Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32322d3232203d3e20323639353338.roa
File:                     34352e3138382e3230302e302f32322d3232203d3e20323639353338.roa (raw, json)
Hash identifier:          D2ykBLCQRLRRLhnAndnhPxneJOhEl4UjxGt8ZJV5aIQ=
Subject key identifier:   8D:63:9C:EA:81:92:66:52:D8:B9:1B:52:73:3E:7A:A3:A0:31:36:AB
Certificate issuer:       /CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
Certificate serial:       23DDB0625EA373B748AA3D27F75E83EE32D4C19C
Authority key identifier: 6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32322d3232203d3e20323639353338.roa
Signing time:             Thu 21 Nov 2024 14:39:04 +0000
ROA not before:           Thu 21 Nov 2024 14:34:04 +0000
ROA not after:            Thu 20 Nov 2025 14:39:04 +0000
asID:                     269538
IP address blocks:        45.188.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl
                          rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:dd:b0:62:5e:a3:73:b7:48:aa:3d:27:f7:5e:83:ee:32:d4:c1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
        Validity
            Not Before: Nov 21 14:34:04 2024 GMT
            Not After : Nov 20 14:39:04 2025 GMT
        Subject: CN=8D639CEA81926652D8B91B52733E7AA3A03136AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:ec:7b:9b:3e:2a:ff:dd:a4:74:7c:29:d8:
                    1b:bf:9c:eb:8e:de:86:07:b2:ac:b6:29:35:b0:dc:
                    8f:7a:d2:19:f0:2c:2e:37:75:c2:1a:9d:7d:d8:24:
                    89:d8:c6:17:c0:db:ab:e4:a7:c2:3b:a4:04:10:50:
                    79:97:b2:47:f6:f2:63:f6:45:21:2f:45:fb:63:5f:
                    26:9e:6e:6d:ba:dc:74:76:71:d9:1d:e9:4b:b4:73:
                    8b:42:28:06:f7:c9:30:d6:2b:4b:b0:b4:02:3b:ba:
                    76:1d:dc:e5:0f:91:e4:5f:16:a0:0a:6e:bd:42:92:
                    71:38:37:6e:75:57:33:27:44:4d:aa:18:ec:e1:c0:
                    cb:c6:d1:fb:9a:3d:8b:df:11:b9:8d:d8:a9:f7:9c:
                    3c:fa:e5:df:a0:7b:d6:26:ae:65:ba:fa:cd:73:6c:
                    d9:42:ae:04:ce:10:a2:f0:ef:44:a6:62:64:4a:8c:
                    b5:14:91:f0:20:d6:b1:82:49:51:da:8e:54:d4:6d:
                    61:a4:79:c9:ed:39:5b:9d:77:ad:7a:34:f7:14:aa:
                    66:e1:ce:cc:be:82:95:2f:e7:31:92:fc:10:71:c1:
                    89:b4:5c:8c:5e:c5:f6:4b:e8:13:7f:e2:50:7b:df:
                    90:a0:92:fc:e4:40:07:3c:39:ae:d4:59:ed:02:08:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:9C:EA:81:92:66:52:D8:B9:1B:52:73:3E:7A:A3:A0:31:36:AB
            X509v3 Authority Key Identifier:
                keyid:6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32322d3232203d3e20323639353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:7c:77:80:4d:a7:ca:08:6d:30:36:d8:3a:62:d4:4a:ec:
         27:5f:e0:a0:b2:f7:19:43:d9:8a:04:af:d1:9f:8a:e7:1e:a3:
         27:7c:c3:fb:33:88:c9:f0:b2:67:70:f6:a1:be:8e:d1:24:fc:
         af:9c:93:f5:71:0e:34:d9:5c:10:ef:ba:9f:70:41:32:c7:f4:
         8e:98:f5:33:b9:70:2d:44:a2:78:dc:9b:c5:54:e7:88:23:da:
         aa:ba:9c:ea:d1:21:5e:1a:5f:fd:ca:94:e6:ae:82:a9:4b:a6:
         e2:5d:ec:16:cc:89:a2:2a:51:b5:c4:88:e3:3f:1d:e1:c9:4f:
         80:cf:ad:92:dd:a8:b3:e3:d0:f9:27:aa:e3:2f:d3:12:94:b4:
         8d:81:18:84:ca:1f:ae:2c:4d:03:d7:ca:fd:7e:e7:57:c1:5a:
         b0:4f:49:7a:bf:e4:bc:f2:38:61:03:c1:76:e0:ec:c1:de:79:
         31:b5:95:12:22:3d:c5:15:b5:96:a3:c6:d2:c1:42:d1:b1:ed:
         2b:22:4d:01:74:f9:af:48:46:6b:08:c0:cc:26:cb:8f:8b:ef:
         9b:64:32:83:c8:da:3e:57:65:d4:51:de:13:00:11:30:ab:c7:
         d6:2a:7c:6d:ca:8d:6a:98:f3:8b:39:fb:5f:e5:49:62:a2:7e:
         4a:f4:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:03 2024 by rpki-client on console-fra.rpki-client.org