Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135312e302f32342d3234203d3e20323639313037.roa
File:                     34352e3137392e3135312e302f32342d3234203d3e20323639313037.roa (raw, json)
Hash identifier:          ey2lOfjNHCM5+GhfDFQQuiPfe2nV1Etpe/3bIPuQa6E=
Subject key identifier:   1A:4B:F1:2C:86:59:22:71:ED:61:F7:3A:2F:AB:1A:68:C1:0B:EE:19
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       388A6AE38327BA42AEE31B9B6634DC3B99F2375E
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135312e302f32342d3234203d3e20323639313037.roa
Signing time:             Mon 12 Aug 2024 20:09:16 +0000
ROA not before:           Mon 12 Aug 2024 20:04:16 +0000
ROA not after:            Mon 11 Aug 2025 20:09:16 +0000
asID:                     269107
IP address blocks:        45.179.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8a:6a:e3:83:27:ba:42:ae:e3:1b:9b:66:34:dc:3b:99:f2:37:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Aug 12 20:04:16 2024 GMT
            Not After : Aug 11 20:09:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:d3:d9:63:ce:36:14:56:2b:80:24:b0:88:
                    e8:3c:eb:e2:41:56:86:11:5b:0f:c9:3a:a8:10:53:
                    bb:1e:11:34:cb:bb:a4:5c:bf:23:7c:c5:f7:fc:04:
                    e5:7c:96:58:cf:d0:d1:af:ec:19:0b:14:e8:c8:e9:
                    36:06:f5:3f:c0:9b:e0:55:b6:19:71:9a:41:b3:49:
                    21:24:32:bc:70:83:37:a9:7b:59:e6:95:e4:0c:3a:
                    66:87:96:ff:1e:f1:d8:bd:f2:28:43:eb:d9:13:0c:
                    61:9d:cc:eb:bf:bc:5d:a4:f5:4f:45:62:9e:bb:e2:
                    1b:20:6e:8c:55:0a:ff:27:20:23:9a:c2:eb:a3:d6:
                    3d:33:4b:ad:c8:4e:85:b1:f5:1e:ac:7d:f8:68:1d:
                    be:27:59:5d:1a:dc:6e:f7:1f:62:c5:e9:b0:70:99:
                    00:b6:9d:ba:62:9b:0f:7d:d5:d9:40:7c:bf:34:4e:
                    3b:ce:df:22:51:c7:33:0d:a4:2d:b5:b2:c5:0b:8a:
                    78:b2:b6:20:8b:6a:64:9d:fa:db:aa:de:16:55:be:
                    48:06:4e:56:d4:ca:62:87:04:54:d1:0d:27:76:77:
                    0b:17:af:a8:55:53:b2:04:2e:eb:7d:be:ed:71:d9:
                    6c:33:4b:0f:83:2b:e2:6c:9a:20:c4:76:66:73:cc:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4B:F1:2C:86:59:22:71:ED:61:F7:3A:2F:AB:1A:68:C1:0B:EE:19
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135312e302f32342d3234203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:5f:7b:fa:27:d4:9a:6f:59:b6:45:cb:0c:ba:95:8d:11:07:
         38:18:69:c5:b9:5c:07:24:1f:a3:a4:70:89:f9:cf:62:d5:a9:
         b8:17:c3:9f:96:db:6b:da:b8:83:5e:e5:21:0d:37:4b:b2:73:
         34:fb:64:10:c2:94:a9:ad:b3:9d:bd:24:90:b1:e5:e8:df:80:
         b5:7d:df:6e:ea:4a:fd:ca:62:4e:d3:66:de:4f:32:75:a9:80:
         5a:22:03:b4:59:cc:11:32:4d:f2:fa:04:42:1f:5b:bf:76:5d:
         4c:ea:aa:bd:29:36:e9:e8:c4:b0:08:59:d2:db:9f:fe:e4:aa:
         bb:8d:c6:7d:0b:6d:cb:17:39:ce:c8:e6:0a:d1:55:74:94:49:
         7a:c0:5c:42:03:0c:12:02:91:5c:ac:93:3c:09:13:e4:3d:25:
         1b:1f:f7:90:7c:e4:f3:c0:32:a9:9c:a4:c5:4a:c7:ec:f0:9d:
         e2:93:a9:74:c0:30:7c:51:19:4d:be:e9:54:c4:48:17:fd:2c:
         6f:f1:30:3e:93:85:cb:0c:fb:39:b8:e0:23:ae:96:6e:de:17:
         45:9c:c1:8f:78:cf:14:63:fe:7a:9c:b5:82:08:94:34:bd:dd:
         02:3a:cf:b8:5e:75:a4:98:35:bd:12:74:5b:c0:b9:ce:79:62:
         b1:d3:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org