Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/34352e3138322e33322e302f32322d3233203d3e20323639323635.roa
File:                     34352e3138322e33322e302f32322d3233203d3e20323639323635.roa (raw, json)
Hash identifier:          R4drt/c6DlPf0x8bQ1JIEHql+g8lCzKn1MROsX/3LcE=
Subject key identifier:   05:12:6C:C6:D1:FD:0F:08:E3:DA:8D:3C:D8:22:CE:0D:DF:99:DD:12
Certificate issuer:       /CN=E488CA807EE2E83B97BD3CD3DE145C8D03388442
Certificate serial:       3C7A34801B6B9E6328FA1C0F6B75CCA03580D2C7
Authority key identifier: E4:88:CA:80:7E:E2:E8:3B:97:BD:3C:D3:DE:14:5C:8D:03:38:84:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/34352e3138322e33322e302f32322d3233203d3e20323639323635.roa
Signing time:             Thu 04 Apr 2024 01:43:34 +0000
ROA not before:           Thu 04 Apr 2024 01:38:34 +0000
ROA not after:            Thu 03 Apr 2025 01:43:34 +0000
asID:                     269265
IP address blocks:        45.182.32.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7a:34:80:1b:6b:9e:63:28:fa:1c:0f:6b:75:cc:a0:35:80:d2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E488CA807EE2E83B97BD3CD3DE145C8D03388442
        Validity
            Not Before: Apr  4 01:38:34 2024 GMT
            Not After : Apr  3 01:43:34 2025 GMT
        Subject: CN=05126CC6D1FD0F08E3DA8D3CD822CE0DDF99DD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:8d:df:0a:58:1f:6f:6b:a5:79:fb:f1:0a:
                    ec:96:84:14:e8:5b:86:ec:03:01:44:8c:08:e2:eb:
                    57:5d:9d:ed:02:5a:dd:88:cd:44:27:3c:78:a6:d6:
                    4a:33:8c:89:ef:18:3f:41:a0:02:34:be:67:2e:49:
                    a0:6f:79:98:c1:d1:81:da:f5:b5:2b:e0:e3:6a:bf:
                    5a:06:dd:d9:65:72:a5:f3:9e:dc:a8:ef:1d:b6:a3:
                    dc:17:6d:c8:a4:95:5a:57:21:81:fc:5f:4b:92:3a:
                    fe:1e:0d:2d:50:73:c5:63:e6:c8:f2:17:dc:53:f0:
                    b2:fb:88:4c:07:5f:59:fe:59:03:a6:17:13:1d:f8:
                    dc:19:8f:3a:4e:c4:63:96:46:5f:e6:6c:db:db:90:
                    d8:0b:d0:5d:b1:fa:74:0a:8f:a5:c1:38:84:9b:92:
                    f7:b3:4f:71:6e:71:bd:4c:ac:c8:e5:31:7b:ef:d2:
                    b1:fe:e7:51:8e:bf:f3:d9:d7:8c:d2:a5:a6:22:37:
                    01:5f:9b:a5:2e:5b:3c:7b:3e:54:38:0e:4b:13:a7:
                    08:b8:3f:31:c4:0c:3c:08:81:d6:4b:a6:46:5a:34:
                    e8:f8:70:fa:a8:2e:4f:64:0f:38:2f:b1:a8:8a:19:
                    79:0b:3a:2e:aa:70:21:30:2f:2c:11:da:9f:88:f5:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:12:6C:C6:D1:FD:0F:08:E3:DA:8D:3C:D8:22:CE:0D:DF:99:DD:12
            X509v3 Authority Key Identifier:
                keyid:E4:88:CA:80:7E:E2:E8:3B:97:BD:3C:D3:DE:14:5C:8D:03:38:84:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/34352e3138322e33322e302f32322d3233203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:ce:4a:97:e5:36:4e:a2:66:3c:d6:2b:d8:a1:16:f1:2b:30:
         82:48:95:17:9d:56:e3:e4:8e:bf:6f:7e:06:f4:8c:27:b2:0e:
         f2:e1:f0:96:61:06:ac:04:0b:0d:1a:ff:41:d9:d9:5d:65:e2:
         41:7f:bb:f9:64:9d:af:21:6c:ac:07:40:5b:a9:70:c3:19:85:
         a6:14:79:09:5b:b4:8d:b7:d5:ed:9b:bc:12:c7:a5:d9:9c:bf:
         22:4d:00:7a:9c:06:e0:60:cb:40:66:ba:38:91:3f:ff:61:6f:
         15:0a:c5:9d:be:66:28:fa:f6:ce:4d:7f:fe:f6:c3:6e:6e:cb:
         5f:4e:bd:1f:e6:10:5e:58:32:07:d8:5e:b0:d4:2e:ed:c1:f2:
         20:43:e1:c2:3b:d4:d8:82:ab:a9:48:12:13:5f:82:d0:d0:85:
         76:45:be:2e:6a:9b:23:e0:5c:d8:87:c1:c8:ce:af:ee:f4:47:
         9a:fb:7f:7f:99:4b:56:70:06:cf:22:5f:b5:96:f0:76:c2:90:
         73:1d:a6:97:ef:08:67:fc:1f:b0:22:a3:a7:08:f6:03:96:f3:
         9c:47:db:49:d5:cc:dd:56:12:cd:f1:d1:1c:c8:f3:55:f2:98:
         38:fd:aa:e7:0f:88:e4:a4:a4:a3:f9:a5:77:c3:bc:f2:af:09:
         c9:9e:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 10:42:59 2024 by rpki-client on console-ams.rpki-client.org