Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa
File:                     34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa (raw, json)
Hash identifier:          iZGcHEGWtQ4RqKjYjH5+7lIdtF/+9xwXQ1B4WWQP0zI=
Subject key identifier:   C2:36:97:AA:C6:7C:EB:2F:E6:96:56:47:3A:D7:69:8F:0E:DB:96:F9
Certificate issuer:       /CN=251707BFD07C618F959CF8F0ED4E733932A49193
Certificate serial:       1EA2F8A77F46181AF79DDD2E91BD3AAF6FEEB23D
Authority key identifier: 25:17:07:BF:D0:7C:61:8F:95:9C:F8:F0:ED:4E:73:39:32:A4:91:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251707BFD07C618F959CF8F0ED4E733932A49193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266979
IP address blocks:        45.226.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/251707BFD07C618F959CF8F0ED4E733932A49193.crl
                          rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/251707BFD07C618F959CF8F0ED4E733932A49193.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251707BFD07C618F959CF8F0ED4E733932A49193.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a2:f8:a7:7f:46:18:1a:f7:9d:dd:2e:91:bd:3a:af:6f:ee:b2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251707BFD07C618F959CF8F0ED4E733932A49193
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d3:2b:0a:76:64:91:6f:21:e4:41:cb:64:d2:
                    a5:d2:65:c6:84:cd:3a:9c:35:74:fa:42:dd:67:6d:
                    e1:74:b8:5e:00:83:0f:5c:fa:83:83:df:8c:48:68:
                    b4:1e:32:de:de:b9:16:75:be:d8:63:62:c1:21:3c:
                    7e:68:36:dd:a6:49:5c:e1:e6:4c:30:e7:24:b6:51:
                    90:c7:46:95:86:42:44:c3:9e:0d:70:57:48:a0:d0:
                    d3:84:26:d1:6b:fa:9a:e0:c2:00:86:8d:6c:e0:2c:
                    85:f8:ac:95:d1:13:57:0b:30:2b:39:d2:6b:8d:26:
                    28:69:d8:9d:eb:18:db:e8:42:3f:08:ec:8c:4a:4e:
                    43:b8:7b:fe:b8:ce:9d:00:aa:6d:19:ba:a0:eb:47:
                    10:e8:16:dc:43:9f:f5:28:cd:5f:70:cd:93:aa:3a:
                    3d:be:a8:db:33:8e:44:8d:b3:2f:fd:25:98:28:b4:
                    fc:02:67:3b:0e:e4:22:64:ac:90:d0:50:6b:98:fe:
                    a9:77:8d:1f:14:51:f5:e5:92:9b:da:69:50:23:0d:
                    de:9c:58:0e:93:88:15:c8:30:7a:76:64:a1:71:f5:
                    27:a8:30:38:f3:ff:18:87:78:71:13:75:66:ae:7f:
                    57:7b:aa:62:a6:1f:74:d2:23:78:70:72:6b:7a:1d:
                    b0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:97:AA:C6:7C:EB:2F:E6:96:56:47:3A:D7:69:8F:0E:DB:96:F9
            X509v3 Authority Key Identifier:
                keyid:25:17:07:BF:D0:7C:61:8F:95:9C:F8:F0:ED:4E:73:39:32:A4:91:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/251707BFD07C618F959CF8F0ED4E733932A49193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251707BFD07C618F959CF8F0ED4E733932A49193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:95:31:eb:d2:a0:c8:f6:09:99:ca:70:31:a0:6a:03:1a:0a:
         e4:86:b3:31:ab:b0:ef:10:52:36:54:d4:f7:e3:7c:1a:3f:a0:
         e7:31:67:c3:95:1b:6a:9f:ac:f2:b2:6c:da:b4:05:d6:b6:fa:
         0c:96:5d:c6:cb:29:94:43:dc:f6:c6:0e:52:7b:f6:b1:ad:fb:
         cc:e4:e1:b6:cd:15:a7:6a:91:dc:4d:94:af:08:a0:18:90:40:
         91:4d:7a:27:85:2e:8f:b3:ec:0b:dd:c6:3a:15:ff:66:60:57:
         0d:da:31:7e:b4:74:ef:49:87:23:cd:a8:00:78:84:c1:20:03:
         48:8c:4a:e8:a2:db:33:46:af:55:b2:0f:07:12:22:8e:c5:ce:
         34:95:21:74:98:65:a7:d3:bf:9d:2c:23:c2:1e:df:ae:c8:b7:
         52:e5:25:5b:99:ab:fe:87:72:8e:66:17:bc:c4:d0:b7:91:54:
         3e:d5:7b:ef:bb:25:13:d0:5b:65:76:99:91:9c:f6:c6:aa:3f:
         8d:1c:44:ef:d2:71:c1:bb:16:da:9b:40:dd:71:2d:a6:a0:c1:
         a8:40:62:cd:3d:e9:c6:13:c1:c9:f5:d5:bc:76:91:03:84:75:
         c8:ef:54:70:d6:44:bc:3c:95:f2:51:2a:07:80:f0:a4:1d:75:
         68:d6:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:37 2024 by rpki-client on console-fra.rpki-client.org