Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa
File:                     34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa (raw, json)
Hash identifier:          s+IG6DC48eu4QV/ioDL64EA5k33uN1dVAvFGOZAMuaU=
Subject key identifier:   BE:3A:5B:DF:BA:E7:01:87:36:73:97:CA:B7:F4:E6:07:6D:52:9A:CF
Certificate issuer:       /CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
Certificate serial:       63A52E726F83D854774158E782FFC1EB299EDFEF
Authority key identifier: EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa
Signing time:             Wed 16 Oct 2024 21:53:58 +0000
ROA not before:           Wed 16 Oct 2024 21:48:58 +0000
ROA not after:            Wed 15 Oct 2025 21:53:58 +0000
asID:                     267940
IP address blocks:        45.165.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a5:2e:72:6f:83:d8:54:77:41:58:e7:82:ff:c1:eb:29:9e:df:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
        Validity
            Not Before: Oct 16 21:48:58 2024 GMT
            Not After : Oct 15 21:53:58 2025 GMT
        Subject: CN=BE3A5BDFBAE70187367397CAB7F4E6076D529ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:4d:78:bc:0c:83:d8:b9:5e:26:09:fa:72:
                    e6:dc:e9:8a:aa:4e:49:63:cc:5d:53:26:7f:db:c7:
                    cb:9e:b0:af:9b:3d:d3:7c:bc:97:de:fa:9e:b3:f8:
                    cd:f5:58:8c:9c:20:20:a3:53:00:5b:0a:16:6b:1d:
                    49:81:bf:fc:7c:58:ed:b0:31:38:e3:f4:8b:ae:ee:
                    6f:7e:61:75:d0:1e:f5:09:76:fe:07:e2:7e:af:ee:
                    b4:7e:08:9e:18:24:12:ba:03:ab:ab:2e:a2:eb:a7:
                    f5:b8:0d:9f:e9:e4:5e:76:0b:4a:c7:7b:06:70:17:
                    4d:f9:82:99:a8:03:33:b8:14:bb:49:f9:df:a9:8f:
                    77:f1:57:f0:d4:62:8d:33:d3:e1:c3:b7:10:61:ea:
                    9f:7f:b2:ef:46:9c:e1:dc:79:54:32:ae:d2:be:93:
                    7d:62:f4:71:4b:d1:40:57:0f:a9:19:9c:92:94:9f:
                    52:8d:14:a1:10:9f:69:fa:58:57:0f:eb:34:ab:c8:
                    50:81:b2:31:75:1a:a8:96:11:3d:5e:60:31:8b:af:
                    9c:13:e4:01:54:de:00:e7:e1:4b:7f:37:65:46:2e:
                    bd:49:09:35:39:a1:e0:92:fa:aa:1d:09:14:dc:2e:
                    06:0f:a3:53:52:6c:cd:fe:2c:e4:be:2f:2f:3f:52:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3A:5B:DF:BA:E7:01:87:36:73:97:CA:B7:F4:E6:07:6D:52:9A:CF
            X509v3 Authority Key Identifier:
                keyid:EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:45:49:5c:40:28:a1:e2:24:7f:97:4f:e9:d2:0b:76:13:b0:
         a4:16:8c:45:7e:bc:88:82:25:ef:7f:a5:17:26:51:dd:d6:03:
         9b:63:e8:f3:4e:3c:15:71:99:e4:42:f1:0b:5e:da:f4:d2:68:
         1a:fa:f0:bf:6c:9c:d1:cf:8c:f4:31:cf:a0:2f:d3:98:38:83:
         ce:4a:40:97:e3:53:7d:72:b8:69:39:e4:77:4e:81:d5:43:f8:
         d7:3d:28:26:59:17:a1:56:dd:44:fa:f1:8b:71:53:d5:52:13:
         94:88:dd:0f:d4:ac:c1:97:7f:c2:c3:50:a9:d1:98:c0:58:2b:
         02:13:d6:f4:4b:68:eb:e6:95:f2:59:f4:b2:c7:c6:83:f7:5f:
         23:b5:8d:f2:55:2f:18:0f:fc:cc:f7:3a:de:da:31:93:c5:1a:
         53:30:c3:db:a4:31:e6:ad:25:73:9f:57:e2:00:d9:d7:6b:48:
         19:67:66:ee:c7:df:62:77:6a:db:49:3b:c7:60:3e:4d:3a:8d:
         76:85:51:9f:4f:f0:ae:57:1c:6d:16:40:ad:cb:52:60:47:a0:
         35:9f:eb:09:00:9f:5d:58:b0:47:fb:d6:3c:c7:31:75:5a:13:
         23:b5:0c:45:1c:5a:15:fc:d4:74:2b:d9:82:84:bd:83:1a:4c:
         e5:9b:b9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:24 2024 by rpki-client on console-ams.rpki-client.org