Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32332d3233203d3e20323639353338.roa
File:                     34352e3138382e3230302e302f32332d3233203d3e20323639353338.roa (raw, json)
Hash identifier:          +AIRD2N+xThn1BRhh11TvWhV5Ye+Si+2eXiNNQIzSU4=
Subject key identifier:   3B:8D:07:4F:4D:97:72:72:ED:26:46:63:25:13:56:C5:5A:61:81:26
Certificate issuer:       /CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
Certificate serial:       5F32B8C132348360C509B59D3CB442E078056BF2
Authority key identifier: 6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32332d3233203d3e20323639353338.roa
Signing time:             Thu 21 Nov 2024 14:39:05 +0000
ROA not before:           Thu 21 Nov 2024 14:34:05 +0000
ROA not after:            Thu 20 Nov 2025 14:39:05 +0000
asID:                     269538
IP address blocks:        45.188.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl
                          rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:32:b8:c1:32:34:83:60:c5:09:b5:9d:3c:b4:42:e0:78:05:6b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
        Validity
            Not Before: Nov 21 14:34:05 2024 GMT
            Not After : Nov 20 14:39:05 2025 GMT
        Subject: CN=3B8D074F4D977272ED264663251356C55A618126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:7a:09:80:12:b2:14:13:41:e1:fa:d2:d7:
                    c2:df:c4:a1:89:67:4c:57:c4:75:4b:9b:8f:5c:67:
                    4f:ef:81:a1:13:b1:24:6f:65:57:67:4d:e1:71:34:
                    7a:fd:8c:a8:70:66:b2:47:63:33:57:9f:c2:99:c2:
                    a3:44:71:fd:1b:0e:44:9d:af:60:7d:38:08:2b:67:
                    fc:2b:4b:bf:d6:9c:4f:5c:d6:e2:97:75:80:e5:74:
                    da:5d:4f:78:c7:a5:f2:09:0e:d2:91:ec:40:9c:19:
                    97:44:35:9b:a0:36:d1:75:00:af:bf:60:10:61:85:
                    5c:9f:5a:f4:23:e1:8f:61:1b:7c:fa:6a:dc:a9:0a:
                    0b:c6:81:af:3d:7e:c6:f0:3d:47:9e:60:60:7d:c7:
                    3e:25:6f:01:56:f8:e1:a6:1c:48:ee:4b:e7:4f:21:
                    d2:39:38:9a:5d:1d:0a:4e:03:7e:93:63:d0:5f:15:
                    2f:93:bd:e1:fc:15:47:29:4f:57:21:32:9f:77:3d:
                    b6:30:a5:5f:4d:b1:36:72:ae:84:8f:77:6b:b9:9f:
                    db:30:c2:ee:7d:7c:7b:69:c7:5e:cb:9d:bc:d1:29:
                    30:9e:4e:97:e5:d1:26:b9:ce:22:d5:77:32:db:80:
                    f8:0a:c4:b7:d3:0b:89:c0:bb:a5:ab:e2:bd:b6:2d:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8D:07:4F:4D:97:72:72:ED:26:46:63:25:13:56:C5:5A:61:81:26
            X509v3 Authority Key Identifier:
                keyid:6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32332d3233203d3e20323639353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:69:0f:e3:11:5c:0b:f8:16:a4:a2:ca:38:b2:1f:1a:6a:
         ed:e9:83:29:58:9d:ad:ee:b1:ba:93:f5:d2:fb:ed:98:9d:8c:
         a5:a4:29:45:fc:9c:2c:7a:2c:4f:ad:e8:00:ef:82:65:b5:66:
         bf:9d:e9:60:6a:69:b1:d0:28:f1:31:09:d9:0c:69:16:b7:02:
         66:b5:ff:07:0c:df:22:5b:97:62:e4:d7:b2:55:e1:11:3f:04:
         85:e0:a5:35:79:e1:2a:4d:cb:fe:e4:35:67:a3:c1:2b:34:34:
         b6:e3:1b:31:50:aa:d5:9a:40:3a:5c:fd:01:b0:91:32:a5:12:
         65:58:33:f6:d1:d2:e4:e3:3b:f7:3e:4d:96:72:ce:25:8c:c6:
         42:d0:11:0a:5b:da:64:1c:30:df:f5:d5:ba:43:37:3c:25:94:
         c3:5c:c5:28:4a:32:d0:79:85:3a:3b:be:b7:29:65:5d:8e:f2:
         3d:ba:82:dd:ea:b9:23:6f:74:71:37:f5:df:e1:f2:c1:08:04:
         77:f8:31:a8:59:2d:90:51:39:22:fd:4d:7c:fa:93:1a:bf:9d:
         37:fe:2e:af:5a:75:0e:d7:fa:0a:e0:ba:fd:da:b9:29:3b:ba:
         83:b5:e8:96:c1:ca:f2:94:45:1b:ad:55:17:b4:db:66:c9:7e:
         fa:e2:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:03 2024 by rpki-client on console-fra.rpki-client.org