Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e342e34302e302f32332d3233203d3e20323733363833.roa
File:                     34352e342e34302e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          WjfcO6jbK2j8OVex9ODoSxHRbW98gb/272s6J2F50oc=
Subject key identifier:   06:D5:1F:6A:64:6A:8C:BB:36:C4:55:DC:E4:62:30:E0:21:5B:82:E1
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       1531532C07FA9110F864984A7D2AF149176D8112
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e342e34302e302f32332d3233203d3e20323733363833.roa
Signing time:             Wed 13 Nov 2024 08:50:30 +0000
ROA not before:           Wed 13 Nov 2024 08:45:30 +0000
ROA not after:            Wed 12 Nov 2025 08:50:30 +0000
asID:                     273683
IP address blocks:        45.4.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:31:53:2c:07:fa:91:10:f8:64:98:4a:7d:2a:f1:49:17:6d:81:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Nov 13 08:45:30 2024 GMT
            Not After : Nov 12 08:50:30 2025 GMT
        Subject: CN=06D51F6A646A8CBB36C455DCE46230E0215B82E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:ff:f0:8b:0b:9f:cb:1f:7b:2f:1e:b5:76:
                    71:6a:36:63:8f:37:03:88:ee:bd:1d:d8:75:54:76:
                    fa:39:77:a1:95:93:26:9f:4e:de:73:ee:09:b4:12:
                    c2:c7:85:8d:71:98:60:b2:eb:9a:ef:65:26:01:63:
                    af:ea:d3:86:03:33:98:91:20:91:5e:e6:95:46:18:
                    1f:83:8d:3e:dc:89:a7:e8:c3:77:2b:bb:2a:40:a1:
                    1f:cf:91:f8:3b:29:ec:b7:18:04:ea:de:7e:03:7f:
                    b8:04:d0:c1:b3:ca:1c:70:e4:dd:18:0e:2c:3c:52:
                    e2:ed:b3:7a:ec:fd:43:ff:0f:9c:bc:a1:28:cb:31:
                    74:a2:00:1f:b2:b9:c8:ed:a9:be:f1:3b:21:18:e4:
                    ec:15:06:68:a1:02:e1:d5:bd:75:60:c8:01:1c:42:
                    53:2c:3e:a0:5a:73:36:1b:69:74:b0:8e:98:43:c1:
                    85:8f:bf:8d:30:9d:77:15:91:45:3d:b8:19:ca:3e:
                    9f:7d:ab:4d:33:a1:2e:b8:e0:2e:d2:1e:d5:73:da:
                    78:6f:53:d3:21:b6:6f:13:d9:f1:5b:ed:6a:54:a2:
                    a2:7b:8b:95:ae:16:40:1e:be:3f:97:73:a1:9b:1d:
                    1e:1e:3c:10:ae:a5:91:07:47:97:b9:a5:fc:44:23:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D5:1F:6A:64:6A:8C:BB:36:C4:55:DC:E4:62:30:E0:21:5B:82:E1
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e342e34302e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:6a:20:9c:06:b6:89:97:a3:ba:95:88:e6:b5:19:5f:ed:f2:
         ea:3c:3a:d4:18:fd:ef:f9:50:75:3e:0b:b4:ac:ad:88:4e:47:
         31:c3:b7:50:2d:5a:bf:46:09:ee:22:2d:cc:1b:34:d5:6e:11:
         1c:82:33:02:49:a7:d3:e5:3c:81:f4:1e:e3:56:2f:0c:9f:35:
         9f:92:99:46:5f:7d:e0:a1:30:3a:42:25:a2:ab:04:5b:2c:33:
         cf:c6:32:24:fd:a7:f3:64:05:a4:8b:e6:61:2f:81:ff:5b:0b:
         8f:58:ce:21:9b:33:97:57:be:41:f9:72:8e:c0:47:e2:98:14:
         78:78:3c:8f:22:89:bd:ca:e8:ae:7e:28:51:76:58:f3:9c:d6:
         b6:ec:40:71:dc:1a:b9:f3:d2:95:fe:72:b7:ba:2c:61:44:40:
         50:fc:c1:d1:32:aa:9f:15:f8:4f:4b:65:be:76:49:d3:33:b7:
         33:7c:e8:71:3f:68:26:fc:06:be:29:93:7f:d0:48:4e:0b:33:
         bf:1d:be:5d:3d:d4:58:f1:26:d2:35:13:12:9f:71:06:11:c9:
         c3:56:97:2b:04:45:7e:14:fc:3a:c0:98:2d:84:9e:a6:7c:67:
         fe:87:65:ce:44:4c:68:07:26:b3:6a:f5:6d:4d:d9:5d:d0:a5:
         e7:cd:4e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:40 2025 by rpki-client