Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/34352e3136322e35362e302f32322d3332203d3e20323638353033.roa
File:                     34352e3136322e35362e302f32322d3332203d3e20323638353033.roa (raw, json)
Hash identifier:          tGnUDWaUKI+l8yCpxzawoHnj8nPbexmb8BHR9J/kTSw=
Subject key identifier:   82:43:A9:74:E3:9B:A4:12:10:C8:DB:6B:F2:9C:13:0F:15:9B:31:FE
Certificate issuer:       /CN=CB4E9C406D5F0885AD85C9212628075DF1A74B32
Certificate serial:       79928069F60E69759A64341515873DD9BAEED7B8
Authority key identifier: CB:4E:9C:40:6D:5F:08:85:AD:85:C9:21:26:28:07:5D:F1:A7:4B:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB4E9C406D5F0885AD85C9212628075DF1A74B32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/34352e3136322e35362e302f32322d3332203d3e20323638353033.roa
Signing time:             Tue 26 Nov 2024 19:53:01 +0000
ROA not before:           Tue 26 Nov 2024 19:48:01 +0000
ROA not after:            Tue 25 Nov 2025 19:53:01 +0000
asID:                     268503
IP address blocks:        45.162.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/CB4E9C406D5F0885AD85C9212628075DF1A74B32.crl
                          rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/CB4E9C406D5F0885AD85C9212628075DF1A74B32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB4E9C406D5F0885AD85C9212628075DF1A74B32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:92:80:69:f6:0e:69:75:9a:64:34:15:15:87:3d:d9:ba:ee:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4E9C406D5F0885AD85C9212628075DF1A74B32
        Validity
            Not Before: Nov 26 19:48:01 2024 GMT
            Not After : Nov 25 19:53:01 2025 GMT
        Subject: CN=8243A974E39BA41210C8DB6BF29C130F159B31FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:ca:d0:68:87:e2:4f:ba:83:7c:39:a8:85:
                    6e:8d:16:ae:5e:75:5d:d0:d6:df:b7:b5:8f:b9:89:
                    ef:9d:87:ed:17:39:1d:05:8a:41:17:49:ce:72:0a:
                    99:52:f1:eb:68:7d:56:eb:8b:c9:c9:37:7b:c8:27:
                    d1:03:9f:90:bf:6d:32:2e:2f:b3:14:e9:a8:3a:ae:
                    f5:18:44:0f:1f:02:7c:14:2d:26:47:53:f1:db:1d:
                    3f:d1:48:dd:d6:89:da:26:94:65:d4:ca:8f:d8:32:
                    58:00:f9:60:92:f3:6c:71:ae:02:05:88:d7:7d:2a:
                    f3:63:b6:6c:69:6f:e1:5d:89:2b:e4:a9:13:5f:1e:
                    e2:e0:79:c3:c6:81:1a:75:a3:7e:dc:1b:2e:55:78:
                    4a:c6:c7:8e:4e:64:3b:22:83:c7:db:e6:7d:f5:a6:
                    7b:09:10:5b:bd:fc:69:6a:e5:46:96:a4:74:a1:30:
                    42:e3:50:44:29:de:b6:b3:63:e6:f5:ac:f1:da:6d:
                    a2:c6:be:37:92:50:37:9c:a1:49:42:8c:ef:c5:95:
                    82:6b:86:5f:55:f5:e2:50:3b:e1:80:f8:e5:c7:f0:
                    30:9a:a5:8d:98:93:8f:3e:55:83:a3:46:23:0a:52:
                    ac:e8:1d:13:e9:f1:a2:35:00:67:b5:99:81:ab:00:
                    ee:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:43:A9:74:E3:9B:A4:12:10:C8:DB:6B:F2:9C:13:0F:15:9B:31:FE
            X509v3 Authority Key Identifier:
                keyid:CB:4E:9C:40:6D:5F:08:85:AD:85:C9:21:26:28:07:5D:F1:A7:4B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/CB4E9C406D5F0885AD85C9212628075DF1A74B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB4E9C406D5F0885AD85C9212628075DF1A74B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/34352e3136322e35362e302f32322d3332203d3e20323638353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:21:17:42:3a:c1:79:c7:42:11:72:27:91:50:da:7e:b7:c4:
         f2:da:28:22:59:d6:77:35:bc:05:bc:7c:f1:aa:c9:41:8b:c5:
         0a:89:f1:45:1f:28:e7:0d:98:cd:3b:89:0a:60:ca:41:6a:4e:
         9f:6f:56:60:75:1a:c6:d4:52:2d:de:5d:9d:c3:03:28:d1:62:
         c2:2d:c0:ac:22:53:93:65:c7:15:60:e8:09:5e:11:8b:ad:f9:
         67:54:fc:a4:39:5f:de:39:5a:3e:90:a7:68:5e:85:3b:2b:40:
         0b:80:6c:72:d1:8b:79:f4:ce:ca:0c:9c:db:1a:40:b2:c6:3a:
         87:cc:82:69:57:11:f6:5d:a0:25:aa:d1:77:c6:9e:f6:d1:63:
         e2:6c:00:0c:3d:d2:d7:d8:b0:9c:9c:b0:3d:c8:1f:54:94:e0:
         b3:82:71:e3:c1:58:5e:03:ae:e6:05:d1:64:30:62:55:25:61:
         bd:c2:6f:d6:6c:8c:74:b9:6a:78:16:a0:39:03:57:36:9d:e9:
         bf:b0:4c:04:b7:86:74:d1:9f:fb:d1:3d:e2:7c:c9:ce:78:8d:
         c9:98:15:31:9f:50:ab:34:25:1f:f0:59:81:ab:ce:a1:ad:e6:
         d8:b3:d5:6b:46:f9:0f:09:99:8d:be:10:b9:5b:f8:19:a9:93:
         0f:45:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:51:28 2024 by rpki-client on console-fra.rpki-client.org