Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa
File:                     34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa (raw, json)
Hash identifier:          hXMMDa8h7lZU9t885FPv+yo3B2hF0zPAMv+hqNXtIJU=
Subject key identifier:   CE:8A:65:41:0D:73:AB:D6:98:43:1E:DF:50:BE:A3:45:C0:48:B3:6C
Certificate issuer:       /CN=EECC6BA2D38347DDFCB41A71425CB12B388DED73
Certificate serial:       074D324A750AA54334E618697717EE56FB7E42ED
Authority key identifier: EE:CC:6B:A2:D3:83:47:DD:FC:B4:1A:71:42:5C:B1:2B:38:8D:ED:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EECC6BA2D38347DDFCB41A71425CB12B388DED73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa
Signing time:             Mon 09 Sep 2024 14:19:45 +0000
ROA not before:           Mon 09 Sep 2024 14:14:45 +0000
ROA not after:            Mon 08 Sep 2025 14:19:45 +0000
asID:                     269186
IP address blocks:        45.180.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/EECC6BA2D38347DDFCB41A71425CB12B388DED73.crl
                          rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/EECC6BA2D38347DDFCB41A71425CB12B388DED73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EECC6BA2D38347DDFCB41A71425CB12B388DED73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4d:32:4a:75:0a:a5:43:34:e6:18:69:77:17:ee:56:fb:7e:42:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EECC6BA2D38347DDFCB41A71425CB12B388DED73
        Validity
            Not Before: Sep  9 14:14:45 2024 GMT
            Not After : Sep  8 14:19:45 2025 GMT
        Subject: CN=CE8A65410D73ABD698431EDF50BEA345C048B36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:64:24:49:f0:6b:9e:5e:98:23:3c:c2:07:27:
                    e6:ca:88:33:df:2c:f4:62:ac:55:12:42:75:a1:20:
                    7b:68:ad:79:f8:3b:9b:62:f4:d1:ed:5f:0c:20:15:
                    d7:0c:e8:79:32:3b:20:5f:d8:00:a9:37:d8:a2:d9:
                    7c:80:80:67:7f:80:e1:d9:80:23:21:8a:31:55:f3:
                    07:5c:eb:62:1e:5f:cf:26:79:1d:ec:fb:10:3b:ef:
                    3e:41:6e:a1:7a:a9:ef:94:fb:23:67:92:93:bb:aa:
                    7b:b4:8c:50:a5:27:ce:f6:f8:1f:31:22:8a:a9:84:
                    72:32:cb:04:a3:6a:11:a1:2a:48:22:d3:c1:20:94:
                    61:7f:07:b6:8a:32:7a:41:59:8e:64:74:2c:64:48:
                    b2:ea:fb:10:98:af:82:90:30:48:ca:9c:e9:d6:79:
                    43:d3:5d:ff:6f:50:14:45:37:e9:05:86:6e:1d:f7:
                    a6:cf:ac:a1:19:a8:e3:0b:91:c5:e2:5c:24:33:54:
                    b4:3c:83:fe:7e:8b:51:7f:68:53:3f:28:4d:55:d7:
                    8c:c0:15:8b:fa:df:8d:44:c4:95:9f:1e:92:5a:dd:
                    31:d0:75:a8:21:8f:95:03:8f:8e:3e:07:fe:8f:f7:
                    8e:6d:b0:7f:fd:21:2e:2c:de:cd:cb:65:23:c6:7c:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8A:65:41:0D:73:AB:D6:98:43:1E:DF:50:BE:A3:45:C0:48:B3:6C
            X509v3 Authority Key Identifier:
                keyid:EE:CC:6B:A2:D3:83:47:DD:FC:B4:1A:71:42:5C:B1:2B:38:8D:ED:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/EECC6BA2D38347DDFCB41A71425CB12B388DED73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EECC6BA2D38347DDFCB41A71425CB12B388DED73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:26:25:7a:12:7e:e7:da:05:71:38:a4:4d:19:f3:d5:ed:5a:
         a1:93:18:79:b1:3d:3c:19:90:05:39:d7:32:83:1b:f2:06:dd:
         94:0a:95:14:e4:8b:a4:b6:44:17:b6:60:ff:91:c9:59:27:85:
         e5:08:6b:8e:65:f7:e2:ec:56:f2:9c:02:ed:6d:ef:8e:fa:96:
         c4:54:31:11:cb:b2:0f:9d:a3:97:9e:09:c3:24:d9:dd:a9:20:
         55:45:f3:fe:e7:e8:5a:71:c2:a8:cf:0d:7a:e8:58:6f:d2:26:
         91:5a:e1:b2:69:86:1c:48:8b:3d:6b:70:0d:73:ac:b4:92:35:
         df:30:c7:1d:79:69:50:a9:5b:b6:04:3b:26:cc:88:ee:21:86:
         b4:a4:c4:7c:9e:1a:93:02:81:39:a2:32:51:79:69:7c:ce:c2:
         85:6b:52:5e:89:10:49:02:7b:76:f0:d9:d2:ed:03:05:5a:45:
         e4:f7:53:eb:af:b1:f1:6c:7e:3c:46:a8:8d:95:84:48:24:e1:
         97:0e:d4:27:32:d6:2a:75:35:08:8f:52:f8:e3:10:c8:ec:18:
         fd:2f:ff:45:62:fb:38:63:18:bf:4b:02:c2:d7:34:40:57:9d:
         e4:00:42:28:5e:91:6c:b8:d0:24:50:43:5b:c2:23:1a:a1:8c:
         d1:f5:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:23 2024 by rpki-client on console-fra.rpki-client.org