Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139342e302f32332d3234203d3e20323636363037.roa
File:                     34352e372e3139342e302f32332d3234203d3e20323636363037.roa (raw, json)
Hash identifier:          kq8dVVdjHnNXindbg6sRYtJTEgkHTvzOoNDkwXLpexQ=
Subject key identifier:   06:CD:20:C7:62:BB:30:10:F0:A3:DF:05:41:07:88:6C:FC:F4:7E:3B
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       5B251EE879C493CED7BD273C5C81DC2D7F2D0F3B
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139342e302f32332d3234203d3e20323636363037.roa
Signing time:             Wed 03 Apr 2024 21:27:05 +0000
ROA not before:           Wed 03 Apr 2024 21:22:05 +0000
ROA not after:            Wed 02 Apr 2025 21:27:05 +0000
asID:                     266607
IP address blocks:        45.7.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl
                          rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:25:1e:e8:79:c4:93:ce:d7:bd:27:3c:5c:81:dc:2d:7f:2d:0f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Apr  3 21:22:05 2024 GMT
            Not After : Apr  2 21:27:05 2025 GMT
        Subject: CN=06CD20C762BB3010F0A3DF054107886CFCF47E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:0c:10:0d:1b:5f:f8:0e:e5:3f:3e:a2:8f:
                    24:fd:3c:36:72:5e:5d:1c:8b:40:0a:47:44:b4:79:
                    12:07:e2:ad:5e:f3:50:43:f5:e4:63:9e:b4:4d:25:
                    c8:a2:c5:6f:a1:78:8b:14:16:94:52:cf:bc:1d:d2:
                    79:d7:24:c4:c8:11:ae:d6:df:8f:c6:35:5d:86:16:
                    08:51:de:94:f1:15:3f:3a:3b:b8:ec:93:6f:e7:71:
                    1b:27:5a:7f:43:e5:b4:8d:ac:18:6e:71:69:22:d4:
                    1e:dc:bc:f1:e1:ad:f7:a8:ea:7a:ad:fa:7d:6b:00:
                    d5:fa:18:5d:4e:13:79:e3:22:f3:3b:29:61:b4:c2:
                    bb:ea:a6:1d:da:b5:4a:ee:a7:c0:5f:e1:86:75:7b:
                    8f:d2:67:9c:09:a0:bf:ed:48:56:32:1b:fe:a6:bb:
                    6b:11:41:6b:7b:de:39:fb:e2:1a:89:16:f6:4d:fb:
                    cb:e1:cc:3d:e9:6c:97:ce:51:e6:7d:45:c3:09:24:
                    ce:83:15:7c:a9:94:86:a9:78:90:13:ea:8a:d2:ec:
                    69:ca:00:10:e6:82:8c:b6:8a:c2:2b:d3:33:eb:4a:
                    f1:66:bf:f2:9d:4f:37:77:d5:b2:46:fc:5b:12:1a:
                    bd:7a:37:4f:78:ed:3b:2e:a5:a9:84:ac:88:af:d9:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:20:C7:62:BB:30:10:F0:A3:DF:05:41:07:88:6C:FC:F4:7E:3B
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139342e302f32332d3234203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:cb:e0:3b:54:a4:db:0b:ed:d0:43:32:44:fa:76:99:9a:77:
         88:47:ff:b2:42:4f:96:c3:9c:54:9c:42:07:56:c7:ab:d3:6a:
         22:d9:f5:5b:df:fb:92:61:0c:33:84:6d:07:c6:ed:8f:77:fd:
         1a:a5:c7:d2:85:3b:a6:82:a4:b6:8d:c4:71:e4:9f:c6:67:e5:
         4c:06:f4:c8:a6:26:3d:44:7b:ed:3a:7c:d4:49:92:a1:d1:9c:
         24:9f:99:9e:75:ab:3f:6d:eb:b4:1c:8d:d4:84:a3:d1:0a:e9:
         6a:5d:29:be:d8:83:75:28:a4:d6:8b:f8:bb:c7:5e:6c:25:78:
         5e:86:b1:d0:f2:33:f6:1f:02:c2:ba:eb:a5:7b:ed:c3:e4:4d:
         20:92:f2:6d:8e:2b:e1:43:31:ab:81:bd:13:a9:2a:42:67:71:
         a0:cb:db:48:77:91:79:d4:c7:c5:14:bf:dd:6a:54:61:c8:78:
         87:59:7b:7d:f0:6c:30:6e:3e:6e:d8:00:20:c5:e6:df:08:70:
         de:82:60:dd:58:d4:36:df:2f:36:a9:0a:0d:18:a9:d0:d4:12:
         86:9e:20:1b:21:ea:03:10:e6:de:29:dd:f6:a9:2e:77:af:15:
         19:fc:4d:22:da:4a:22:c2:86:14:24:53:e3:b1:c4:67:df:42:
         a8:05:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org