Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133342e302f32332d3233203d3e20323639363732.roa
File:                     34352e3139312e3133342e302f32332d3233203d3e20323639363732.roa (raw, json)
Hash identifier:          v5SrWIAv0LjM9ODziE1Ov72tOuVcIV+WlnqWmwo7lAw=
Subject key identifier:   F0:11:A7:06:42:D3:C7:FB:A1:58:A2:B6:F8:E6:44:22:CA:F8:AC:18
Certificate issuer:       /CN=EA8A97E97E20307979056DE90EAA41CF2EFC84BB
Certificate serial:       7B624B4ECC07B07EE78CC4B07C9E3AC394A95366
Authority key identifier: EA:8A:97:E9:7E:20:30:79:79:05:6D:E9:0E:AA:41:CF:2E:FC:84:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133342e302f32332d3233203d3e20323639363732.roa
Signing time:             Tue 29 Oct 2024 14:11:54 +0000
ROA not before:           Tue 29 Oct 2024 14:06:54 +0000
ROA not after:            Tue 28 Oct 2025 14:11:54 +0000
asID:                     269672
IP address blocks:        45.191.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.crl
                          rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:62:4b:4e:cc:07:b0:7e:e7:8c:c4:b0:7c:9e:3a:c3:94:a9:53:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8A97E97E20307979056DE90EAA41CF2EFC84BB
        Validity
            Not Before: Oct 29 14:06:54 2024 GMT
            Not After : Oct 28 14:11:54 2025 GMT
        Subject: CN=F011A70642D3C7FBA158A2B6F8E64422CAF8AC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:59:14:af:07:68:9c:92:b9:06:1e:55:d2:
                    62:56:82:93:b1:d9:b6:08:34:85:e0:50:eb:de:e8:
                    ed:0e:36:dc:0b:ae:6b:20:e1:0a:e6:e1:20:82:74:
                    e4:7a:ba:b9:3d:52:3e:00:fd:3a:39:d0:51:eb:54:
                    ee:5c:ac:e3:98:8f:c0:7a:ba:bb:b3:b5:a4:50:91:
                    09:ae:63:91:73:6a:d1:b2:44:12:4f:30:f9:3f:d6:
                    57:cd:e8:4b:dd:69:56:2c:d8:b9:ea:79:32:cc:58:
                    22:1f:71:79:53:3e:0e:5b:26:da:13:59:1e:20:c8:
                    55:e9:29:6a:09:26:90:0f:83:fc:79:1f:d9:b1:8c:
                    ac:b6:b8:3a:53:77:61:f0:87:bf:25:ef:51:19:06:
                    ce:f6:e4:28:ff:ec:96:0d:1f:c2:e1:47:58:5b:13:
                    81:8d:1e:13:4a:98:0b:ba:52:7b:74:fe:e3:f5:49:
                    c2:2c:a6:4f:5c:7c:59:c1:64:05:bd:fa:12:8a:5e:
                    a8:6a:c1:61:39:c4:82:ee:c5:d8:55:5a:6b:7a:10:
                    57:64:80:62:be:a2:e7:7c:61:cb:a1:e9:bc:50:1b:
                    a7:17:1f:ca:aa:44:ef:58:e1:0f:dc:10:e6:40:d0:
                    fd:a4:74:53:71:0f:8b:20:28:b9:45:bd:a4:6b:fb:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:11:A7:06:42:D3:C7:FB:A1:58:A2:B6:F8:E6:44:22:CA:F8:AC:18
            X509v3 Authority Key Identifier:
                keyid:EA:8A:97:E9:7E:20:30:79:79:05:6D:E9:0E:AA:41:CF:2E:FC:84:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133342e302f32332d3233203d3e20323639363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:7f:4f:14:60:02:97:76:7d:c4:fe:12:c6:e2:3b:1b:58:aa:
         da:2e:be:ee:c1:50:87:7b:69:ff:5a:48:86:40:81:86:99:24:
         76:24:49:05:78:a3:df:d9:d0:94:d9:55:cd:61:0c:5e:9a:d2:
         aa:9e:b0:3c:16:0a:60:05:5c:a8:a2:c7:2b:8c:4f:32:ea:78:
         cd:04:59:62:8d:71:a6:77:7e:2b:dc:00:4c:18:e8:64:99:21:
         3c:19:0f:c0:d3:7d:8d:5b:31:28:b7:15:09:3d:3e:6a:c4:c2:
         97:bd:ff:59:a7:33:f7:c4:e5:49:69:35:66:ac:6e:8b:13:29:
         b3:03:84:15:f0:04:ae:3e:9e:3c:d7:72:a8:d5:1b:1c:6d:e4:
         d5:a8:5c:64:85:58:59:d2:92:ec:e8:f9:2c:0f:0f:38:a1:fc:
         4a:51:c0:09:cc:ef:2e:59:5e:fd:d1:32:81:d4:f8:93:de:46:
         08:97:fe:07:e1:fe:57:ab:1a:9d:88:21:23:20:b3:df:10:c8:
         9e:92:db:3e:d7:d3:f2:88:cf:06:fa:8c:f6:7b:4b:11:a0:27:
         9a:d1:be:45:cd:01:3f:d1:e9:84:58:1e:71:ce:86:86:8f:ed:
         cc:30:6d:3a:30:91:4f:10:33:cd:7e:d3:ff:df:cb:cf:a9:38:
         09:c7:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:33 2024 by rpki-client on console-fra.rpki-client.org