Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35372e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233322e35372e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          Qpb7zqOH+gyAiWtb77ihJAQ4w3/ih0Z+BYkF3ibfAUM=
Subject key identifier:   1E:F8:2C:FC:91:DF:17:21:DC:62:79:53:05:2F:8E:2E:61:FC:CC:F6
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       176237EC13B0DE477F702B690E2E0EE31B1864F2
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35372e302f32342d3234203d3e20323733363833.roa
Signing time:             Thu 19 Dec 2024 18:38:24 +0000
ROA not before:           Thu 19 Dec 2024 18:33:24 +0000
ROA not after:            Thu 18 Dec 2025 18:38:24 +0000
asID:                     273683
IP address blocks:        45.232.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 18:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:62:37:ec:13:b0:de:47:7f:70:2b:69:0e:2e:0e:e3:1b:18:64:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec 19 18:33:24 2024 GMT
            Not After : Dec 18 18:38:24 2025 GMT
        Subject: CN=1EF82CFC91DF1721DC627953052F8E2E61FCCCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:e2:f3:b9:1b:be:8a:02:c4:60:1a:e6:3a:
                    55:f1:4b:31:69:53:03:43:b0:37:4f:46:17:92:e5:
                    47:02:2f:8b:4e:21:42:65:6c:2c:1f:c2:8e:a3:a8:
                    75:94:49:ab:60:b9:43:87:91:8f:7a:25:e1:7a:73:
                    0f:9c:df:dc:bb:3a:d7:17:bb:9e:5a:f6:ee:01:0b:
                    08:2e:60:5c:23:5e:af:5a:4d:c4:b5:39:fc:17:d2:
                    0a:69:61:a0:45:83:cf:2d:89:75:b0:39:91:af:25:
                    76:ff:10:6a:b9:1e:e4:d3:45:17:d2:0d:6e:d7:f0:
                    d2:9a:c9:b2:2d:e4:8c:a8:25:5d:b0:31:12:89:c4:
                    27:6e:c7:43:55:54:90:72:28:d5:59:d9:0d:41:6c:
                    4b:cc:5d:bd:30:a6:b8:b4:2c:58:d0:ae:53:d5:ab:
                    30:cf:5c:a7:a6:e9:a3:40:2f:1f:be:bb:bc:88:7e:
                    35:14:93:e8:1b:ce:b0:4f:43:6e:c4:43:0e:74:4e:
                    da:f5:5a:cf:32:17:7d:89:55:dc:fd:a6:df:5f:2a:
                    df:28:41:59:20:f7:e6:79:75:77:3b:d7:85:6f:65:
                    37:c8:b3:4b:ef:9d:f1:d9:40:ec:74:4e:d2:a5:90:
                    bd:0b:9a:30:08:d2:09:1d:51:3e:8d:d8:8e:23:a6:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F8:2C:FC:91:DF:17:21:DC:62:79:53:05:2F:8E:2E:61:FC:CC:F6
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35372e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:a7:e1:6f:67:bf:9c:d5:7d:09:6b:6d:1b:32:98:47:f6:
         49:dd:20:7b:3f:c6:57:6b:fd:00:b1:16:eb:de:e5:86:20:c4:
         e8:40:ce:08:56:2b:b9:f2:59:df:4b:47:0b:28:7e:31:9f:c3:
         e7:8d:8e:95:4f:15:2a:92:29:77:af:d5:c0:82:cd:4f:52:5a:
         b2:ea:72:c8:37:ce:ca:16:11:6b:d1:a5:b2:65:73:1a:ef:fd:
         21:2c:97:d5:6e:c9:c4:64:50:6f:7e:2f:36:b3:49:b0:23:fe:
         ff:62:b9:38:12:da:25:52:1c:0a:b7:6d:c3:da:3c:50:df:85:
         24:fe:37:de:03:4f:39:6f:b8:2f:17:bd:81:07:40:8f:94:d4:
         e5:cb:d5:89:13:cf:06:5a:76:b5:80:a0:0e:5b:d5:ec:53:6c:
         d0:b3:bd:16:f4:15:25:a2:65:b6:6f:4c:35:6d:5c:c5:2d:df:
         91:04:94:39:23:ff:3e:70:eb:8b:f7:dc:fe:1e:1d:64:c3:30:
         9b:c4:eb:5c:6f:ad:9e:b6:26:82:7f:54:6a:9e:0c:e1:ce:6e:
         54:44:d7:49:5a:64:1e:02:38:a7:16:72:86:3b:97:fd:bc:2c:
         ef:9d:29:ef:a9:d3:ee:ce:ee:62:f7:f3:b6:04:4b:4d:46:27:
         43:02:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:42 2025 by rpki-client