Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32332d3233203d3e20323638373837.roa
File:                     34352e3137322e3230342e302f32332d3233203d3e20323638373837.roa (raw, json)
Hash identifier:          MYfA/+nNjNk3Jg8NPrQEE5Tn9yYDRHo11L04oPkh1bg=
Subject key identifier:   E1:E2:03:A8:DA:9C:FF:0D:E3:80:70:F8:73:55:44:2B:B0:2B:A7:2E
Certificate issuer:       /CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
Certificate serial:       32AF055F42F1320F66E360575DF6B0437DDF011E
Authority key identifier: E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32332d3233203d3e20323638373837.roa
Signing time:             Tue 20 Aug 2024 17:29:14 +0000
ROA not before:           Tue 20 Aug 2024 17:24:14 +0000
ROA not after:            Tue 19 Aug 2025 17:29:14 +0000
asID:                     268787
IP address blocks:        45.172.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:af:05:5f:42:f1:32:0f:66:e3:60:57:5d:f6:b0:43:7d:df:01:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
        Validity
            Not Before: Aug 20 17:24:14 2024 GMT
            Not After : Aug 19 17:29:14 2025 GMT
        Subject: CN=E1E203A8DA9CFF0DE38070F87355442BB02BA72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:55:aa:71:6f:bf:ae:12:ca:f9:8c:cb:9f:
                    51:3c:83:ce:c8:4a:27:b2:2d:df:92:ee:be:e2:ab:
                    59:1d:2a:c1:41:d7:3f:2a:34:5f:25:13:fb:ca:9e:
                    b3:88:45:af:9c:b1:d5:a3:d4:24:ef:ce:fc:28:f2:
                    44:e3:00:32:21:28:05:36:a6:af:b2:22:1f:de:bb:
                    48:c5:5a:08:ef:0e:6e:c8:1d:0c:b6:17:2e:06:ab:
                    29:e8:d0:cf:ce:d4:6d:98:02:7c:27:96:5e:a6:6b:
                    65:3c:43:f0:7c:26:aa:40:37:de:2e:08:f2:f7:12:
                    2b:d6:e1:5a:aa:27:eb:17:95:3e:1b:55:9c:a2:9b:
                    c9:c6:34:af:e1:e5:df:db:65:b1:52:b2:9e:58:99:
                    58:86:a5:2c:fc:e3:55:c2:95:1b:38:ba:47:94:c5:
                    5a:cb:eb:32:e1:02:60:fc:f8:97:11:cc:3d:9f:80:
                    50:3f:d9:2f:a5:72:c4:a1:7a:d2:c9:ff:44:39:01:
                    7e:dd:2f:d0:68:a3:a5:f9:55:27:c0:a8:dc:c1:da:
                    5a:3b:fc:ad:4f:c9:be:f4:52:fe:21:53:d9:67:dc:
                    58:d5:b5:79:6f:21:fa:74:4f:ce:11:f6:79:f8:38:
                    8d:50:f0:c5:23:e2:cd:d8:33:d2:14:c8:00:58:a5:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:03:A8:DA:9C:FF:0D:E3:80:70:F8:73:55:44:2B:B0:2B:A7:2E
            X509v3 Authority Key Identifier:
                keyid:E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32332d3233203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:9d:ef:68:fe:ff:34:ed:88:44:bf:6e:df:ea:3b:66:28:1e:
         5d:b4:bb:b5:35:0e:38:82:b0:e5:f3:97:b8:51:4a:b8:5c:47:
         af:ea:6c:2b:f0:ab:b9:e9:25:0d:c8:60:9a:a8:2d:26:7f:09:
         ad:0f:9b:b7:57:25:af:07:d2:d2:03:74:c0:22:79:bf:65:c6:
         32:51:cd:37:ec:f8:7d:fd:70:12:49:03:2e:4b:59:ac:35:e8:
         72:9a:28:57:bb:7e:87:56:40:7a:45:a4:ef:cf:87:e5:be:39:
         23:77:9e:f4:12:23:9c:90:56:aa:29:9d:eb:26:ce:cf:39:7c:
         d1:0c:64:36:7c:60:1f:13:85:9f:c0:50:4d:d2:71:b4:e2:e0:
         13:7e:cd:c0:16:e8:2b:49:27:d4:2b:5a:b5:26:9b:dd:21:cf:
         1e:5b:e3:cf:4b:77:76:2a:de:e8:fb:fa:f5:6b:8b:75:25:e2:
         86:d4:da:82:b6:e1:d2:cd:d2:ee:f9:ae:10:bb:fa:e3:45:16:
         a9:75:5f:50:dd:f6:29:5f:63:e7:a6:b1:2b:fa:0e:61:f5:5b:
         26:28:e3:5c:eb:b2:c8:cd:c8:58:cf:d1:c8:ba:cb:bb:45:ad:
         d9:8c:fd:00:3b:21:30:bc:fc:c3:03:28:10:b3:fb:91:b1:56:
         d9:0c:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:39 2024 by rpki-client on console-fra.rpki-client.org