Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136322e302f32342d3234203d3e20323638383538.roa
File:                     34352e3137342e3136322e302f32342d3234203d3e20323638383538.roa (raw, json)
Hash identifier:          Inj4UPgqORVOqj8lk8EkmbP5RprQz0aghviELIyxNbQ=
Subject key identifier:   E9:BC:3E:D0:D1:C5:6D:FF:AC:55:01:82:42:7E:0F:A2:6F:39:10:45
Certificate issuer:       /CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
Certificate serial:       15A4415374D2C99470A2F1770EABFF725A6D19BB
Authority key identifier: EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136322e302f32342d3234203d3e20323638383538.roa
Signing time:             Tue 03 Sep 2024 12:33:01 +0000
ROA not before:           Tue 03 Sep 2024 12:28:01 +0000
ROA not after:            Tue 02 Sep 2025 12:33:01 +0000
asID:                     268858
IP address blocks:        45.174.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a4:41:53:74:d2:c9:94:70:a2:f1:77:0e:ab:ff:72:5a:6d:19:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Validity
            Not Before: Sep  3 12:28:01 2024 GMT
            Not After : Sep  2 12:33:01 2025 GMT
        Subject: CN=E9BC3ED0D1C56DFFAC550182427E0FA26F391045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:5d:fe:6e:c1:e1:c0:c5:7c:e8:fd:0f:e6:
                    ef:23:6f:22:8a:5d:6c:7d:76:0a:f2:01:b0:b0:e0:
                    5e:88:57:4e:33:90:7b:e8:45:92:10:6d:62:ab:6f:
                    18:d8:fd:13:df:40:e6:c9:52:11:15:b0:c2:df:29:
                    a6:70:3e:2d:aa:ca:3b:df:e3:1b:d6:79:32:18:4b:
                    23:ab:3d:dc:a2:df:c9:4c:3f:15:67:df:ab:62:a4:
                    f7:fe:b6:81:93:4e:93:ab:c9:d8:b1:30:f4:1a:c9:
                    06:b4:00:e9:a3:f2:75:05:2e:a3:45:7a:2a:56:56:
                    b4:aa:4a:83:ad:cc:e8:86:21:b3:bf:45:16:85:6f:
                    f8:f0:9d:56:22:d0:d6:f6:1f:b8:6a:c4:8f:91:a6:
                    60:4d:fe:fd:aa:a7:4a:cb:24:b2:86:91:62:a5:13:
                    f2:8a:54:93:f1:0e:87:02:3a:c1:62:8a:49:f7:f0:
                    4f:7b:d8:3f:7c:b7:66:bd:e2:ee:6b:e0:66:3b:46:
                    0b:f5:a0:ed:65:6d:ba:7c:55:68:51:10:35:98:94:
                    1f:e8:1f:0f:2d:eb:21:49:01:9e:63:d8:bc:db:fd:
                    f2:41:79:ff:e2:e7:68:2b:c7:cc:70:6f:c8:a7:be:
                    e2:7e:47:c6:de:e3:99:08:92:94:75:73:ae:f6:f0:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:3E:D0:D1:C5:6D:FF:AC:55:01:82:42:7E:0F:A2:6F:39:10:45
            X509v3 Authority Key Identifier:
                keyid:EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136322e302f32342d3234203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:0b:c2:f7:0c:bc:53:a2:e7:2e:7e:c4:be:fd:22:6c:eb:
         b8:5d:64:77:0b:2e:89:ed:55:76:db:64:5b:c4:20:e1:c1:04:
         4b:5f:20:a4:eb:02:ed:13:9b:37:2c:8d:66:d8:ce:27:ea:4e:
         4d:a3:8e:aa:d6:1b:3f:ab:dd:0f:f7:53:a0:80:c4:8f:9d:57:
         1e:a2:fc:23:e2:c4:66:8d:5a:d5:72:28:31:79:5f:d3:2d:24:
         d1:88:09:c9:ee:3a:fe:c5:d7:52:c3:06:52:c2:19:8d:50:2d:
         04:b7:92:3d:dd:fd:cf:36:2b:fe:cf:6b:e8:2a:0f:09:26:17:
         b0:2d:57:7e:bc:af:32:43:38:8b:c8:4c:c2:52:71:39:62:e4:
         7b:77:05:19:dc:95:2c:3a:2d:0c:da:9a:0c:d5:ab:24:d0:fd:
         ee:f3:90:fd:f1:80:b4:e3:f7:5f:c6:b3:c3:ae:0f:58:e6:c9:
         b9:ea:be:88:eb:c4:f3:91:c9:e6:af:21:56:d4:92:d1:3a:27:
         5b:2d:f2:df:20:e6:f8:a8:cb:9e:a7:c3:5d:c8:0a:4a:44:c1:
         7f:23:57:b8:8c:00:02:89:95:08:4c:37:0c:89:68:df:80:42:
         51:d0:8a:ad:71:03:5b:f3:da:ab:b2:84:a7:1b:03:66:7c:4f:
         84:db:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:51 2024 by rpki-client on console-fra.rpki-client.org