Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/34352e3137392e38362e302f32332d3233203d3e20323633363631.roa
File:                     34352e3137392e38362e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          zfhiweDAdG9IGoItaDi7MJX7AQKBlhoVFtxykRJwUtg=
Subject key identifier:   9F:91:76:18:0D:B7:DC:31:D7:32:D1:CA:2B:D4:2B:DB:12:20:6C:61
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       21574C27A60F2384504F45EE8E80B31D0A8CC0CC
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/34352e3137392e38362e302f32332d3233203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:27 +0000
ROA not before:           Thu 04 Apr 2024 01:33:27 +0000
ROA not after:            Thu 03 Apr 2025 01:38:27 +0000
asID:                     263661
IP address blocks:        45.179.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:57:4c:27:a6:0f:23:84:50:4f:45:ee:8e:80:b3:1d:0a:8c:c0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:27 2024 GMT
            Not After : Apr  3 01:38:27 2025 GMT
        Subject: CN=9F9176180DB7DC31D732D1CA2BD42BDB12206C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:36:f6:41:7c:08:64:db:23:a6:cc:a5:41:
                    bf:59:4e:97:42:b3:b0:c6:0d:0f:fc:5f:e5:68:bd:
                    77:d7:60:23:5e:88:3e:e1:0f:55:e2:1b:2f:f8:6c:
                    6b:bc:27:0e:59:93:62:67:d8:7c:69:09:f5:4d:17:
                    2a:f9:49:ab:a7:19:04:58:be:bd:5e:f7:ae:6a:3f:
                    2c:70:e5:a3:ff:38:7c:df:db:15:f1:3c:5e:42:95:
                    3a:ef:e0:35:49:cf:87:c5:ee:23:97:c6:17:d6:cb:
                    2d:39:52:e2:32:ec:9b:12:63:fd:e1:22:2b:e9:57:
                    4a:8b:58:5b:dc:55:4e:63:49:59:7a:69:de:11:b8:
                    02:d0:8f:2b:ae:93:1b:c8:b7:c0:14:e4:cb:8e:35:
                    34:14:45:42:17:4f:92:dd:31:45:12:31:0c:6b:99:
                    1f:d4:31:fc:12:49:b3:a1:c0:ed:d8:36:ec:ba:db:
                    4e:5a:c8:d0:39:5d:64:f9:e3:9e:7c:3f:d2:f3:66:
                    ca:c2:6f:49:24:36:a7:fc:8f:94:8b:3e:34:06:22:
                    a7:9e:2a:a2:e3:f7:2e:99:8b:68:c7:c7:f3:79:fb:
                    76:96:37:df:1a:5c:d4:06:d1:d8:da:87:91:c8:2f:
                    d4:6c:e7:e0:18:9c:8e:c7:8b:e4:be:d0:ac:c4:55:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:91:76:18:0D:B7:DC:31:D7:32:D1:CA:2B:D4:2B:DB:12:20:6C:61
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/34352e3137392e38362e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:36:2c:6f:ee:4d:c6:a1:f4:6d:a0:8d:9e:ea:a6:fe:66:03:
         ca:4d:14:9b:d8:6d:47:d4:ab:38:77:0a:ec:6d:e1:30:6e:05:
         e5:4a:64:ac:e2:7e:7c:e1:7b:9f:12:ac:72:19:b2:6d:04:00:
         93:c3:84:26:1c:89:30:f4:cc:eb:76:91:30:5e:e6:05:b6:61:
         c9:eb:79:5b:89:eb:95:64:3c:9f:07:9d:18:8a:74:69:87:31:
         b5:52:5b:7a:ae:da:81:f6:1c:f6:d8:76:e9:af:17:60:54:8e:
         ee:c0:70:31:55:2b:95:2c:7e:64:25:5d:c1:7f:6f:45:3a:b2:
         61:b0:01:b0:44:c3:ea:65:56:31:4f:06:d1:ab:18:68:df:ea:
         23:95:85:32:ce:e7:b6:86:3b:9a:01:95:ba:fe:2c:fb:31:53:
         bc:0f:b1:87:2a:43:24:b6:9d:9f:ec:26:ff:eb:38:6e:16:58:
         89:4c:10:b6:de:89:29:5c:1b:3c:fc:2e:23:e4:62:f1:1d:bf:
         5a:70:6f:91:7b:c1:78:01:a1:05:a9:f5:2f:83:17:b5:47:a6:
         55:e4:62:bf:ea:9c:5a:12:bc:99:0e:4b:32:9d:16:f9:e0:b5:
         77:4b:9d:5d:69:b0:b4:c4:d7:c9:06:ae:25:78:8b:b7:85:dc:
         db:e5:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:27 2024 by rpki-client on console-fra.rpki-client.org