Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa
File:                     34352e3138362e35362e302f32322d3332203d3e20323639343132.roa (raw, json)
Hash identifier:          1vqEES6Kkx09M5q9KKM5QvmZlOCN7IbSyBgxQHCRmtA=
Subject key identifier:   F6:10:22:6A:47:AA:DD:96:7D:D4:12:D6:1B:9A:F6:59:F2:D7:89:85
Certificate issuer:       /CN=EC1910123F7F6AC855834D3BED8883627192021E
Certificate serial:       2D5CB324CF0D9F5616314D44D4D84B898F945CC9
Authority key identifier: EC:19:10:12:3F:7F:6A:C8:55:83:4D:3B:ED:88:83:62:71:92:02:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa
Signing time:             Thu 04 Apr 2024 19:46:29 +0000
ROA not before:           Thu 04 Apr 2024 19:41:29 +0000
ROA not after:            Thu 03 Apr 2025 19:46:29 +0000
asID:                     269412
IP address blocks:        45.186.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.crl
                          rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5c:b3:24:cf:0d:9f:56:16:31:4d:44:d4:d8:4b:89:8f:94:5c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1910123F7F6AC855834D3BED8883627192021E
        Validity
            Not Before: Apr  4 19:41:29 2024 GMT
            Not After : Apr  3 19:46:29 2025 GMT
        Subject: CN=F610226A47AADD967DD412D61B9AF659F2D78985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:a3:58:a7:22:54:47:df:8d:85:1d:65:b1:
                    37:51:92:e8:d0:66:57:ef:a3:06:bf:d9:5c:e8:30:
                    1b:6d:7b:8e:c0:98:68:3a:7c:e2:97:13:20:73:2f:
                    d9:60:a0:a4:60:dc:25:29:f4:3a:6f:0d:6b:fe:b5:
                    0a:55:4b:2d:11:0f:4b:16:c9:d1:8d:f9:c5:88:2c:
                    73:e1:ba:7f:5d:ed:76:72:bc:cb:c8:c3:8e:07:4d:
                    39:4e:c2:d0:6a:39:53:39:ac:9f:96:6c:7b:3a:8a:
                    02:ad:a6:c8:97:fb:f5:81:96:a8:92:13:64:76:99:
                    73:96:6d:41:8e:28:e6:a2:c2:45:8b:5e:c6:e2:f1:
                    13:3a:b9:f5:c6:78:3d:92:cc:1c:46:c7:a9:e1:57:
                    ea:82:85:99:89:e2:df:c8:58:32:15:89:8a:fc:a6:
                    e9:b6:5b:9c:86:51:57:4f:2d:a5:31:18:d2:16:7a:
                    0c:92:67:2a:9e:a5:04:18:5e:a8:80:09:e8:73:5e:
                    6d:6f:bd:88:e9:b5:64:55:8c:5f:40:e6:21:d4:22:
                    25:46:65:54:ed:85:4f:32:8c:71:8d:0e:4a:b6:40:
                    4f:d3:50:43:6b:22:ca:57:38:12:64:48:37:25:03:
                    90:94:18:a6:7d:91:90:a3:3f:08:e2:c9:54:ff:53:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:10:22:6A:47:AA:DD:96:7D:D4:12:D6:1B:9A:F6:59:F2:D7:89:85
            X509v3 Authority Key Identifier:
                keyid:EC:19:10:12:3F:7F:6A:C8:55:83:4D:3B:ED:88:83:62:71:92:02:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:09:35:a9:c8:bd:65:75:88:db:90:2f:dd:a9:ac:33:1a:
         68:69:d2:59:27:95:f9:80:b2:ec:e5:05:9a:8d:26:a9:d4:c3:
         79:91:74:d0:8f:d8:ab:5a:e0:f2:8d:8b:77:c7:4c:59:fb:62:
         c8:ab:c8:ca:9c:0e:58:a4:5a:c1:eb:5b:4c:9f:d9:39:ca:d5:
         54:1c:66:a7:94:4f:88:19:b4:b6:9d:da:93:13:8b:11:c2:d9:
         d4:f1:d1:d8:52:99:d8:f9:99:8f:6d:83:b2:fc:c8:bc:c9:51:
         c0:bd:5e:37:8a:1b:de:04:22:36:9f:72:bb:cf:a8:0a:c5:a7:
         66:3b:33:b2:09:7e:54:92:69:7b:b9:7c:2c:a2:1a:d3:97:87:
         66:c1:1c:86:ac:6e:c2:99:04:d8:ad:b4:06:a2:e2:1f:4a:9d:
         34:f1:03:a2:1a:57:51:c0:5e:1b:9b:81:10:5d:f7:9f:f3:3f:
         0b:e7:f3:f7:3e:ec:68:27:8c:9e:2d:58:e4:10:e2:d1:8f:57:
         9b:94:c5:58:31:aa:ce:25:e1:09:4f:55:37:33:be:09:79:25:
         d9:bb:19:20:9c:81:23:76:9a:87:5a:5f:8c:46:c1:13:25:40:
         89:5e:a8:0e:27:53:b5:c3:f9:98:68:8d:6d:14:ce:ae:ab:35:
         56:3d:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:49 2024 by rpki-client on console-ams.rpki-client.org