Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32332d3233203d3e20323733363833.roa
File:                     34352e3233322e35362e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          hOJGl+/YRPg/3CEJcYw2SOjs5KXXboARYEVz6TfyjP8=
Subject key identifier:   93:29:66:60:44:39:34:47:95:50:B5:39:4D:3D:80:9F:FC:C1:90:3E
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       7E702289F4286C41E73001E135DEC00BA302A484
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32332d3233203d3e20323733363833.roa
Signing time:             Thu 31 Oct 2024 08:47:19 +0000
ROA not before:           Thu 31 Oct 2024 08:42:19 +0000
ROA not after:            Thu 30 Oct 2025 08:47:19 +0000
asID:                     273683
IP address blocks:        45.232.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:70:22:89:f4:28:6c:41:e7:30:01:e1:35:de:c0:0b:a3:02:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct 31 08:42:19 2024 GMT
            Not After : Oct 30 08:47:19 2025 GMT
        Subject: CN=93296660443934479550B5394D3D809FFCC1903E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:58:04:61:8d:23:1f:7f:ba:84:45:8b:b4:
                    30:54:6d:4c:38:88:d4:2f:44:38:ed:20:25:8d:66:
                    9a:b1:85:39:7e:69:7f:9a:d3:01:77:e6:a4:d6:94:
                    ba:99:df:71:5d:39:ff:13:ff:02:f3:06:ac:62:56:
                    84:a3:ba:ac:8f:a9:98:c2:7c:28:31:a1:b2:0c:cb:
                    a1:ef:a1:5a:70:4c:a8:70:42:0a:cf:6c:8d:01:f0:
                    05:5f:ff:7a:73:c4:18:87:54:75:ad:af:85:01:dc:
                    b8:11:5c:29:74:18:f4:de:12:14:f4:27:1f:07:d9:
                    bd:1d:07:6b:a7:0e:34:53:b8:73:aa:55:53:a9:16:
                    f5:46:ec:f3:01:64:74:27:dd:06:9f:e4:e3:ed:03:
                    f7:0d:59:d7:8a:07:6e:43:95:7d:37:61:cd:87:d2:
                    df:1d:31:e8:a8:31:a0:8b:1c:c1:8a:b2:52:67:88:
                    0c:ed:9a:9b:fc:0a:a1:05:1d:3e:0e:23:60:71:0a:
                    aa:d4:81:76:d5:e9:ff:bb:30:10:08:2a:8f:a3:b5:
                    be:25:c8:05:a7:88:7f:59:22:98:f7:6f:d2:d1:70:
                    da:7e:57:13:23:a2:be:b7:d2:bd:8f:b0:1a:19:93:
                    14:66:5f:37:d4:97:e3:4a:e4:ec:24:3d:60:ae:c9:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:29:66:60:44:39:34:47:95:50:B5:39:4D:3D:80:9F:FC:C1:90:3E
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:49:72:f8:26:c3:73:f8:64:4a:d8:a4:6b:4d:0e:2d:03:35:
         56:6a:04:cd:89:8c:18:9d:e8:78:9c:09:3c:6f:59:bb:b0:cc:
         1c:3c:bf:d4:a6:6d:e4:2d:17:e6:70:97:86:c4:ac:de:2c:3a:
         b8:ea:bf:cb:16:a7:e7:4a:36:8e:c0:55:c4:a1:ee:03:78:ab:
         6b:34:77:30:63:c4:7a:8e:d8:4f:6b:ed:82:35:3c:f0:ad:d7:
         e7:a4:89:2f:ee:09:9c:19:07:73:cb:3b:e0:66:9b:2a:3f:8e:
         e3:ba:c8:3f:3c:b2:a2:3e:5b:89:c4:36:d4:39:1d:81:f9:af:
         fc:b6:7e:f0:52:0f:c7:c2:9a:83:98:e7:e0:b8:42:c4:4a:11:
         59:e8:1b:ab:f1:49:ac:f6:61:0c:2f:07:4c:34:94:58:64:0f:
         88:47:7d:34:54:24:73:3e:ec:c8:95:24:d5:f7:0f:15:25:e0:
         14:81:28:6e:83:b6:7e:22:dc:a5:21:66:46:b2:ed:24:6e:42:
         ed:cf:2e:9a:68:00:a4:ae:a5:07:4f:cb:95:b9:3c:8c:ac:36:
         49:1e:48:77:bb:93:cc:2c:25:c3:a5:e1:e4:99:54:43:f5:6f:
         41:b6:94:40:8a:84:03:24:c7:91:1a:68:e3:dd:cc:3f:dc:45:
         51:59:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org