Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/34352e3137302e38302e302f32322d3234203d3e20323632373835.roa
File:                     34352e3137302e38302e302f32322d3234203d3e20323632373835.roa (raw, json)
Hash identifier:          egQG2Ws+KVIt6xL4WG2fNvHPxoeVuDpQkoTkKoCRr84=
Subject key identifier:   D6:28:CE:F6:C6:1F:F4:43:94:5E:9D:94:CB:86:03:9B:4F:BF:37:F1
Certificate issuer:       /CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
Certificate serial:       4FE59F07E43033CE9649BCCE302D730C7E207923
Authority key identifier: 46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/34352e3137302e38302e302f32322d3234203d3e20323632373835.roa
Signing time:             Mon 16 Sep 2024 00:03:00 +0000
ROA not before:           Sun 15 Sep 2024 23:58:00 +0000
ROA not after:            Mon 15 Sep 2025 00:03:00 +0000
asID:                     262785
IP address blocks:        45.170.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl
                          rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e5:9f:07:e4:30:33:ce:96:49:bc:ce:30:2d:73:0c:7e:20:79:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
        Validity
            Not Before: Sep 15 23:58:00 2024 GMT
            Not After : Sep 15 00:03:00 2025 GMT
        Subject: CN=D628CEF6C61FF443945E9D94CB86039B4FBF37F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:7b:42:7e:02:04:0d:58:bd:9d:2a:1d:33:
                    e0:96:55:8a:0e:c8:cf:d7:70:7a:8f:ff:39:a5:79:
                    5c:50:33:d2:52:4e:eb:c8:a5:29:6d:56:a5:2b:96:
                    c1:d4:fc:62:b7:d6:41:05:71:f7:21:fd:e8:09:af:
                    09:68:ba:ca:26:c8:40:4c:8a:da:81:bc:e0:f8:1a:
                    fe:34:c6:5a:24:cf:64:3a:cc:f9:fc:8a:33:10:41:
                    92:5c:a9:88:db:da:0e:16:67:cf:08:3c:b0:06:b7:
                    48:4f:4f:c4:39:12:0d:c2:97:ad:7e:b3:ee:c7:f5:
                    4e:de:7a:a3:ef:e0:07:be:49:ad:a0:be:1f:2c:ea:
                    9d:83:d8:87:07:c8:ed:c0:82:46:b6:b5:71:47:85:
                    a1:47:af:31:0e:db:f0:de:1e:ab:67:96:08:69:ac:
                    86:fc:02:a0:77:d8:74:7e:71:c7:12:15:14:10:7c:
                    f4:a0:ed:80:5b:34:73:79:89:1a:cb:c3:4f:fb:b0:
                    b5:59:67:81:c9:a3:79:d7:97:1e:84:95:25:42:c5:
                    bd:8a:18:c0:85:2b:95:1b:da:4c:70:b5:ea:38:f4:
                    2d:46:61:92:44:37:33:ae:ba:32:6b:2a:b9:1d:44:
                    fa:ff:d3:99:1a:d3:6f:66:70:36:c1:f9:94:34:ef:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:CE:F6:C6:1F:F4:43:94:5E:9D:94:CB:86:03:9B:4F:BF:37:F1
            X509v3 Authority Key Identifier:
                keyid:46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/34352e3137302e38302e302f32322d3234203d3e20323632373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:1a:98:3a:39:3c:32:9f:73:85:20:56:46:dd:c9:a8:7b:d3:
         fb:41:d2:56:44:d3:7f:a5:34:08:07:6b:2b:fa:d2:c6:3e:de:
         c2:f6:c4:b4:e5:d7:3f:24:f4:ea:47:1c:0f:dc:ad:1e:6f:f1:
         fc:e1:ce:83:e0:69:99:07:7a:73:49:3c:cd:b9:e5:18:1d:a4:
         03:2d:5c:9a:59:53:61:c0:e9:d3:bd:93:f5:f0:87:c7:eb:11:
         6c:f7:fb:a4:2a:3f:bf:f1:f9:27:25:7d:d7:dd:bf:aa:c6:61:
         9a:7d:da:bb:70:60:1b:3c:de:b6:49:61:f3:24:23:1b:3c:10:
         ba:7d:b2:af:83:4a:7c:84:6e:02:ec:6e:57:e8:67:62:68:8f:
         85:4b:c0:fc:c4:1f:6c:0d:1d:31:d1:46:e2:11:f7:e8:ae:55:
         67:32:6d:a8:ef:89:b6:ff:45:be:73:33:05:9b:7a:20:97:27:
         be:27:de:c0:b8:d5:a4:7c:9e:d5:45:60:94:86:e5:0f:b4:de:
         b2:ef:71:c5:6d:78:05:cc:a3:ec:0b:b4:d1:96:ad:7d:5f:98:
         6e:ff:eb:ca:45:e9:eb:01:c1:15:19:db:c7:c8:bb:c2:e5:2f:
         da:4d:20:e9:79:81:0c:02:82:8e:5e:88:ab:80:48:a0:74:6b:
         8b:77:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:35 2024 by rpki-client on console-fra.rpki-client.org