Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/34352e3139302e3235322e302f32322d3234203d3e20323639363436.roa
File:                     34352e3139302e3235322e302f32322d3234203d3e20323639363436.roa (raw, json)
Hash identifier:          vs7QtViqCpU1YaH+bEGX5Anb6UbO0gxvhz5mE4Otsok=
Subject key identifier:   15:B1:E1:50:9A:52:15:82:67:70:AB:D1:CA:25:A3:BA:B7:86:D4:37
Certificate issuer:       /CN=83F8109B2205F74DDC615E0B4EDCA9114508E376
Certificate serial:       64007650C9F334CD441DD293B4C89B6CB92650D9
Authority key identifier: 83:F8:10:9B:22:05:F7:4D:DC:61:5E:0B:4E:DC:A9:11:45:08:E3:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F8109B2205F74DDC615E0B4EDCA9114508E376.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/34352e3139302e3235322e302f32322d3234203d3e20323639363436.roa
Signing time:             Wed 26 Jun 2024 16:53:53 +0000
ROA not before:           Wed 26 Jun 2024 16:48:53 +0000
ROA not after:            Wed 25 Jun 2025 16:53:53 +0000
asID:                     269646
IP address blocks:        45.190.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/83F8109B2205F74DDC615E0B4EDCA9114508E376.crl
                          rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/83F8109B2205F74DDC615E0B4EDCA9114508E376.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F8109B2205F74DDC615E0B4EDCA9114508E376.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:00:76:50:c9:f3:34:cd:44:1d:d2:93:b4:c8:9b:6c:b9:26:50:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F8109B2205F74DDC615E0B4EDCA9114508E376
        Validity
            Not Before: Jun 26 16:48:53 2024 GMT
            Not After : Jun 25 16:53:53 2025 GMT
        Subject: CN=15B1E1509A5215826770ABD1CA25A3BAB786D437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:ea:ca:1d:29:f9:6f:7d:a7:55:40:53:d0:
                    8b:77:bc:99:f3:dc:a2:65:69:1f:d5:c5:9c:ec:ce:
                    9b:f3:67:a3:cb:b9:39:12:a8:13:e7:ad:fc:e8:ff:
                    f5:1e:5d:9f:77:b9:30:cd:38:41:75:60:f8:65:9e:
                    28:78:e1:96:c0:0a:dc:9b:4e:57:56:d9:ea:43:06:
                    e3:54:1f:4b:d9:56:f7:aa:06:44:fa:3e:22:1f:d0:
                    22:4b:ff:eb:13:4b:cc:fd:a5:db:d9:12:33:1c:4a:
                    52:15:08:1e:b6:0c:9f:db:a7:aa:a8:00:ea:75:59:
                    42:c7:25:1e:a2:15:73:16:b3:47:34:a9:7d:62:28:
                    ab:b7:6b:fd:c7:fe:2a:ed:13:3d:cc:94:26:f5:6f:
                    26:1e:60:14:7e:8c:bb:9a:68:6f:c9:38:5d:a1:87:
                    c6:a4:86:bc:5c:1b:1f:e1:83:9b:13:26:b5:bd:a6:
                    3f:67:d6:71:94:bd:07:3f:69:98:c7:9a:7c:9b:99:
                    61:58:67:b2:8d:70:af:8e:0d:49:89:86:54:a0:df:
                    cc:87:eb:1f:8b:9c:ed:62:84:3e:6d:61:5f:c0:be:
                    23:ce:12:45:05:73:c5:73:50:36:3a:b3:3e:81:41:
                    f2:0e:a7:42:72:df:c0:79:1b:9f:80:09:54:ca:f9:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:E1:50:9A:52:15:82:67:70:AB:D1:CA:25:A3:BA:B7:86:D4:37
            X509v3 Authority Key Identifier:
                keyid:83:F8:10:9B:22:05:F7:4D:DC:61:5E:0B:4E:DC:A9:11:45:08:E3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/83F8109B2205F74DDC615E0B4EDCA9114508E376.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F8109B2205F74DDC615E0B4EDCA9114508E376.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/34352e3139302e3235322e302f32322d3234203d3e20323639363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:db:1b:81:23:2f:94:16:b3:fd:a3:16:15:23:c8:8e:42:61:
         8b:df:ee:1b:64:e5:a9:8c:38:09:21:d0:c2:be:10:ab:dd:5f:
         a4:f7:82:09:ce:e4:3b:4a:a0:34:aa:1f:1b:7b:b6:d5:7d:86:
         a9:a8:2e:c1:6b:4f:cf:11:fc:8f:a9:66:91:69:db:e5:b8:91:
         80:a3:0d:df:e6:03:ef:8a:6c:fd:58:7f:6c:64:45:e4:f6:a6:
         ba:d8:e0:df:fa:ce:6e:30:b0:3a:f1:63:1b:ef:c7:44:77:6e:
         81:39:e4:b0:01:24:b9:25:1d:9d:fe:30:7d:32:95:6f:08:13:
         43:03:4b:ec:51:c5:2e:f0:bb:bc:28:a5:7f:30:e3:5b:a3:be:
         0c:1f:e9:e9:d7:54:d0:25:43:a9:a7:65:13:5b:43:86:3c:a2:
         8b:e4:f8:28:11:59:19:4f:d7:4a:99:9d:95:e5:bd:d3:8a:4a:
         90:a3:68:bf:91:b6:44:14:84:55:65:f4:52:c6:a2:7a:fa:d5:
         11:1a:39:27:7d:dc:5a:00:41:df:ee:83:60:f3:12:d8:0c:4d:
         39:89:63:42:67:17:98:4d:ad:85:ff:fa:69:e1:cf:2e:e5:cd:
         05:e5:c2:6c:da:aa:63:36:48:b1:9b:46:8f:fb:fa:38:82:e4:
         03:68:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:52 2024 by rpki-client on console-ams.rpki-client.org