Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa
File:                     34352e3138392e32302e302f32322d3332203d3e20323639363439.roa (raw, json)
Hash identifier:          THzG1irdLu6oRplZDvsfV5bFjwEHrLs8L2adlAvOW80=
Subject key identifier:   5E:F1:14:31:A1:A6:09:F5:6E:9B:11:8C:4F:45:6A:93:B9:35:AC:03
Certificate issuer:       /CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
Certificate serial:       016C380889DADB030EBA2A3417A71ECC34BA47C1
Authority key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa
Signing time:             Thu 04 Apr 2024 19:27:22 +0000
ROA not before:           Thu 04 Apr 2024 19:22:22 +0000
ROA not after:            Thu 03 Apr 2025 19:27:22 +0000
asID:                     269649
IP address blocks:        45.189.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl
                          rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 15:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6c:38:08:89:da:db:03:0e:ba:2a:34:17:a7:1e:cc:34:ba:47:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
        Validity
            Not Before: Apr  4 19:22:22 2024 GMT
            Not After : Apr  3 19:27:22 2025 GMT
        Subject: CN=5EF11431A1A609F56E9B118C4F456A93B935AC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7e:79:84:78:90:f1:b3:1c:35:f1:55:80:c2:
                    6b:4f:a1:8f:1f:af:bd:bc:c9:27:f4:bc:c1:27:db:
                    ae:e4:9e:2f:31:90:38:59:48:6f:b4:f2:9a:64:74:
                    e5:a2:f0:10:af:b0:3c:cd:40:d7:fa:04:cd:9c:66:
                    cd:5e:ea:61:16:e1:87:d1:63:22:b8:31:03:90:b5:
                    36:73:95:b5:72:3b:6d:8d:72:04:78:31:0a:c9:71:
                    19:0a:9e:33:23:66:05:ea:ad:de:1b:aa:7d:54:69:
                    4c:51:60:af:75:b2:be:a6:0d:25:e2:91:39:1d:58:
                    9b:a2:d2:02:69:2f:17:81:03:30:4b:d4:ae:4d:21:
                    6e:d5:c1:a1:70:c3:1a:ce:e5:1b:76:34:13:e3:d7:
                    8a:c4:40:b2:08:09:9f:6f:18:cf:78:6e:89:e7:e9:
                    0a:99:5c:4e:f2:97:5a:39:ce:65:9d:5e:52:f5:f2:
                    b2:5f:91:67:f3:c1:ba:e5:86:27:70:83:32:6e:c6:
                    46:c5:c2:98:2e:9f:7f:2c:76:d1:2a:ee:30:e1:0f:
                    21:61:89:54:9a:91:d4:0f:72:e3:c5:35:0f:41:7d:
                    6e:96:90:75:a1:dc:5b:be:0a:f8:ac:71:64:8d:80:
                    da:08:58:00:32:ae:d8:49:3f:7d:a0:42:b4:b0:06:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F1:14:31:A1:A6:09:F5:6E:9B:11:8C:4F:45:6A:93:B9:35:AC:03
            X509v3 Authority Key Identifier:
                keyid:BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:ae:59:38:ec:d0:3e:be:19:91:71:16:9c:f7:17:19:c0:
         33:03:5a:1d:ea:e3:38:0a:a1:d5:f1:5f:ff:0b:18:1c:73:8d:
         7b:50:26:a7:37:d4:d1:f6:3e:02:f9:a9:36:d0:b7:be:26:03:
         e5:20:6e:ef:e7:9a:57:39:49:dd:67:45:cb:72:3f:7c:1e:33:
         48:77:bb:f1:2c:9a:7d:1a:db:1c:e0:5e:c4:61:a0:ff:3c:9d:
         6e:58:aa:b4:51:de:17:14:d4:a1:86:86:11:b9:ad:0b:f3:a0:
         04:ad:cc:cd:3c:34:49:6f:b4:f6:3b:52:ff:a7:6b:6e:47:9b:
         2f:bf:e5:4e:25:3f:0e:4d:08:ac:4f:12:a3:3d:b3:2c:5a:98:
         09:df:5d:e0:a7:27:4e:9b:de:26:7e:34:c8:aa:bf:70:6b:1b:
         e6:36:7f:3c:ef:cc:43:b6:83:f9:b6:87:3f:ce:a2:35:c1:5e:
         21:15:11:93:e0:89:42:c9:2a:bc:0e:f1:20:4b:87:93:b1:3e:
         a3:ce:63:bc:31:7f:0a:1c:ca:71:46:72:17:be:98:57:9b:e6:
         76:0f:0f:66:c0:a9:02:42:04:e3:49:76:88:b5:b8:c7:89:26:
         83:df:df:f3:8c:64:1e:7c:0f:55:cf:21:47:c6:5c:d9:2e:45:
         aa:a9:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:07 2024 by rpki-client on console-fra.rpki-client.org