Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa
File:                     34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa (raw, json)
Hash identifier:          TO3EP6zTTf4DcN1S2fzmccsQPn4y3kNPKwQ6IhZDH/E=
Subject key identifier:   08:68:8B:12:E3:62:13:26:71:A3:3F:6E:F2:CC:B0:F7:78:0C:54:CF
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       4CC4822D93A3B0111D26B6EBE4D250A7C3E01D46
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa
Signing time:             Wed 03 Apr 2024 23:55:37 +0000
ROA not before:           Wed 03 Apr 2024 23:50:37 +0000
ROA not after:            Wed 02 Apr 2025 23:55:37 +0000
asID:                     269392
IP address blocks:        45.184.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c4:82:2d:93:a3:b0:11:1d:26:b6:eb:e4:d2:50:a7:c3:e0:1d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: Apr  3 23:50:37 2024 GMT
            Not After : Apr  2 23:55:37 2025 GMT
        Subject: CN=08688B12E362132671A33F6EF2CCB0F7780C54CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:c4:d5:c8:37:5a:60:12:31:54:e6:cf:7b:
                    56:20:ab:2f:06:26:8e:c2:be:bf:36:29:bd:37:75:
                    bd:3e:86:d4:2b:2d:14:54:67:99:c5:14:9a:71:75:
                    1c:0d:69:fe:99:2c:ac:4e:7b:a6:84:50:1e:78:0c:
                    0a:cc:08:5f:f1:eb:bd:8b:7e:2e:31:9c:dc:57:1a:
                    d1:fc:e5:ec:db:50:f1:2a:fb:a3:a0:60:6d:65:1a:
                    fc:d3:cc:53:b7:8c:57:ee:8d:24:bd:e2:34:0b:0a:
                    17:14:23:5f:05:5b:c3:eb:c2:b1:0f:8f:25:4a:f4:
                    6d:f8:b7:84:6c:28:9d:e8:5d:52:10:01:9d:a6:4e:
                    c7:fc:4e:94:67:8e:4d:de:f8:df:9a:b1:dd:ee:22:
                    56:cf:de:02:cc:cd:ab:f0:bb:4b:c9:b0:a6:4f:06:
                    f8:2a:1c:d8:f9:e8:6d:bd:97:d1:07:79:e2:02:7d:
                    5c:94:db:79:ca:b6:67:dd:0d:3c:a4:d8:77:6d:8d:
                    60:c7:00:62:46:07:46:7b:02:fc:28:00:ec:d4:c4:
                    53:64:9c:61:cf:a4:df:1d:28:64:4c:78:ab:e6:4a:
                    f5:8c:e1:5c:9f:98:a5:ee:00:07:b4:a2:cb:9a:db:
                    ed:67:b0:bd:e2:50:25:11:8a:54:be:9d:37:26:b4:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:68:8B:12:E3:62:13:26:71:A3:3F:6E:F2:CC:B0:F7:78:0C:54:CF
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:02:9b:f9:10:29:a4:29:34:9f:e1:f5:d0:27:35:c8:d9:a7:
         00:b6:b9:1b:da:3d:2d:2a:d6:5d:f0:1a:2b:71:86:50:96:db:
         8c:f9:4d:29:c5:41:3e:f0:45:c2:c6:63:49:f7:9c:00:e0:4a:
         d4:14:b6:7e:05:c2:b0:69:4a:5c:60:91:b6:c4:31:48:f2:6e:
         43:60:f8:1c:80:6f:99:37:4e:33:ed:74:24:12:7d:6c:fe:ee:
         b6:63:39:8d:73:92:00:6c:8f:b6:c7:47:df:97:40:f8:3f:f5:
         14:07:f3:7c:db:c6:a3:48:5a:59:3b:a2:4e:40:aa:8d:44:d1:
         70:53:35:f8:90:0f:5b:fc:0f:85:15:3a:86:c6:3d:b8:c7:4b:
         53:7c:2c:bb:1e:2f:2b:a1:93:16:f8:31:76:80:c7:35:09:8a:
         bf:c7:10:cb:fe:5b:2d:02:cd:6a:20:52:49:59:e2:b6:12:d3:
         b5:5a:ff:1d:fe:4f:0e:d4:fd:f3:bd:3d:51:ae:59:9d:ec:d2:
         f7:ee:d6:8a:72:8b:f8:6b:68:f1:79:7c:93:a5:14:d9:d8:2d:
         38:b9:84:09:c9:1a:92:e3:dc:e5:f7:a1:e2:dc:78:64:90:81:
         f4:bb:dd:ce:30:34:a3:96:fd:ca:35:99:80:9b:95:1f:65:54:
         94:e2:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org