Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa
File:                     34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa (raw, json)
Hash identifier:          WQN+udwyseXYyYNdbYjoHfG5fmjGz3qhetoqKXTBYN0=
Subject key identifier:   AB:8C:30:94:19:40:E9:46:9D:5E:FA:9B:0D:43:6F:96:C4:B2:75:ED
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       51E7767D67C672904B931F92763196D394A69D83
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa
Signing time:             Wed 03 Apr 2024 23:55:37 +0000
ROA not before:           Wed 03 Apr 2024 23:50:37 +0000
ROA not after:            Wed 02 Apr 2025 23:55:37 +0000
asID:                     269392
IP address blocks:        45.184.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e7:76:7d:67:c6:72:90:4b:93:1f:92:76:31:96:d3:94:a6:9d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: Apr  3 23:50:37 2024 GMT
            Not After : Apr  2 23:55:37 2025 GMT
        Subject: CN=AB8C30941940E9469D5EFA9B0D436F96C4B275ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:26:85:aa:23:41:1d:b1:95:96:c4:fb:ff:
                    d9:66:65:12:50:84:b9:c1:5e:70:07:8e:5e:5a:93:
                    e8:44:97:3b:70:6b:ea:d4:28:93:ab:0a:cf:7b:9d:
                    eb:9f:e8:9e:4e:59:33:5a:6b:b6:55:a7:bd:9d:94:
                    4d:0e:14:cc:89:8c:4d:39:3e:5a:92:05:4e:31:e1:
                    a5:e1:96:96:ea:32:9f:8c:33:49:35:f7:b0:79:14:
                    02:cf:2b:aa:19:b9:aa:d4:a8:5c:6e:ab:54:a8:c0:
                    25:c8:f8:b0:f5:53:5f:08:9f:ff:31:45:93:3e:9a:
                    a0:56:df:7d:10:1a:af:d8:15:bd:e7:df:45:aa:30:
                    b9:ee:f2:4c:60:c0:e4:98:eb:f8:bf:00:ce:3e:93:
                    a7:4b:32:3c:0f:fb:4f:18:f4:99:20:0a:23:97:86:
                    38:7c:ee:28:91:4b:a2:7a:7d:97:69:fb:a5:eb:2c:
                    81:96:3b:f1:7f:22:54:98:af:57:6e:41:df:54:1e:
                    b5:fa:0f:9f:03:32:9a:3d:41:f2:8b:92:2c:3f:d6:
                    03:43:44:34:cc:ed:3b:53:34:56:92:00:ac:d7:a5:
                    91:f2:c2:a5:2d:2f:24:e9:a5:75:82:e5:aa:03:f9:
                    ae:73:2e:c8:7d:34:23:d2:c5:48:7b:f6:c1:0e:f7:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8C:30:94:19:40:E9:46:9D:5E:FA:9B:0D:43:6F:96:C4:B2:75:ED
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:62:9e:40:0e:6a:61:53:04:ca:59:8f:40:71:80:08:f7:
         20:ba:9c:1a:3f:5b:36:a9:31:34:14:a1:8f:26:59:94:2c:ce:
         c6:68:04:75:8e:c2:d2:23:82:90:14:54:5e:ec:34:92:ce:a4:
         88:dd:b2:88:d4:5d:67:a2:52:95:ce:cc:d2:b5:3f:05:c6:1d:
         1d:b5:23:09:8c:73:d9:60:1d:79:72:a9:ca:45:73:c4:29:9c:
         00:e7:e6:a0:c0:d4:3e:8f:fa:5c:69:e1:b9:3f:ef:b4:c5:43:
         69:9c:0b:dd:ec:d8:3a:98:f2:78:a5:fd:3b:64:d6:7b:8d:fa:
         ee:81:0b:d1:36:ec:0a:81:ac:0d:3c:2e:41:a4:97:2a:25:34:
         6e:19:1a:d8:96:64:c0:13:b0:38:fc:ed:70:f9:a9:af:85:46:
         94:cc:dd:93:2d:95:3f:43:d1:56:29:c6:33:35:ed:3c:64:b4:
         5c:91:98:c5:5c:73:7d:1f:62:ab:b2:21:5f:8d:e5:38:9e:26:
         c8:9f:43:71:48:ee:9e:21:9d:05:38:b1:7f:69:99:24:75:0c:
         db:ec:5e:b1:d6:4c:8c:8d:31:20:75:a3:83:e3:be:1b:86:53:
         b3:ae:49:7d:e6:04:90:13:fd:47:4d:e0:30:4f:69:e1:ca:45:
         53:3e:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org