Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa
File:                     34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa (raw, json)
Hash identifier:          Uam1Fyjh6jP6AhfGkyceu+AoZmsAmIa6eXLWWHZCBjg=
Subject key identifier:   1A:DE:20:C7:1E:32:A5:D4:13:30:3E:29:16:85:6B:2E:63:E0:4E:76
Certificate issuer:       /CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
Certificate serial:       20F0D61B3FC643C7D1B25312E26B3715D99291F2
Authority key identifier: EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa
Signing time:             Wed 16 Oct 2024 21:53:57 +0000
ROA not before:           Wed 16 Oct 2024 21:48:57 +0000
ROA not after:            Wed 15 Oct 2025 21:53:57 +0000
asID:                     267940
IP address blocks:        45.165.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f0:d6:1b:3f:c6:43:c7:d1:b2:53:12:e2:6b:37:15:d9:92:91:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
        Validity
            Not Before: Oct 16 21:48:57 2024 GMT
            Not After : Oct 15 21:53:57 2025 GMT
        Subject: CN=1ADE20C71E32A5D413303E2916856B2E63E04E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:0e:c8:90:e0:b9:2a:a4:dd:d0:8e:d5:22:
                    13:bf:04:ac:f2:da:6d:83:bf:4e:d0:af:e2:e3:f6:
                    e1:69:01:6a:06:66:0b:d1:ad:22:68:88:04:38:72:
                    3b:51:0b:7f:13:02:07:3c:fd:bb:7d:1d:c3:25:8e:
                    b0:5c:b2:ce:0e:32:47:c2:62:14:7e:47:01:05:63:
                    89:3e:62:3a:29:45:6a:42:08:25:4a:ad:06:4a:8f:
                    2f:c9:32:20:e3:7c:31:de:15:19:64:2e:cd:27:cb:
                    02:66:27:d2:bb:6f:15:2a:18:f0:cd:a4:4b:1e:25:
                    82:74:be:56:9b:69:dd:e8:95:d8:a0:95:5b:e6:f1:
                    dc:40:5f:8e:f8:4c:5f:be:8a:f8:24:e8:f3:87:40:
                    80:65:8e:a5:bc:fb:0b:64:44:57:eb:47:80:20:55:
                    fe:14:80:66:fd:3b:6c:4e:be:8f:da:f1:62:bf:78:
                    4a:62:47:67:4f:5d:c9:0a:52:b9:43:b7:62:db:7a:
                    38:d9:19:cd:5a:6f:fc:c6:8f:34:43:59:37:04:30:
                    97:b8:6a:ee:de:3f:c2:fc:d5:7b:ee:d6:47:9d:b9:
                    41:e0:7f:01:d8:84:d5:33:3b:89:16:b7:78:cf:a3:
                    b1:a2:a5:f0:09:26:c2:4d:51:52:73:6b:82:83:ee:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DE:20:C7:1E:32:A5:D4:13:30:3E:29:16:85:6B:2E:63:E0:4E:76
            X509v3 Authority Key Identifier:
                keyid:EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:d5:b3:24:1e:ed:87:b7:1a:59:59:3b:fe:f3:5f:26:ca:
         bd:b2:8c:8a:ff:c5:ac:dc:25:36:ee:0f:2d:5a:f8:bf:44:97:
         5b:21:fe:77:42:3f:59:5b:ca:33:26:f4:25:84:09:0c:7d:b6:
         24:89:54:c4:42:44:86:63:38:05:ff:b6:bc:ef:3a:20:50:4f:
         ec:aa:4b:f1:2c:1a:22:7a:d9:5e:2f:8d:22:61:74:61:82:26:
         ac:67:fb:67:85:ad:81:fb:91:8d:d8:42:79:94:d0:19:1d:01:
         15:be:50:db:aa:59:9c:fd:00:10:ba:ce:3c:b0:3b:a3:29:af:
         81:1a:d3:72:b1:f9:a5:67:c0:28:26:7e:29:60:ac:8e:1e:20:
         6a:c5:16:59:4d:74:31:4a:e1:f1:b7:73:93:bc:10:08:e8:a1:
         d6:4f:43:20:ad:50:2c:4f:e9:fa:0c:a1:0f:3b:80:43:26:a3:
         1b:80:ef:ac:ff:64:20:2d:e7:6b:05:5b:ea:83:82:04:6b:ef:
         aa:00:b9:ce:44:bc:91:63:00:57:ae:b8:c6:9f:65:64:87:de:
         3a:82:11:aa:a5:77:47:09:ef:56:49:30:cd:25:cb:b6:8d:91:
         47:d9:49:e0:4a:c7:9d:08:54:60:76:4b:16:07:d9:3c:ea:57:
         d0:68:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:40 2025 by rpki-client