Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233352e35392e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          SqZjUkyKtpAw/3UzQOCFqR3bPHb0uNNu5ExwNju+QYI=
Subject key identifier:   5E:1E:45:F6:5F:35:76:F5:C0:4F:1F:0C:0F:A5:23:ED:FD:74:84:D2
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       3C0D776AB9BD78F55BE9A165F745025DC779E164
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa
Signing time:             Fri 23 Aug 2024 19:44:54 +0000
ROA not before:           Fri 23 Aug 2024 19:39:54 +0000
ROA not after:            Fri 22 Aug 2025 19:44:54 +0000
asID:                     273683
IP address blocks:        45.235.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0d:77:6a:b9:bd:78:f5:5b:e9:a1:65:f7:45:02:5d:c7:79:e1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Aug 23 19:39:54 2024 GMT
            Not After : Aug 22 19:44:54 2025 GMT
        Subject: CN=5E1E45F65F3576F5C04F1F0C0FA523EDFD7484D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:bd:67:1a:2f:58:28:ba:52:90:55:8c:bd:
                    8c:4e:f7:96:5e:90:49:68:00:13:d9:4a:39:cf:fd:
                    b4:a3:b2:7d:d1:58:40:66:b8:f3:ef:61:82:df:3a:
                    3e:fb:57:f6:8c:69:b9:9e:71:45:7a:04:47:9a:97:
                    98:58:45:09:9a:b8:c1:47:b9:4c:5c:49:3d:de:90:
                    49:de:c5:f7:fa:64:c8:7c:d6:5f:17:b9:17:d2:e8:
                    74:81:46:e2:51:82:30:75:25:c6:9d:86:56:f0:10:
                    31:ac:8a:f7:24:86:43:72:09:64:c3:6d:5f:06:3c:
                    1c:95:ff:ac:99:7c:64:af:74:1e:91:7b:8f:49:9a:
                    3d:ad:c2:23:b0:03:62:98:24:29:43:fa:58:47:3c:
                    88:dd:d9:6c:30:70:93:02:0b:7d:1f:c9:ae:06:8f:
                    e9:60:c0:4e:70:5c:e4:a5:db:a0:bf:bb:ba:4b:b7:
                    d1:66:df:09:f7:22:bc:12:fb:60:93:8a:ee:79:27:
                    1c:4a:a5:c6:f9:fb:e6:a6:cd:74:2d:43:90:08:ab:
                    34:a4:1e:d4:c5:7e:a6:0d:3f:2d:ce:07:ee:0c:9e:
                    8f:2e:46:77:ac:69:33:48:56:53:9c:10:cc:93:f0:
                    8b:a8:22:2f:54:35:8b:da:4c:6e:aa:28:1f:96:29:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1E:45:F6:5F:35:76:F5:C0:4F:1F:0C:0F:A5:23:ED:FD:74:84:D2
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:62:88:3d:58:af:ef:75:72:a3:7a:e6:23:d7:f0:83:f8:
         dc:cc:c6:92:1f:56:b8:aa:3d:43:b1:59:fe:e8:d0:24:ee:42:
         bf:11:dc:c1:59:68:21:ba:9d:c5:a8:7b:40:79:db:71:ab:ec:
         6e:56:71:8d:4f:28:c3:6c:91:bb:47:c6:d1:96:a7:bf:f2:20:
         c3:69:7b:31:68:1f:f7:7e:d9:33:7e:c8:d8:2f:52:69:65:9d:
         98:aa:62:05:e6:98:32:3e:3d:c2:03:9d:d5:1d:5b:69:c4:82:
         8c:b4:76:90:ae:a8:4c:86:bd:c3:f1:99:6f:c8:48:b8:2d:98:
         ff:e9:9a:b9:90:a3:b2:b1:90:22:dc:69:8c:0e:9b:9e:cc:b0:
         e3:d9:88:4d:48:e0:d9:67:d2:53:86:75:0f:65:d5:ff:7e:0c:
         ec:94:f0:d1:89:96:ef:21:54:71:a4:c8:d2:67:b4:c0:48:47:
         62:a1:f3:01:12:f0:9e:89:4b:18:84:ff:ee:6d:88:fb:06:f5:
         87:83:2c:9a:ae:1a:60:c1:a5:6d:46:bd:f3:7b:54:4f:2f:4a:
         5f:ec:84:13:62:7c:eb:45:54:16:15:ec:c7:ff:c8:d7:ca:b7:
         49:ff:99:5b:d4:ad:34:e0:6a:9f:10:8e:de:f8:32:b4:62:b0:
         93:d4:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org