Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa
File:                     34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa (raw, json)
Hash identifier:          u9JOQ/Vs2Hk0d4HwD4+wkMwxu4401lmhWyFl+2dbTjA=
Subject key identifier:   60:7B:54:28:71:1C:64:27:F2:22:D2:F2:41:CB:3F:3E:B4:8F:8E:CD
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       175C9791983459CE80CFBA18A829B9B7BD3129A9
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa
Signing time:             Mon 12 Aug 2024 20:09:21 +0000
ROA not before:           Mon 12 Aug 2024 20:04:21 +0000
ROA not after:            Mon 11 Aug 2025 20:09:21 +0000
asID:                     269107
IP address blocks:        45.179.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5c:97:91:98:34:59:ce:80:cf:ba:18:a8:29:b9:b7:bd:31:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Aug 12 20:04:21 2024 GMT
            Not After : Aug 11 20:09:21 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:ce:7f:8d:a1:bc:bf:69:31:43:83:87:a2:
                    e9:3c:1b:aa:07:a0:8c:0f:45:1b:62:50:6f:dd:3b:
                    1a:3b:ce:5b:58:81:b6:ad:ca:8a:dc:69:a9:0e:e3:
                    7e:b8:4c:d1:96:7d:e1:1f:ed:c3:3b:f6:f0:ba:d7:
                    2f:3f:56:af:d8:a3:b1:1e:51:2d:08:6b:b4:fa:36:
                    d9:65:41:66:4b:02:6f:ae:27:50:cf:f2:54:cf:67:
                    bf:9e:f5:24:84:6e:8b:43:18:5a:aa:4c:8f:3d:b6:
                    1e:1f:d9:38:93:98:c6:46:dc:02:be:5d:19:03:d0:
                    06:6d:fc:f5:1b:6f:52:a6:bc:69:c8:60:da:1e:27:
                    13:ca:d9:c5:9c:0c:71:32:44:78:c4:09:d4:41:b0:
                    e5:07:a1:d4:cc:17:e1:43:f1:52:02:8a:74:b8:2d:
                    35:0d:b5:06:01:d9:d7:92:cc:51:73:e4:56:5d:2b:
                    04:55:f2:3d:1f:01:7f:62:0c:c0:c4:f5:3f:a5:0a:
                    87:de:fc:0b:80:d7:23:92:cc:49:47:b0:41:5b:6b:
                    9a:77:16:2a:dc:24:34:4f:54:75:27:5e:07:57:6e:
                    6a:23:80:9b:14:af:25:55:4c:7b:b3:e5:2d:21:93:
                    1a:3b:66:fd:90:98:b9:7b:a6:35:4a:d1:4e:b7:7e:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7B:54:28:71:1C:64:27:F2:22:D2:F2:41:CB:3F:3E:B4:8F:8E:CD
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:dc:81:f8:1c:0b:d6:8c:f7:0d:b5:19:30:dc:a0:f6:69:5b:
         59:e3:6b:e5:07:83:3c:b9:c2:19:18:58:38:d0:d7:4b:12:1e:
         b3:00:88:39:25:f2:28:27:1c:4f:b8:c4:55:13:ee:6e:d1:5f:
         d8:f5:56:74:51:58:f0:58:eb:30:08:59:f0:42:ab:00:d7:ab:
         8d:65:e3:86:1a:7b:a4:82:bd:45:d9:5e:9e:16:61:5a:cc:16:
         32:60:90:fb:4e:55:c0:61:b2:85:36:52:08:a2:fb:ee:e4:2d:
         81:39:99:0e:4e:fc:15:2d:8f:5f:90:f4:f8:ee:bc:bb:0c:6d:
         d6:b9:bd:dd:11:17:09:c9:75:6c:2b:b6:3a:97:f8:5a:ce:6a:
         a7:32:d0:4c:19:8d:d6:f7:76:0b:7a:f0:a7:b9:c2:17:97:11:
         69:e8:45:00:02:72:db:93:c9:e8:5a:06:04:46:d5:ad:bc:33:
         ee:5e:5a:d6:ee:d8:97:fb:cb:a6:cf:a8:b3:aa:da:24:e7:16:
         b3:c5:dd:12:2d:4e:ba:4e:d9:56:dd:0e:b9:9a:6e:7f:ff:90:
         72:81:ff:67:6f:c4:a4:0c:a6:5c:35:50:41:e3:4a:5b:e8:0d:
         8c:65:56:df:98:2d:85:1b:5f:8c:3b:ac:c1:bf:6b:67:1d:38:
         28:ec:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org