6a:fe:ed:a7:a4:db:14:56:46:10:4c:ba:
         59:3f:93:3e:58:4e:37:d4:e2:fe:b7:02:27:90:74:29:d4:63:
         10:58:47:fb:af:bf:86:42:e5:f1:c7:a5:ac:eb:ed:b0:c4:12:
         18:5d:de:da:1d:54:50:ae:72:0e:9c:ca:88:6c:a2:e4:32:95:
         b2:21:2e:b9:e4:57:7a:0c:69:9b:36:7f:51:39:47:77:c6:2b:
         ef:1a:34:38:a0:ad:91:5a:18:91:4c:66:a5:65:33:23:de:c0:
         9e:6e:b5:6b:dc:eb:76:8b:c7:14:3c:0d:4e:fa:17:30:7d:ab:
         ee:a9:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:11 2024 by rpki-client on console-ams.rpki-client.org