Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3232203d3e20323638383538.roa
File:                     34352e3137342e3136302e302f32322d3232203d3e20323638383538.roa (raw, json)
Hash identifier:          beC5FiAMtM8JgcbV41wr6RKhcPGC8+rs2Sbm3LgWOi8=
Subject key identifier:   D4:82:B3:F6:19:22:FF:95:B3:3E:06:33:CA:E9:B1:36:87:E0:B4:07
Certificate issuer:       /CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
Certificate serial:       7D9BDAB731004F390052B4249BB09048A3BD7E5E
Authority key identifier: EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3232203d3e20323638383538.roa
Signing time:             Tue 03 Sep 2024 12:33:00 +0000
ROA not before:           Tue 03 Sep 2024 12:28:00 +0000
ROA not after:            Tue 02 Sep 2025 12:33:00 +0000
asID:                     268858
IP address blocks:        45.174.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9b:da:b7:31:00:4f:39:00:52:b4:24:9b:b0:90:48:a3:bd:7e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Validity
            Not Before: Sep  3 12:28:00 2024 GMT
            Not After : Sep  2 12:33:00 2025 GMT
        Subject: CN=D482B3F61922FF95B33E0633CAE9B13687E0B407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:1f:12:0f:9d:87:32:02:de:1c:58:7f:ac:
                    0f:e3:13:10:55:47:77:0a:9d:a6:e0:f0:66:05:54:
                    72:d5:5b:49:6f:0c:9c:2d:e2:76:77:2a:69:d6:fa:
                    bc:80:21:64:46:99:08:91:33:6d:15:76:7c:4d:b2:
                    2b:f7:ec:53:9f:1b:63:b2:a5:4e:e3:d9:52:24:54:
                    d0:91:00:e2:16:14:b4:5e:b9:29:a2:fd:c2:76:55:
                    cb:be:ba:61:c4:46:33:65:f8:ba:0a:67:2d:dc:fa:
                    42:1d:eb:c5:c8:c7:54:44:3d:09:57:a4:57:7b:2d:
                    bc:22:5c:6c:a5:e9:e6:b9:2d:9d:4a:61:e8:60:96:
                    5c:c2:28:2e:dd:a2:44:99:62:55:5b:00:cc:fa:00:
                    6b:91:2b:96:88:6d:35:9e:b2:85:a7:73:c0:e9:74:
                    6b:db:68:cc:47:86:3b:dc:87:be:97:e2:10:3e:78:
                    a0:cb:3d:d8:a1:5e:e3:18:eb:20:69:d2:ac:1e:62:
                    e1:25:19:3b:2d:86:c4:ec:9a:55:e5:ad:9c:45:88:
                    dc:7c:5f:fd:82:63:18:f4:14:f9:6a:ea:f2:1b:4c:
                    99:37:64:96:34:b5:98:39:67:14:92:fb:1d:bf:39:
                    5f:6d:1b:b9:a5:33:bf:e0:d4:7e:67:5b:66:3e:b2:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:82:B3:F6:19:22:FF:95:B3:3E:06:33:CA:E9:B1:36:87:E0:B4:07
            X509v3 Authority Key Identifier:
                keyid:EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3232203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:73:fc:41:8f:ba:37:6d:51:7e:7d:67:15:09:44:cd:af:3b:
         7c:53:a4:33:ac:c6:b9:ec:ea:a5:f4:d5:4f:6a:3a:c0:e8:2b:
         14:34:54:b3:37:ce:14:47:07:0c:87:e4:0d:9f:4f:60:3f:86:
         00:37:c5:23:c7:f2:97:d6:c4:a7:80:dc:eb:e8:02:6e:b7:b9:
         47:18:1c:68:c2:aa:8e:cd:bf:d7:74:05:16:f6:35:f8:04:4e:
         e3:94:84:91:0c:55:88:5a:65:0f:e8:86:a8:ee:9b:ee:8f:8a:
         26:94:ac:12:f0:40:d4:a7:17:47:3d:ac:54:cf:6c:a4:7d:a9:
         d9:16:8d:fe:b5:95:bc:8a:4d:97:72:34:15:9c:2d:60:60:91:
         05:71:09:b7:82:c5:3d:56:64:25:44:a8:27:51:bc:a4:ee:0d:
         ae:da:df:22:02:6f:10:6e:a7:b8:b0:ac:ea:b8:ce:1a:60:3c:
         f7:79:30:95:26:53:47:60:ef:2e:ea:9d:c5:7c:b2:88:fa:c3:
         fd:b7:21:7e:b9:40:dd:27:92:8a:43:af:a7:ea:14:1e:ba:e6:
         ae:86:00:2b:3c:8b:99:b7:90:3e:be:57:2a:62:c3:1a:4b:a0:
         c7:62:59:e1:b2:68:1d:fb:84:ba:72:71:b6:4a:85:54:98:0a:
         f4:67:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:51 2024 by rpki-client on console-fra.rpki-client.org