Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e31312e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          S2ViLZuslA6ixTulbyAogNSszqbppA6bHQJWdSTMsQs=
Subject key identifier:   AD:40:35:A5:13:F6:C9:CC:39:C4:92:29:AC:46:D5:2E:B2:39:D7:F9
Certificate issuer:       /CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
Certificate serial:       560D0B4967B38DD314C5E4647831BA3061315FDB
Authority key identifier: 1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa
Signing time:             Wed 05 Jun 2024 17:49:55 +0000
ROA not before:           Wed 05 Jun 2024 17:44:55 +0000
ROA not after:            Wed 04 Jun 2025 17:49:55 +0000
asID:                     269566
IP address blocks:        45.188.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0d:0b:49:67:b3:8d:d3:14:c5:e4:64:78:31:ba:30:61:31:5f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
        Validity
            Not Before: Jun  5 17:44:55 2024 GMT
            Not After : Jun  4 17:49:55 2025 GMT
        Subject: CN=AD4035A513F6C9CC39C49229AC46D52EB239D7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:2c:5d:ab:a8:9b:df:70:4b:5e:d4:0d:2e:
                    88:ca:c3:0d:bc:87:d9:0e:d9:cc:da:4a:1a:2f:91:
                    29:18:95:e4:91:40:1f:e2:48:cc:0a:ee:76:20:7f:
                    3b:d8:20:61:c9:72:fe:d9:34:a9:00:11:37:0b:82:
                    91:05:0b:6b:d9:6a:b3:8f:0c:49:14:b9:25:40:03:
                    b4:90:8a:cd:14:3b:33:db:b9:67:65:19:7e:da:cf:
                    29:58:74:fe:bc:31:f1:fd:ee:2a:37:36:10:0d:2d:
                    4a:9a:ae:41:6c:60:34:c2:27:55:c6:cd:61:9a:25:
                    f8:b1:47:c0:18:ce:fe:f3:a5:a3:ad:45:41:01:2b:
                    52:00:16:27:a3:23:84:b4:a2:dc:ad:99:7f:4d:61:
                    d1:40:59:0f:6d:1e:58:b9:41:cd:77:bc:b1:c1:53:
                    4f:9e:31:4e:b8:95:cc:81:37:27:84:54:cb:17:f1:
                    96:cb:8b:32:b0:06:09:37:b7:38:d4:d3:6f:2f:49:
                    50:36:ef:0a:87:88:01:e4:72:b5:bc:52:1d:87:bd:
                    b0:51:89:05:86:0a:30:0c:ed:27:ce:32:f1:fd:f3:
                    35:df:c5:94:69:47:63:b6:ef:cd:ee:8b:27:dd:96:
                    d9:0f:d6:0e:09:2b:8c:c7:a0:34:77:27:3e:4c:81:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:40:35:A5:13:F6:C9:CC:39:C4:92:29:AC:46:D5:2E:B2:39:D7:F9
            X509v3 Authority Key Identifier:
                keyid:1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6d:25:77:a3:b0:69:ad:40:ba:18:15:bf:b8:b9:66:61:d3:
         5f:73:cc:0f:52:a3:d4:09:9c:47:bb:6c:70:55:a9:b0:e6:7b:
         83:59:2f:05:a8:31:80:af:e2:0e:86:be:0e:e6:46:b7:fa:4d:
         3b:b2:13:1e:2e:49:d1:44:f0:a7:99:7d:f4:dd:58:4c:2f:56:
         fb:0e:6c:5c:06:1e:63:df:60:76:a7:e9:20:b4:d9:e0:e7:3a:
         27:05:a0:05:63:73:46:8d:f5:18:ce:d1:ff:ea:0f:f3:4f:24:
         66:ad:f6:e0:cd:a5:7d:45:bb:5d:e0:e2:47:87:54:5e:58:b4:
         f0:97:ee:69:42:7b:7e:1b:35:03:f5:68:6e:2e:ea:33:70:6d:
         9d:91:d8:f4:bf:f7:52:5a:b7:e1:2d:a4:9f:80:13:f7:6b:c9:
         94:1b:51:09:b2:30:59:9c:4d:27:21:8f:96:92:cd:5c:37:c4:
         32:21:6d:9c:07:c0:16:7b:50:1f:20:8e:36:ba:ac:a8:72:9a:
         de:4f:87:4d:c9:1b:f0:ea:4d:10:28:41:9b:1b:d1:8f:f9:c4:
         18:69:7f:05:5d:ce:7d:e0:b4:47:d7:ee:c0:5e:f7:6f:1c:63:
         12:29:52:f1:73:4e:76:4c:42:4f:d0:67:04:8e:17:ae:b7:44:
         74:65:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:35 2024 by rpki-client on console-fra.rpki-client.org