Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa
File:                     34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa (raw, json)
Hash identifier:          orKqImC47wpBwK/ZDgV5Ls3e0ot7KIboJQDEygNiJsc=
Subject key identifier:   2C:F8:D6:87:40:59:A1:29:94:1E:99:49:F7:ED:62:44:CA:F9:B6:A8
Certificate issuer:       /CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
Certificate serial:       6787F3FA43AD23B76E98B466043564309A9ECADA
Authority key identifier: EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa
Signing time:             Tue 03 Sep 2024 12:33:02 +0000
ROA not before:           Tue 03 Sep 2024 12:28:02 +0000
ROA not after:            Tue 02 Sep 2025 12:33:02 +0000
asID:                     268858
IP address blocks:        45.174.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:87:f3:fa:43:ad:23:b7:6e:98:b4:66:04:35:64:30:9a:9e:ca:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Validity
            Not Before: Sep  3 12:28:02 2024 GMT
            Not After : Sep  2 12:33:02 2025 GMT
        Subject: CN=2CF8D6874059A129941E9949F7ED6244CAF9B6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:0f:27:9f:3f:83:2d:ed:f2:4c:73:f9:69:
                    f3:89:c3:a5:35:9d:88:28:65:5a:f7:6b:d1:73:b4:
                    9c:b3:d6:6e:85:a4:34:46:8e:63:53:62:01:21:61:
                    4f:16:c6:c2:89:09:76:9a:19:00:3c:81:f9:59:d0:
                    81:6e:c1:7f:6b:b9:8e:4e:09:bf:43:ac:27:89:29:
                    c1:31:0d:cf:1a:68:72:c5:80:3b:07:37:ee:b6:13:
                    2c:72:c9:ee:fd:5a:64:f4:3b:7c:65:02:4e:f3:01:
                    ee:01:90:a2:a3:80:89:8e:9e:05:dd:9a:bb:af:e6:
                    b3:93:f3:bf:a4:49:4c:4b:5a:96:ee:c9:b6:89:9f:
                    f0:a2:8c:8b:e9:66:2b:97:9d:fa:3d:10:c4:f9:1b:
                    6f:d4:fb:93:18:c6:e9:e1:5a:69:89:a7:39:3c:ab:
                    e8:a5:f8:3a:fe:f1:9a:26:ff:4f:ac:ca:2c:c5:43:
                    9b:75:e4:91:61:06:89:32:36:2a:f3:db:d1:e3:cf:
                    9a:39:65:6a:49:da:a4:f2:13:ef:6c:5f:60:99:e3:
                    ae:9f:ee:4e:ed:a5:ec:64:17:58:44:5a:14:57:c7:
                    2f:0b:aa:66:4a:83:9f:31:d8:c6:6b:e9:c7:96:a7:
                    48:d9:86:3a:2a:c8:6e:92:ad:07:c7:5b:c7:d3:0b:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F8:D6:87:40:59:A1:29:94:1E:99:49:F7:ED:62:44:CA:F9:B6:A8
            X509v3 Authority Key Identifier:
                keyid:EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:18:2a:62:ea:13:3e:3f:5f:1d:c1:2c:3d:2d:a8:07:ab:7b:
         1c:44:8e:01:69:c7:db:e3:ad:00:29:01:ff:bd:ea:87:b2:08:
         24:77:05:62:da:ba:e4:ab:3f:be:08:12:55:52:d6:22:cb:f5:
         67:38:f3:41:66:9b:d6:4c:22:cb:e5:87:2a:09:b0:bf:d7:99:
         82:83:76:00:f4:94:7e:e8:7d:f9:f6:8f:b0:90:ad:6c:c5:26:
         ae:50:63:c4:5f:c2:01:ac:9f:99:f6:d5:d6:cb:b2:72:0c:3c:
         7f:f0:ec:2a:1c:54:e3:81:e1:84:ad:bd:58:4a:90:9d:b0:37:
         69:6d:53:14:94:da:9b:72:24:6e:16:e1:72:4d:69:4e:bb:52:
         bb:20:d2:38:0f:c7:c7:f7:71:7e:53:14:a6:d2:71:05:38:ec:
         38:79:39:df:13:78:4f:aa:5e:2c:16:cf:41:24:09:dc:3d:b6:
         49:aa:25:c7:84:21:7b:23:4b:9e:6a:6e:e7:1b:6e:96:23:26:
         67:76:6b:54:2c:dd:f3:7f:91:ff:f8:5e:a9:ee:36:bf:0a:bf:
         b8:15:31:36:1e:d7:89:da:dc:40:5d:8d:7c:d2:8f:c2:3f:da:
         d9:c4:a3:68:80:5d:bb:52:c0:4f:c7:1d:3d:20:95:b7:8a:6d:
         e6:6f:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:51 2024 by rpki-client on console-fra.rpki-client.org