Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa
File:                     34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa (raw, json)
Hash identifier:          NEeXNIzIBZTJFM2E4VtAgzKuS4jtPs4fWpLSNhBXurg=
Subject key identifier:   4E:03:4F:6A:81:C7:9A:92:98:9F:C5:92:6F:FB:71:0F:D7:B1:F4:7E
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       10C8C656362F37D0472AB5296FB16D51738CE8F2
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa
Signing time:             Mon 12 Aug 2024 20:09:31 +0000
ROA not before:           Mon 12 Aug 2024 20:04:31 +0000
ROA not after:            Mon 11 Aug 2025 20:09:31 +0000
asID:                     269107
IP address blocks:        45.179.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c8:c6:56:36:2f:37:d0:47:2a:b5:29:6f:b1:6d:51:73:8c:e8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Aug 12 20:04:31 2024 GMT
            Not After : Aug 11 20:09:31 2025 GMT
        Subject: CN=3082010A0282010100D55879A8992621030C9E8955820F3C0C8E546BB390603576697861F93EB3845D9DB7DD6B217CB1E8D1C5309F40203C8CE681771C35A3DF2F653C0614BC4B210BC2E84C9AD6BF2128A5A0D6F0D83B7297D9E3FD4AFF2D0F1B7667DABED6E2793D6B19EC1DDB1BE979420D91C4D8AAB75A6780D176D1236A78AE9684D59594D4D3A4503A9EAB3D62AB121DC8401102FC648FEC3F6291DC53C9D09F15FFE69D238BFB21ED9332D4CB0A0826FC4A5097997C6BB0C19F0C67281744BED4B5768A44F5BEA2A040F7A6E529C02C7CBBD4C8F3EE41B1F2136F69F551DFA5F578E738B42309163B46180A13CD92783A23A542D970C1CC9E34DF3C6E7B50E90CC95A62A9BD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:79:a8:99:26:21:03:0c:9e:89:55:82:0f:
                    3c:0c:8e:54:6b:b3:90:60:35:76:69:78:61:f9:3e:
                    b3:84:5d:9d:b7:dd:6b:21:7c:b1:e8:d1:c5:30:9f:
                    40:20:3c:8c:e6:81:77:1c:35:a3:df:2f:65:3c:06:
                    14:bc:4b:21:0b:c2:e8:4c:9a:d6:bf:21:28:a5:a0:
                    d6:f0:d8:3b:72:97:d9:e3:fd:4a:ff:2d:0f:1b:76:
                    67:da:be:d6:e2:79:3d:6b:19:ec:1d:db:1b:e9:79:
                    42:0d:91:c4:d8:aa:b7:5a:67:80:d1:76:d1:23:6a:
                    78:ae:96:84:d5:95:94:d4:d3:a4:50:3a:9e:ab:3d:
                    62:ab:12:1d:c8:40:11:02:fc:64:8f:ec:3f:62:91:
                    dc:53:c9:d0:9f:15:ff:e6:9d:23:8b:fb:21:ed:93:
                    32:d4:cb:0a:08:26:fc:4a:50:97:99:7c:6b:b0:c1:
                    9f:0c:67:28:17:44:be:d4:b5:76:8a:44:f5:be:a2:
                    a0:40:f7:a6:e5:29:c0:2c:7c:bb:d4:c8:f3:ee:41:
                    b1:f2:13:6f:69:f5:51:df:a5:f5:78:e7:38:b4:23:
                    09:16:3b:46:18:0a:13:cd:92:78:3a:23:a5:42:d9:
                    70:c1:cc:9e:34:df:3c:6e:7b:50:e9:0c:c9:5a:62:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:4F:6A:81:C7:9A:92:98:9F:C5:92:6F:FB:71:0F:D7:B1:F4:7E
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:1f:f4:56:d0:f0:4a:1a:2c:a2:07:5b:f7:74:05:0d:50:ea:
         47:03:ff:10:87:7f:c8:89:a6:86:75:5b:24:66:39:66:9c:b2:
         c9:00:f1:d4:f2:8b:15:71:52:06:cd:43:62:59:ce:f3:b5:48:
         e6:d9:6a:ff:e8:40:82:e6:85:e7:65:de:b3:99:03:1f:84:ba:
         f7:29:cf:d9:66:52:d1:fb:42:ac:e4:f9:e4:73:81:3d:4d:e6:
         fc:69:9e:b7:2c:62:01:5d:0a:cc:a3:97:d1:2f:ca:e4:7f:c1:
         d2:2e:f1:df:17:f4:9d:7f:72:16:65:69:c0:92:d1:ba:59:70:
         73:3a:1f:a4:9a:2f:21:3f:d5:d0:3c:d8:98:93:19:c8:d4:98:
         52:b3:19:fe:be:68:74:4d:b8:e3:1d:c5:b2:6c:55:7f:06:b8:
         d0:7e:fa:c5:f4:5a:65:ac:8e:e4:d8:ff:6a:32:de:ea:27:7c:
         b0:84:56:7d:3d:ba:af:27:b4:21:6b:f0:67:1a:49:81:66:6d:
         97:08:c2:5d:5f:c8:2a:f6:c9:ff:c5:1b:b1:72:30:b8:18:2c:
         09:37:53:b0:59:42:09:45:3d:ae:af:de:a2:76:e7:d5:b2:db:
         73:52:4b:a1:40:26:ca:4d:78:b4:5c:6b:7f:f5:5f:14:fc:c9:
         44:5b:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:22 2024 by rpki-client on console-fra.rpki-client.org