Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa
File:                     34352e3138382e382e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier:          T6m1pP+3n2LLn6sQX4yPU/2rTIggoziZZykxQNHq67Q=
Subject key identifier:   69:C8:99:AC:AF:88:D4:E4:CA:FC:0D:91:06:11:55:89:E6:85:0E:52
Certificate issuer:       /CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
Certificate serial:       537AE9AFC9F9B1792ADF3618AA9D671A60FD0670
Authority key identifier: 1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa
Signing time:             Wed 05 Jun 2024 17:49:28 +0000
ROA not before:           Wed 05 Jun 2024 17:44:28 +0000
ROA not after:            Wed 04 Jun 2025 17:49:28 +0000
asID:                     269566
IP address blocks:        45.188.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7a:e9:af:c9:f9:b1:79:2a:df:36:18:aa:9d:67:1a:60:fd:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
        Validity
            Not Before: Jun  5 17:44:28 2024 GMT
            Not After : Jun  4 17:49:28 2025 GMT
        Subject: CN=69C899ACAF88D4E4CAFC0D9106115589E6850E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:5a:02:02:40:a1:f5:5e:fa:ca:e5:e1:d8:
                    db:86:4b:58:aa:9b:72:7d:17:cf:15:f9:7b:53:d0:
                    30:ea:6b:76:3b:5d:a9:0a:41:74:c2:39:4a:80:9f:
                    07:90:80:72:e9:2f:af:13:a0:8c:e4:03:58:ce:b6:
                    8e:5c:c3:60:af:8e:96:12:09:ee:36:be:2c:36:dd:
                    5f:c7:52:ab:27:63:85:51:1b:93:0b:90:4b:e6:dd:
                    d3:66:c5:64:15:9a:fa:80:b1:0e:be:66:5f:5e:fc:
                    4a:d4:71:0f:ec:ff:d5:1c:92:05:d6:39:af:1c:d5:
                    14:d9:71:91:89:35:01:b2:a6:09:02:c8:9f:e7:27:
                    14:2b:6f:0f:19:9f:24:fe:6a:90:9d:1b:b7:2d:b3:
                    6d:53:d5:f0:a5:cf:ab:a9:3a:ec:08:bd:fd:9a:64:
                    c7:5c:30:01:c4:9f:35:ed:e3:c4:c6:b3:9b:62:4f:
                    a1:ed:68:ee:b4:45:be:e3:47:1d:d7:79:7d:6a:72:
                    dc:fd:61:98:a5:e8:6a:d7:f3:ea:98:89:98:32:b5:
                    ac:53:77:8d:df:e5:34:00:e1:84:92:ad:31:75:d1:
                    7a:94:24:b4:3f:3c:36:47:4e:c9:34:16:7d:44:72:
                    c7:66:00:8d:52:77:58:21:d5:60:81:63:76:a9:38:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:99:AC:AF:88:D4:E4:CA:FC:0D:91:06:11:55:89:E6:85:0E:52
            X509v3 Authority Key Identifier:
                keyid:1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:3a:45:7a:c8:d0:14:2e:50:a4:1a:08:09:ce:0d:10:f5:
         76:0c:18:8d:21:26:cd:0f:2a:83:7f:a9:82:8d:bc:6d:e1:a7:
         ca:9c:93:66:90:02:62:7d:59:7e:30:d6:23:29:93:ab:f2:0d:
         33:85:62:3b:ae:54:cb:67:fc:ea:5b:98:cc:a3:50:38:16:f7:
         f5:31:a0:d1:68:0f:3b:ab:28:95:1d:69:eb:e0:34:02:15:94:
         9c:ef:76:78:fc:31:d7:84:91:34:0b:24:a9:03:9a:26:4d:34:
         78:55:2d:76:65:7b:cc:80:a8:56:b4:4b:70:c2:3a:79:ed:1a:
         e3:34:91:f0:33:1a:40:21:82:bd:04:ff:c2:23:c7:47:80:39:
         24:d0:ef:f4:4b:d3:c7:29:8f:8e:d3:54:40:29:ab:89:87:95:
         5a:08:01:1b:de:46:8d:f8:4b:ca:8e:13:f5:06:40:0a:5c:51:
         61:4a:d3:f3:7b:9b:1e:7b:6d:23:30:01:1d:3d:fc:0b:9d:33:
         73:91:c3:13:d8:25:61:be:de:8c:b8:d6:3a:4c:2e:09:61:50:
         10:17:95:22:41:33:31:69:3b:2c:af:df:3e:5d:8f:1d:64:19:
         3e:d7:e6:bb:d3:4a:be:ed:41:66:8d:24:8e:51:61:a3:1a:f3:
         5c:01:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:10 2024 by rpki-client on console-fra.rpki-client.org