Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/34352e3233342e3132342e302f32332d3234203d3e20323637333734.roa
File:                     34352e3233342e3132342e302f32332d3234203d3e20323637333734.roa (raw, json)
Hash identifier:          8zUDb8k99FyNz57JfaYzzhz8JpDp//OR5FAl9ELSWKc=
Subject key identifier:   C7:FB:43:E9:7E:BF:85:C8:89:02:E7:C9:71:BC:B2:18:2A:8B:B6:32
Certificate issuer:       /CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
Certificate serial:       720723F395CE3176CFD1E3ABC6B7A4799329180C
Authority key identifier: B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/34352e3233342e3132342e302f32332d3234203d3e20323637333734.roa
Signing time:             Wed 05 Jun 2024 19:48:59 +0000
ROA not before:           Wed 05 Jun 2024 19:43:59 +0000
ROA not after:            Wed 04 Jun 2025 19:48:59 +0000
asID:                     267374
IP address blocks:        45.234.124.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl
                          rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:07:23:f3:95:ce:31:76:cf:d1:e3:ab:c6:b7:a4:79:93:29:18:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
        Validity
            Not Before: Jun  5 19:43:59 2024 GMT
            Not After : Jun  4 19:48:59 2025 GMT
        Subject: CN=C7FB43E97EBF85C88902E7C971BCB2182A8BB632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:f4:d2:af:82:97:67:21:5e:2f:b4:83:55:
                    cd:cc:55:24:1b:90:71:84:33:3f:f1:78:09:e6:00:
                    ff:be:0a:18:1b:a5:4b:28:5d:ab:2f:24:bd:8b:86:
                    54:a9:4c:38:38:6b:5c:2a:24:51:04:56:d3:f3:ea:
                    f3:dc:7b:f0:2a:4d:af:0f:70:2b:22:f6:bb:15:34:
                    b1:1c:57:ea:5d:c5:61:95:07:f9:7f:d9:86:c5:ec:
                    9a:ea:f3:19:89:3c:24:00:ca:eb:50:43:8c:d4:cf:
                    0b:96:8e:97:e5:1d:3a:32:4e:5e:b2:0e:2c:37:fb:
                    7b:c3:03:d7:bd:89:99:d4:26:47:a5:c0:06:f7:ff:
                    37:83:1e:10:97:c7:07:b3:e4:62:3b:43:7e:80:d5:
                    8e:80:ff:4b:c7:2d:54:53:00:d5:dd:e8:43:a1:d2:
                    f8:32:dd:27:68:28:09:bc:76:cd:24:95:61:73:c2:
                    67:90:7d:24:1b:cb:95:ab:6b:24:b9:8b:67:05:b2:
                    ad:ac:1a:3e:f9:2d:0c:98:09:81:82:8d:39:77:40:
                    84:4b:0f:63:25:7b:2e:68:ac:af:3a:9b:6e:29:d0:
                    07:bc:33:f7:c9:ee:b0:ec:f6:fc:c1:0f:a5:58:73:
                    66:f8:3a:57:f1:47:bc:f0:3d:19:16:8d:d2:b1:d0:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FB:43:E9:7E:BF:85:C8:89:02:E7:C9:71:BC:B2:18:2A:8B:B6:32
            X509v3 Authority Key Identifier:
                keyid:B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/34352e3233342e3132342e302f32332d3234203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:f1:c1:c8:54:35:9f:0d:b9:80:96:f9:0c:3b:1d:c9:fa:
         9d:06:55:93:7a:19:d7:7f:dd:62:a7:83:4d:bf:8d:1d:51:c5:
         b0:6c:7f:5c:be:79:9e:e5:60:8d:70:f2:9d:ee:09:4b:6b:8f:
         a6:68:00:3f:d4:aa:8b:a4:06:b9:bc:da:ec:03:d1:3b:2d:f3:
         5c:e6:54:80:da:b5:79:6c:7e:9a:44:44:c5:fb:bf:22:ca:06:
         07:14:89:f1:72:1a:a7:8d:f2:9d:51:29:94:c2:e9:46:61:67:
         30:f2:da:35:91:1e:f5:d4:41:4c:56:ad:c2:22:76:3d:60:d3:
         e1:ad:b8:b8:11:9a:be:e5:f5:86:61:4e:3e:71:90:10:c4:69:
         c7:74:be:73:2d:11:27:28:87:4b:97:3c:3b:9f:e4:18:72:f0:
         79:38:d6:6c:3c:ce:f1:72:0f:2f:a7:58:04:a9:3b:03:cf:7e:
         99:5e:8e:d6:ea:fa:06:2c:5d:8e:4f:40:ad:d6:db:29:17:e6:
         ae:4a:0f:ad:57:4c:c1:b3:e1:26:60:82:d3:27:b9:71:f9:a2:
         87:af:48:94:2d:7f:c4:4f:88:d3:48:ec:bb:58:c8:9c:92:42:
         b8:1c:a6:1d:f9:8d:ad:65:07:5f:ab:d3:e3:da:c8:12:bb:23:
         0c:c9:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org