Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32322d3332203d3e20323636393231.roa
File:                     34352e3232352e33362e302f32322d3332203d3e20323636393231.roa (raw, json)
Hash identifier:          9edu9OWAgr9xp85gslIVzmUmRcE9ckfup4JNKVaNut4=
Subject key identifier:   56:8A:91:90:E9:6D:94:41:1F:93:7F:19:91:DF:0B:48:A1:EC:AB:B2
Certificate issuer:       /CN=9E13BFCE913E86C0DF4141935694A0B193DE9C56
Certificate serial:       472B8B4EAF9DA2D4FF8E2B7AD4141C1A333A7437
Authority key identifier: 9E:13:BF:CE:91:3E:86:C0:DF:41:41:93:56:94:A0:B1:93:DE:9C:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E13BFCE913E86C0DF4141935694A0B193DE9C56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32322d3332203d3e20323636393231.roa
Signing time:             Thu 25 Apr 2024 18:14:19 +0000
ROA not before:           Thu 25 Apr 2024 18:09:19 +0000
ROA not after:            Thu 24 Apr 2025 18:14:19 +0000
asID:                     266921
IP address blocks:        45.225.36.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/9E13BFCE913E86C0DF4141935694A0B193DE9C56.crl
                          rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/9E13BFCE913E86C0DF4141935694A0B193DE9C56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E13BFCE913E86C0DF4141935694A0B193DE9C56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 13:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2b:8b:4e:af:9d:a2:d4:ff:8e:2b:7a:d4:14:1c:1a:33:3a:74:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E13BFCE913E86C0DF4141935694A0B193DE9C56
        Validity
            Not Before: Apr 25 18:09:19 2024 GMT
            Not After : Apr 24 18:14:19 2025 GMT
        Subject: CN=568A9190E96D94411F937F1991DF0B48A1ECABB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:8b:4c:59:90:e4:f2:70:7e:b9:6b:b8:62:
                    df:64:85:e9:0b:04:45:e3:24:09:ee:2c:9a:51:06:
                    7f:30:00:0d:36:28:2a:6d:21:10:69:30:74:03:a4:
                    cc:d7:3c:6b:ab:1c:c8:3c:f2:d4:9c:16:81:47:b7:
                    8b:49:66:31:7e:ee:44:1d:6f:52:27:2a:92:58:b9:
                    27:23:be:d6:81:a1:ca:5e:42:10:38:bd:17:67:43:
                    9d:99:e5:e1:9b:f2:14:3b:ea:20:11:00:2a:6c:70:
                    2f:35:32:9d:4b:43:0e:4c:66:c0:d8:a7:91:27:d2:
                    0e:28:58:e3:16:fb:a4:01:dd:bd:0d:45:66:46:93:
                    9a:2e:c0:a4:09:d8:80:06:c4:d8:1e:70:b2:64:29:
                    c5:f5:a4:ae:f1:48:5d:e1:21:8d:a0:e3:46:3c:87:
                    1c:dd:61:6e:c7:72:65:c6:c0:24:f1:22:cf:a4:d8:
                    37:71:2b:24:e1:26:81:3f:f8:10:93:4e:1a:87:40:
                    6e:7f:c4:fc:74:aa:c0:58:75:3d:b8:b7:91:4f:80:
                    f0:76:c5:8f:63:a9:b2:36:1f:eb:ce:b7:90:85:aa:
                    b2:a5:85:c8:c7:21:4c:df:65:c0:ff:05:92:5d:43:
                    9b:e8:ae:90:6c:79:18:10:a1:87:be:59:e9:d5:cc:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8A:91:90:E9:6D:94:41:1F:93:7F:19:91:DF:0B:48:A1:EC:AB:B2
            X509v3 Authority Key Identifier:
                keyid:9E:13:BF:CE:91:3E:86:C0:DF:41:41:93:56:94:A0:B1:93:DE:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/9E13BFCE913E86C0DF4141935694A0B193DE9C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E13BFCE913E86C0DF4141935694A0B193DE9C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32322d3332203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:9a:91:e7:11:ae:c4:14:8e:53:ec:3d:e1:1d:f4:19:0a:6b:
         eb:7c:49:b1:05:da:b1:5b:eb:27:eb:d2:0c:69:c6:c2:e8:ef:
         c1:ba:92:b0:a9:37:13:b8:9e:b3:e4:5d:35:b5:60:ac:c2:f4:
         df:20:cd:f0:79:c8:92:c3:f4:c9:6e:c1:5e:35:67:79:f1:7d:
         3c:dd:55:b3:84:9e:41:f6:f4:95:bf:e7:5b:11:d4:e0:c4:5a:
         03:88:26:42:97:e5:de:2a:68:1d:f0:be:d8:6b:50:45:35:47:
         61:e7:85:8d:c3:9d:03:51:31:e2:a7:32:27:c2:b6:23:cb:d5:
         e7:75:29:b0:4f:98:ae:2c:7b:1d:8b:69:86:68:69:6b:84:3b:
         ea:e6:52:0d:21:f1:40:d2:9f:df:17:4b:41:e7:b2:2d:be:dd:
         67:b7:7f:10:b2:47:a0:ab:a7:29:94:66:7c:e3:c7:4a:c0:f7:
         f7:4f:e7:0c:76:d9:b8:e3:34:25:c2:be:c3:a7:22:cc:6c:4e:
         1c:30:2b:7d:6a:ca:63:07:b5:07:9b:95:78:72:f9:29:62:a9:
         bf:e3:e3:17:a1:1a:b3:19:1a:d1:65:9d:dd:cd:2e:6e:07:31:
         6c:50:83:13:8d:13:48:33:93:cb:12:15:b1:7a:02:6c:85:c8:
         15:17:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:24:32 2024 by rpki-client on console-ams.rpki-client.org