Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa
File:                     34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa (raw, json)
Hash identifier:          4ENkw54YqkXq4KUM2+aGFBjoKGVHRuYWJkRQ1kWbn7g=
Subject key identifier:   8F:E9:C4:B2:5F:3C:8F:57:45:46:4E:91:5E:C9:83:B6:E7:49:CD:B9
Certificate issuer:       /CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
Certificate serial:       4412089F75F95BAD563E5B1A4FE49081B23AC957
Authority key identifier: EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa
Signing time:             Wed 16 Oct 2024 21:53:57 +0000
ROA not before:           Wed 16 Oct 2024 21:48:57 +0000
ROA not after:            Wed 15 Oct 2025 21:53:57 +0000
asID:                     267940
IP address blocks:        45.165.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:12:08:9f:75:f9:5b:ad:56:3e:5b:1a:4f:e4:90:81:b2:3a:c9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
        Validity
            Not Before: Oct 16 21:48:57 2024 GMT
            Not After : Oct 15 21:53:57 2025 GMT
        Subject: CN=8FE9C4B25F3C8F5745464E915EC983B6E749CDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:7a:70:d8:69:74:98:1a:b7:1f:d7:64:a3:
                    2c:8f:72:d6:cc:eb:58:40:6e:d8:1b:8c:9f:a0:08:
                    a5:df:12:82:68:6c:73:50:b6:70:d1:13:96:fb:55:
                    17:1e:19:3f:37:a0:6c:9c:b6:63:ca:ca:8c:3d:77:
                    20:80:65:2b:50:1f:fa:10:fb:39:1f:ef:4c:87:c7:
                    7f:a2:ea:cb:d5:cb:43:f2:54:c1:8d:16:7a:d4:d8:
                    58:20:06:40:ef:cf:c5:6c:6a:f0:67:32:1a:e0:ed:
                    87:74:5a:ac:ff:95:22:c9:d2:e1:6d:17:12:54:7c:
                    32:18:d2:36:35:1c:b6:26:08:a3:d2:2a:7d:81:e2:
                    df:bc:ef:35:f1:34:31:d7:d2:e2:00:3f:71:26:56:
                    32:20:85:b1:38:9b:09:2f:76:8d:1d:32:4e:cb:b3:
                    3a:6a:b7:04:d1:f6:bb:7f:f2:03:33:9a:21:86:46:
                    8c:da:be:bc:ca:a5:ba:9f:fe:f1:34:26:9c:6e:bc:
                    77:4f:75:16:47:3e:70:c5:d4:52:dc:b6:10:06:c4:
                    18:2f:a3:dd:97:57:de:5c:5e:17:1e:30:c7:92:67:
                    11:2b:93:de:ec:20:a0:12:3c:a1:a9:a9:f8:f4:06:
                    2b:31:cc:71:6f:ee:01:bb:78:83:34:ab:6e:14:98:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E9:C4:B2:5F:3C:8F:57:45:46:4E:91:5E:C9:83:B6:E7:49:CD:B9
            X509v3 Authority Key Identifier:
                keyid:EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:8d:e9:81:7f:e5:18:5f:8b:b9:7a:82:48:61:ac:4a:d4:
         6d:7c:90:a9:8b:dd:4a:ac:84:f7:55:3e:ea:9c:60:e5:3f:ce:
         b4:79:25:df:19:07:5e:fb:64:2a:7f:4c:2d:56:2e:04:34:96:
         87:59:48:37:95:b8:37:6d:34:2d:7b:37:69:9a:6a:8b:c4:ff:
         cf:61:c1:02:69:ae:3f:24:c4:bf:7e:cc:98:48:4b:24:d2:af:
         f0:28:7c:7b:a5:ef:06:34:cb:a2:2e:40:e2:c9:fc:91:d1:c8:
         d0:87:f3:b4:b9:8e:d1:04:35:28:86:55:a2:0a:3b:6c:ae:f3:
         f4:67:18:e5:f3:71:2b:75:2d:8f:5a:d2:6e:36:30:9b:60:69:
         f7:94:f0:6a:ae:5b:5e:79:e0:b2:16:08:68:77:5f:8e:97:45:
         21:9e:b9:86:fc:31:1d:4c:7a:ae:56:ba:26:5c:d3:75:8e:2f:
         95:75:b7:31:1d:6b:e2:f3:2b:82:fd:31:2b:13:33:f6:d2:99:
         b8:fa:a1:f9:9f:38:9c:96:69:57:24:9c:6c:29:43:c2:14:a9:
         c4:cd:66:94:7e:8b:ec:c5:8c:69:14:f3:7c:0f:93:3b:9a:0a:
         12:b0:1c:4c:07:f1:7e:48:f5:bd:a6:e5:ee:4a:4d:12:52:7f:
         eb:4c:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:24 2024 by rpki-client on console-ams.rpki-client.org