Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32332e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32332e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          STUTTS9Wj0hf5bSZd/NwsL0QIxxDmsLuJ+nSe4pQjPc=
Subject key identifier:   88:09:35:CC:E0:EC:92:55:CB:B4:4B:52:D0:D1:10:B8:C7:BB:0A:75
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       6464E831A27330CBC183AAB223FBEB5DFC6180E0
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32332e302f32342d3234203d3e20323637303931.roa
Signing time:             Wed 31 Jul 2024 17:44:30 +0000
ROA not before:           Wed 31 Jul 2024 17:39:30 +0000
ROA not after:            Wed 30 Jul 2025 17:44:30 +0000
asID:                     267091
IP address blocks:        45.229.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:64:e8:31:a2:73:30:cb:c1:83:aa:b2:23:fb:eb:5d:fc:61:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Jul 31 17:39:30 2024 GMT
            Not After : Jul 30 17:44:30 2025 GMT
        Subject: CN=880935CCE0EC9255CBB44B52D0D110B8C7BB0A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:49:25:06:f8:34:bf:86:4f:8e:86:87:6e:
                    f4:66:ca:eb:83:a7:40:83:18:17:72:b9:0a:60:47:
                    22:c0:2a:7d:3b:e5:7a:f6:84:59:82:b0:47:f5:6b:
                    b5:fa:d4:4c:3c:f5:bf:50:1c:24:96:51:81:d8:7b:
                    aa:42:1f:21:69:c2:fe:ca:d5:76:01:51:38:ab:6e:
                    9b:20:d9:f8:46:28:e2:99:0b:db:31:59:5e:11:74:
                    48:b4:46:e8:6a:1e:24:09:0c:78:7d:66:07:07:0e:
                    0d:78:c9:d1:7a:8c:57:6e:92:eb:fd:10:65:5e:d9:
                    34:41:94:79:2c:2e:41:e7:45:36:11:2b:90:d5:41:
                    1f:27:c5:95:11:ce:92:d6:e5:6f:43:90:04:72:b7:
                    a4:da:2b:d0:ab:87:3b:ea:42:3b:0d:ce:f2:bc:9a:
                    b0:49:37:7a:17:e5:ee:3f:aa:e7:9d:53:b1:5c:a0:
                    42:13:69:65:33:4f:7e:60:c6:f4:84:f4:91:68:88:
                    e5:6d:ae:bc:95:48:64:ce:0a:ae:b0:44:78:ec:18:
                    3e:1e:4c:dc:15:f7:a7:16:11:c6:f4:a9:d4:40:a2:
                    df:95:3a:0e:cc:76:1c:94:9c:8c:c2:58:fa:9a:f9:
                    d7:e6:f1:82:74:d3:9d:ab:52:7c:8e:22:48:36:3f:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:09:35:CC:E0:EC:92:55:CB:B4:4B:52:D0:D1:10:B8:C7:BB:0A:75
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32332e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:70:7e:47:12:1e:bb:89:14:bb:31:1b:fa:fa:a8:93:58:5f:
         ee:28:f3:cc:1a:f4:a4:12:e5:7a:0f:15:02:30:30:01:1a:31:
         da:d0:98:d2:08:f2:66:16:b4:c4:fa:7b:fe:86:a6:e4:b2:96:
         ca:f6:36:5b:bf:32:ca:e0:41:ed:46:c0:58:41:dc:a7:4b:6d:
         0c:58:20:4d:e4:8b:1e:cf:85:2d:b0:94:c5:1d:af:21:c8:2e:
         4f:3d:c4:04:b0:c4:90:f5:16:c1:f5:1f:23:3b:80:57:87:92:
         ab:95:b5:72:b5:dd:5a:9c:72:b1:d6:21:74:b0:33:a0:c5:24:
         56:b6:e5:09:2c:36:b1:38:c7:bb:86:2b:63:df:20:1f:b6:f5:
         c3:44:ee:b9:94:4b:ea:12:82:ef:90:1a:bc:e7:fd:81:65:3c:
         f6:b6:ea:e3:ee:6a:6f:6e:7f:f9:90:37:cd:2b:51:13:5f:0c:
         c0:da:7c:b0:e8:dc:55:58:71:41:30:43:93:2e:d7:75:af:05:
         03:3c:e3:f0:29:da:09:d6:80:1d:d6:26:a4:1e:7a:89:37:e3:
         c2:da:4a:80:45:81:4f:8a:63:7b:08:f5:b5:dc:25:aa:b4:e7:
         b9:52:dd:7f:ad:e5:8d:78:73:e2:ac:db:b3:7c:58:8c:41:d4:
         60:00:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:37 2025 by rpki-client