Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37342e302f32332d3233203d3e20323637363638.roa
File:                     34352e3232342e37342e302f32332d3233203d3e20323637363638.roa (raw, json)
Hash identifier:          ywsVAbVYpQ+YJ4Vqps7cWuwQeUFke1xArbd7/tRi/WQ=
Subject key identifier:   2E:6F:DC:99:7A:92:27:1E:07:13:4D:90:68:EE:A6:21:F7:F8:26:1F
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       77A6F0ED6665BD726E95B2CA16CE36E300DB4932
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37342e302f32332d3233203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:08:03 +0000
ROA not before:           Thu 15 Aug 2024 20:03:03 +0000
ROA not after:            Thu 14 Aug 2025 20:08:03 +0000
asID:                     267668
IP address blocks:        45.224.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a6:f0:ed:66:65:bd:72:6e:95:b2:ca:16:ce:36:e3:00:db:49:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:03:03 2024 GMT
            Not After : Aug 14 20:08:03 2025 GMT
        Subject: CN=2E6FDC997A92271E07134D9068EEA621F7F8261F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:52:62:f2:3a:05:d4:e9:41:d7:05:36:0c:
                    54:fb:82:57:60:6a:bb:7c:cd:64:47:53:3f:c1:c6:
                    4f:f2:cc:55:c6:40:23:ea:6e:70:87:df:03:17:78:
                    01:49:21:3c:d5:f2:ad:58:ae:85:b2:5e:81:ca:89:
                    90:67:8a:8e:ff:78:f1:c9:d2:07:31:93:f0:36:e5:
                    45:ad:8e:21:c8:de:b5:8d:65:7c:b5:79:71:29:bd:
                    9d:4b:ee:c3:57:96:02:6f:3a:b5:fc:6c:58:68:bd:
                    66:53:b2:60:67:be:38:ce:5f:82:0c:59:41:04:97:
                    1c:5a:b6:6f:d8:29:c3:c3:f8:d9:7a:d6:84:df:3a:
                    03:53:90:18:a7:88:41:c7:25:a6:e0:7e:87:22:ec:
                    c1:53:e6:3d:eb:72:00:e5:f9:43:69:7a:45:5e:1b:
                    d8:f5:33:44:4c:28:b3:aa:45:d2:d5:c1:5b:3c:1c:
                    39:5a:20:f1:c1:08:c1:0c:bc:0c:5d:1c:61:c8:55:
                    a1:e8:2b:47:3a:95:28:67:2d:d5:7f:a2:42:1f:a6:
                    0e:17:e4:b5:60:6d:64:9b:d3:7c:0a:a6:0f:ea:66:
                    be:9d:72:02:a9:3d:35:b8:c1:af:2d:0a:51:70:e8:
                    1c:47:57:e6:d1:b6:ac:83:35:6f:ad:ec:b2:07:4a:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6F:DC:99:7A:92:27:1E:07:13:4D:90:68:EE:A6:21:F7:F8:26:1F
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37342e302f32332d3233203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:2b:bc:e2:bd:12:e7:a3:17:36:f5:4b:ea:65:10:43:61:a3:
         17:3d:73:46:13:f9:87:b7:61:9b:e2:25:88:cb:2e:b3:7e:28:
         a9:b9:7d:16:f5:a7:89:55:73:a6:bb:de:94:e7:df:48:20:51:
         cd:13:0d:43:96:da:b0:77:f4:84:96:ba:92:d7:53:be:18:1c:
         f4:64:17:26:10:b3:ab:cc:d9:fe:76:17:7e:15:3f:82:a7:21:
         a9:c8:a3:28:c4:e6:22:44:48:fc:05:a3:7e:da:e3:59:74:50:
         61:aa:69:c1:83:a4:c9:bd:8f:38:d4:ea:43:b7:46:a4:93:50:
         01:23:f3:4b:aa:01:be:22:30:66:c7:cf:57:56:d1:07:8d:f1:
         3d:1e:ae:53:94:7c:35:6c:94:d0:25:95:a9:8a:f5:f0:1d:e0:
         86:2e:90:ad:bc:e1:f0:34:e9:a9:a2:10:20:73:61:18:ed:bb:
         98:be:50:ea:18:32:9b:94:a6:bd:59:0d:e1:1f:52:a6:dc:f0:
         54:9d:60:84:b5:60:3e:42:3f:cb:d7:dd:2a:d1:4c:6d:11:00:
         70:e1:43:52:b0:cc:9f:1a:e7:93:17:fd:27:7a:9c:93:b9:41:
         98:c6:cf:8c:cb:26:7b:01:be:c4:28:54:27:1f:04:00:9f:7b:
         6e:e2:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org