Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa
File:                     34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa (raw, json)
Hash identifier:          Xwf+stWRMdRcvul6A8gt1dSkfOn6wsgg26/2extVpgM=
Subject key identifier:   4A:FE:BE:E1:A1:11:6B:26:64:01:A6:53:74:FA:F8:59:54:F3:8C:EC
Certificate issuer:       /CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
Certificate serial:       4F00B03718C1E614689E0F53CD7A634DE20A4ECD
Authority key identifier: E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa
Signing time:             Thu 04 Apr 2024 08:59:13 +0000
ROA not before:           Thu 04 Apr 2024 08:54:13 +0000
ROA not after:            Thu 03 Apr 2025 08:59:13 +0000
asID:                     268787
IP address blocks:        45.172.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:00:b0:37:18:c1:e6:14:68:9e:0f:53:cd:7a:63:4d:e2:0a:4e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
        Validity
            Not Before: Apr  4 08:54:13 2024 GMT
            Not After : Apr  3 08:59:13 2025 GMT
        Subject: CN=4AFEBEE1A1116B266401A65374FAF85954F38CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:d3:3f:9e:e1:eb:80:ec:78:41:91:3a:21:
                    da:b5:f5:1a:7f:27:16:37:a6:13:6e:d2:14:d1:97:
                    83:c8:94:8f:66:3f:3e:99:3e:52:2d:41:ff:16:1b:
                    ec:cc:22:1e:1c:0d:08:5b:3b:9a:b8:4f:27:3a:8c:
                    db:14:ce:ff:be:ce:48:7d:6a:c8:f9:af:fd:33:40:
                    6f:67:d4:81:a0:29:d5:81:63:bc:f3:33:2e:55:5e:
                    cd:52:a8:19:2b:0a:f5:93:cc:5a:ea:94:0b:95:79:
                    52:91:af:92:22:01:fd:fb:eb:86:79:8a:a8:fd:15:
                    44:6b:95:64:33:04:46:75:a5:b6:a6:10:0d:ff:6c:
                    95:c2:45:aa:ed:ae:71:bd:7b:60:47:7f:83:5c:34:
                    80:d2:de:ea:bf:a1:a2:3f:dc:c6:1c:bb:6c:38:04:
                    74:34:13:ad:b6:e1:5d:1f:8b:9c:d3:d4:5d:65:e6:
                    9f:28:d5:54:98:95:b2:1f:4a:48:fa:7e:e5:ee:a8:
                    42:11:2d:c7:d8:5b:1f:c9:b0:3f:47:ac:a2:09:f8:
                    67:5a:f0:47:82:46:97:ce:9b:43:a0:dc:6a:1f:89:
                    d3:2d:dc:f4:68:32:d8:a0:cb:3a:cd:59:9e:1d:4d:
                    9c:a0:66:90:cd:c8:42:54:0d:ba:d3:1f:c1:9d:f6:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FE:BE:E1:A1:11:6B:26:64:01:A6:53:74:FA:F8:59:54:F3:8C:EC
            X509v3 Authority Key Identifier:
                keyid:E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:c1:73:ff:54:88:30:3e:99:86:e4:ff:1a:6d:4e:26:f5:
         c6:32:25:1c:aa:0f:4c:7a:b5:83:5e:fe:f7:ef:89:51:c8:0b:
         5d:2d:7b:71:17:ec:72:d1:a4:b1:1c:12:cf:36:f9:d0:d9:51:
         0f:c8:1f:e3:dd:2c:5b:a6:30:af:05:e0:17:3b:90:38:83:48:
         bc:c1:bb:6a:79:f9:03:17:27:01:4c:e2:d8:83:96:77:15:27:
         dc:b4:fc:8a:2c:20:ca:90:ad:3a:09:53:fe:52:bc:a9:18:bb:
         a1:5e:1e:53:17:f0:c6:3e:48:db:ab:6d:71:f7:02:1e:64:7a:
         72:53:c2:ea:52:7c:89:23:06:2e:84:c3:85:18:05:b2:8e:8d:
         30:3d:a9:86:7b:d6:57:14:b7:a6:f5:b3:c2:76:9f:bf:c2:95:
         db:71:b7:45:82:30:f5:23:3b:08:05:59:48:71:17:f1:a5:80:
         c0:2e:6d:4d:45:4c:b8:f1:02:ad:42:6e:c7:f2:7d:d9:8a:11:
         a0:bc:37:be:c4:21:a8:d0:3b:00:02:98:2d:1c:b7:18:3e:68:
         d6:fb:50:f0:7c:f6:29:96:0a:24:d1:18:61:bc:68:f1:77:01:
         66:cb:79:b7:0a:0d:9f:9a:b7:25:37:6e:7e:26:54:63:a3:6f:
         af:ff:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:44 2024 by rpki-client on console-ams.rpki-client.org