Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa
File:                     34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa (raw, json)
Hash identifier:          iYgnVFQ3Zd20wtiRCs+psQqfIQkPqrwl3zND1DwWOGM=
Subject key identifier:   09:51:75:2C:DB:76:9F:58:B1:08:C3:A4:C2:12:BE:13:FD:C2:D2:6F
Certificate issuer:       /CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
Certificate serial:       14A1E9595CF3D39A0674F38C2B209A8867C7FFD0
Authority key identifier: EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa
Signing time:             Wed 16 Oct 2024 21:53:57 +0000
ROA not before:           Wed 16 Oct 2024 21:48:57 +0000
ROA not after:            Wed 15 Oct 2025 21:53:57 +0000
asID:                     267940
IP address blocks:        45.165.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a1:e9:59:5c:f3:d3:9a:06:74:f3:8c:2b:20:9a:88:67:c7:ff:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
        Validity
            Not Before: Oct 16 21:48:57 2024 GMT
            Not After : Oct 15 21:53:57 2025 GMT
        Subject: CN=0951752CDB769F58B108C3A4C212BE13FDC2D26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:e0:eb:fa:b2:f4:d8:81:34:d0:82:60:dc:
                    ca:75:f3:9a:64:2f:99:07:a9:21:ea:81:11:fa:ba:
                    1d:26:62:62:a0:e8:e2:24:76:9b:3f:b3:b2:fe:24:
                    b2:6f:ac:22:3a:fd:9c:58:71:6b:b3:fc:db:1c:ed:
                    f1:3c:b5:1b:d4:ef:c3:50:c8:7f:80:55:79:9f:0d:
                    a8:95:65:46:83:de:dc:d4:94:23:61:2b:af:64:38:
                    04:77:eb:59:5f:d2:09:15:41:2d:44:ea:86:eb:49:
                    07:6b:6a:2c:e0:db:2d:2b:3e:66:2f:81:e3:0e:93:
                    80:3a:d2:a9:21:7c:11:6f:6d:49:51:a0:94:e7:db:
                    c3:de:76:fa:59:97:c7:97:73:a9:55:c8:6a:f0:92:
                    eb:fd:38:bd:dd:17:7a:2d:d0:46:ee:83:7c:94:07:
                    1c:5f:d5:fa:bd:7d:bf:d5:8d:d6:ab:30:78:aa:8c:
                    47:1d:a9:1a:e1:e6:97:28:10:9d:7a:9f:f2:cd:ee:
                    0f:a5:be:44:7b:be:38:06:90:ff:b4:48:78:45:b9:
                    f4:48:7e:a0:48:d0:11:7a:a8:5a:ff:01:78:f6:2f:
                    e3:ff:91:f5:bc:55:88:f2:6c:75:62:dd:8f:65:9c:
                    25:01:67:63:19:5f:1e:bb:d5:89:1c:5e:47:5a:a7:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:51:75:2C:DB:76:9F:58:B1:08:C3:A4:C2:12:BE:13:FD:C2:D2:6F
            X509v3 Authority Key Identifier:
                keyid:EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:07:77:40:0d:df:d7:c5:64:90:57:a1:b9:77:2c:93:52:cd:
         95:a8:4d:a0:f5:4c:16:df:aa:39:f3:7f:d8:67:9c:e2:d3:f0:
         23:e3:57:49:18:56:90:77:e3:9e:72:c5:50:c9:fa:1f:af:2d:
         90:10:64:54:f3:93:87:fd:58:52:fb:99:6f:37:6a:1f:a9:ad:
         9e:10:33:9b:a1:60:df:03:a0:ca:a4:9f:0a:36:45:e9:4d:71:
         9b:f7:85:ee:63:01:62:17:fd:67:85:2d:a6:01:60:c7:19:a0:
         5a:d7:56:5e:28:8b:e0:0f:9f:8a:47:c6:df:6b:57:ba:e3:4f:
         a6:1e:a1:4c:92:e2:08:99:17:1a:de:39:cd:f0:1e:32:b3:51:
         4a:16:09:c9:d5:4d:0b:61:d1:67:a8:f2:90:17:e8:70:6f:92:
         e8:4b:ab:9d:55:ba:b8:95:60:38:97:35:01:b4:4f:f0:f3:a2:
         76:0a:4d:09:c0:44:b3:96:de:22:1e:7d:bb:87:db:8a:7b:ee:
         c8:a6:72:8b:0b:92:2d:c2:2a:18:c8:c5:d2:6b:9d:35:d2:1c:
         e8:1e:a7:73:e3:47:46:e1:c4:6d:f9:04:87:cc:4a:43:3d:81:
         6c:6b:d9:51:6b:8b:d0:56:d3:7d:76:82:7d:11:a0:d3:18:3e:
         7b:c7:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:47 2024 by rpki-client on console-fra.rpki-client.org