Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233352e35362e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          D75swUreBwgxWrE0CokYVpR7s5Pk0RdyL33HYk3TkIg=
Subject key identifier:   CE:15:28:09:D5:87:D6:50:08:3C:A4:4B:30:08:66:7B:8B:CC:19:9D
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       38ECFB6C0C3FA4B3A8C6C3410120610B3ACF2EA5
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa
Signing time:             Fri 23 Aug 2024 19:44:55 +0000
ROA not before:           Fri 23 Aug 2024 19:39:55 +0000
ROA not after:            Fri 22 Aug 2025 19:44:55 +0000
asID:                     273683
IP address blocks:        45.235.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ec:fb:6c:0c:3f:a4:b3:a8:c6:c3:41:01:20:61:0b:3a:cf:2e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Aug 23 19:39:55 2024 GMT
            Not After : Aug 22 19:44:55 2025 GMT
        Subject: CN=CE152809D587D650083CA44B3008667B8BCC199D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:9a:09:39:7f:dd:69:e9:2c:c7:39:1f:65:
                    5e:8e:f5:17:f4:07:f4:dc:21:2b:7a:88:72:8a:60:
                    d0:2d:56:bc:9e:a7:4d:75:e5:54:68:58:91:76:1b:
                    f8:10:ae:4b:81:20:27:0e:7d:5b:a0:9e:c0:32:36:
                    bc:7b:46:f5:4c:53:7b:b8:24:b4:43:f8:e3:02:17:
                    5b:c7:fc:f9:28:2e:d2:ba:cb:ee:22:ab:ae:4d:44:
                    20:c7:d8:12:95:85:c0:b3:38:85:a3:ff:b2:0d:7b:
                    24:da:58:e2:33:b7:a8:1a:df:87:bc:11:eb:9c:f9:
                    f0:a2:68:4e:44:b5:98:67:bf:22:2c:18:64:c8:b8:
                    c8:46:c1:7b:03:52:7e:b9:3c:dd:9e:ea:d4:63:44:
                    cc:47:4e:b9:71:00:56:82:cb:90:b8:9f:cc:2f:96:
                    da:9a:15:6c:6b:b5:e5:e0:12:91:29:6d:f2:09:5b:
                    57:c0:50:8e:6b:6d:8b:2b:83:92:fb:c1:24:dd:9f:
                    3d:c5:81:aa:4c:7f:86:88:dc:0d:b5:27:be:c1:d6:
                    a8:f8:31:9c:f8:4b:a8:14:8e:6a:8d:68:60:ae:f2:
                    39:34:76:88:37:81:53:b5:84:3b:44:1d:2d:7a:02:
                    37:4c:37:34:d9:7e:1f:7d:36:e7:e6:6f:32:17:17:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:28:09:D5:87:D6:50:08:3C:A4:4B:30:08:66:7B:8B:CC:19:9D
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:24:a6:e9:f8:a8:12:cb:5c:a4:88:8f:77:26:88:c4:0e:43:
         92:64:d4:fb:ee:ee:71:93:59:c6:5a:14:e9:cb:95:55:92:56:
         32:f2:f5:6b:85:b8:87:cf:c6:1f:40:9f:15:08:32:bc:d6:82:
         04:a6:8d:56:95:b5:75:04:34:e0:99:85:c6:4d:14:58:b0:43:
         0f:3f:ff:1f:94:fc:13:fa:18:f7:05:05:b2:ce:f7:d4:8f:10:
         06:f1:6d:12:46:2d:e3:08:38:5e:82:c5:39:6a:e6:8f:99:33:
         d7:cc:f1:1a:33:d6:24:62:df:1b:42:34:eb:ca:4d:25:67:26:
         16:0d:4b:8b:9b:57:a8:7d:ae:73:e0:d2:a6:07:35:56:da:6d:
         2f:45:a6:6c:4b:62:97:20:9e:42:a3:e8:32:35:a1:18:84:af:
         90:83:ca:5a:aa:1c:60:1e:fd:6c:a6:33:0a:e5:25:60:7e:8a:
         5c:0c:38:02:01:44:3f:67:bb:f9:90:bd:7d:60:2c:38:cf:e6:
         9d:61:bf:55:53:51:8b:72:cb:a1:9e:81:a7:4b:47:7e:51:8f:
         89:88:bc:67:8e:63:61:8b:bf:98:c9:ee:a0:5d:e7:c9:3b:bd:
         5b:d9:1f:87:48:b1:9d:91:39:78:ee:da:88:1e:ac:95:92:e1:
         ce:03:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:23 2025 by rpki-client