Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3234203d3e20323637393337.roa
File:                     34352e3136352e3139322e302f32322d3234203d3e20323637393337.roa (raw, json)
Hash identifier:          R/PigMiI5ic8+1LIG8mL3kuMNooCSdRo1U2xr2+OfI0=
Subject key identifier:   0E:19:1F:A7:52:BC:BB:1A:ED:5C:C6:C7:92:3F:62:A8:8C:D1:B8:3D
Certificate issuer:       /CN=46F24D803C58D84B40547B9D4586598137D71935
Certificate serial:       608E98A9E37CCA5567BD236E9B8DCD603FEC4488
Authority key identifier: 46:F2:4D:80:3C:58:D8:4B:40:54:7B:9D:45:86:59:81:37:D7:19:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46F24D803C58D84B40547B9D4586598137D71935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3234203d3e20323637393337.roa
Signing time:             Tue 19 Nov 2024 12:49:02 +0000
ROA not before:           Tue 19 Nov 2024 12:44:02 +0000
ROA not after:            Tue 18 Nov 2025 12:49:02 +0000
asID:                     267937
IP address blocks:        45.165.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/46F24D803C58D84B40547B9D4586598137D71935.crl
                          rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/46F24D803C58D84B40547B9D4586598137D71935.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46F24D803C58D84B40547B9D4586598137D71935.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8e:98:a9:e3:7c:ca:55:67:bd:23:6e:9b:8d:cd:60:3f:ec:44:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46F24D803C58D84B40547B9D4586598137D71935
        Validity
            Not Before: Nov 19 12:44:02 2024 GMT
            Not After : Nov 18 12:49:02 2025 GMT
        Subject: CN=0E191FA752BCBB1AED5CC6C7923F62A88CD1B83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:92:ec:d3:61:94:57:98:3c:7c:5e:49:be:
                    e6:98:54:ab:c5:c8:97:62:68:6c:48:e9:72:2c:e4:
                    cf:e5:0d:60:b0:10:cc:56:3a:7e:14:7f:ce:76:7e:
                    91:71:dd:08:89:1c:cc:3e:66:c6:c7:ba:72:05:6b:
                    d2:bd:e1:df:0d:31:84:53:87:17:1d:58:f2:9a:6e:
                    8a:4b:81:16:d6:44:a3:71:e2:a0:71:a8:9d:11:73:
                    1e:50:74:5b:55:9d:4a:7f:f7:a5:70:f6:aa:5a:a9:
                    49:f5:c1:37:ad:c5:57:6a:dc:86:e5:8b:95:f6:bb:
                    b8:38:82:ed:8d:6c:39:bb:df:76:f5:b3:83:c9:73:
                    73:c7:2a:60:95:0e:37:8a:b5:42:85:18:4f:2b:a7:
                    74:ce:ef:ce:d2:99:f5:bc:2f:25:92:e5:88:99:5f:
                    51:03:c7:bc:77:49:ce:92:ee:f0:cb:9a:38:e5:b0:
                    74:77:bd:20:cc:db:57:43:8b:52:8c:3f:f1:b1:85:
                    de:25:fa:49:06:ff:60:cd:a0:1e:c1:91:8b:b3:1a:
                    da:8a:33:80:4f:c9:17:b3:dc:57:9b:4c:21:33:50:
                    0d:62:0f:fd:30:4d:5c:a7:1a:f2:e8:d6:6d:c8:7a:
                    38:7f:99:53:e3:be:03:aa:f4:2a:57:a5:a8:41:73:
                    d4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:1F:A7:52:BC:BB:1A:ED:5C:C6:C7:92:3F:62:A8:8C:D1:B8:3D
            X509v3 Authority Key Identifier:
                keyid:46:F2:4D:80:3C:58:D8:4B:40:54:7B:9D:45:86:59:81:37:D7:19:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/46F24D803C58D84B40547B9D4586598137D71935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46F24D803C58D84B40547B9D4586598137D71935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3234203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:04:72:a8:ec:21:9f:ed:12:09:06:95:a9:1a:6c:e7:a1:
         9f:4c:68:5f:9b:a5:9c:c0:94:f4:a8:8c:1c:ea:bf:d3:52:90:
         99:43:ab:22:04:07:03:8f:76:7a:f9:2b:ae:cd:39:7c:83:53:
         dd:91:c3:e4:2b:85:63:ed:02:15:36:81:cb:1f:63:9e:84:d8:
         bb:ec:63:4d:b2:3e:a2:50:7a:88:40:13:7f:85:59:fa:08:d2:
         cb:9e:b2:7e:38:e6:aa:81:a0:70:6c:51:2b:8f:6b:ce:ff:dd:
         00:cc:ea:48:25:e8:93:14:6b:58:4d:e8:01:3e:b3:0f:5a:2c:
         a2:f5:78:ee:0a:19:6c:2a:23:8e:ab:b7:75:ea:2b:fb:01:5b:
         d3:90:33:1d:ac:28:14:84:8b:a6:2c:d0:0b:2b:0e:b3:97:50:
         60:90:f4:6a:c5:1d:53:3e:5b:94:4f:a9:39:e9:36:54:3c:16:
         43:ae:0c:44:2a:87:54:57:94:db:ef:bf:d6:b8:62:e1:77:0d:
         2b:f4:6f:0a:57:b3:27:eb:23:95:01:1d:e2:93:a1:95:b8:ef:
         56:ab:ed:1b:d3:a4:aa:22:64:de:aa:5c:13:ef:ab:fd:6f:a5:
         bb:9b:f3:a7:92:5c:2c:2a:c2:c0:5c:02:52:2d:d7:c2:98:4d:
         2f:54:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:06:17 2025 by rpki-client