Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3233362e302f32322d3234203d3e20323633353639.roa
File:                     34352e3232352e3233362e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          EIGUtwH8JGCX3OXdLJPtjJSlSSL6z+Hs9VV6l1nqpO4=
Subject key identifier:   18:EB:62:3C:65:C4:9C:E3:DA:E3:AB:22:81:8D:94:E4:AD:2E:3A:CF
Certificate issuer:       /CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A
Certificate serial:       6A95CCD9F4D6822E0846BB5CE3FD5337E68F0497
Authority key identifier: E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3233362e302f32322d3234203d3e20323633353639.roa
Signing time:             Tue 23 Apr 2024 13:32:04 +0000
ROA not before:           Tue 23 Apr 2024 13:27:04 +0000
ROA not after:            Tue 22 Apr 2025 13:32:04 +0000
asID:                     263569
IP address blocks:        45.225.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:95:cc:d9:f4:d6:82:2e:08:46:bb:5c:e3:fd:53:37:e6:8f:04:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A
        Validity
            Not Before: Apr 23 13:27:04 2024 GMT
            Not After : Apr 22 13:32:04 2025 GMT
        Subject: CN=18EB623C65C49CE3DAE3AB22818D94E4AD2E3ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:03:c7:c4:89:98:d1:bb:ef:4e:e6:20:21:
                    76:cc:d1:7e:99:e4:a3:a2:7e:41:9b:c0:71:22:78:
                    42:3e:1c:2f:7e:fb:96:c1:a6:c9:a0:84:12:6d:8b:
                    5d:8f:c4:f2:6d:ae:b6:d4:6f:c1:bd:19:08:5c:4a:
                    1b:9b:4d:a8:1f:40:e0:ed:94:57:88:d0:a2:59:e8:
                    3b:fb:4e:3b:04:63:2b:97:87:7e:00:f4:0f:37:db:
                    26:ff:a4:90:83:a7:6e:c8:c4:7e:95:0c:cc:0a:a9:
                    32:80:fb:bc:0b:65:8f:0a:b1:e7:d3:30:91:6c:97:
                    43:2b:20:e8:68:a8:73:f6:8a:88:35:ea:fa:37:d9:
                    ab:75:fe:b6:65:1a:af:10:d7:77:0b:48:74:65:68:
                    29:c5:5f:af:c0:b8:20:11:4b:ac:e3:72:1a:06:e5:
                    95:1f:2f:5d:0e:2f:d6:a7:c2:cc:46:7b:d7:9b:de:
                    c6:36:95:99:92:32:12:fd:9b:e9:c6:9f:dd:a9:6f:
                    42:32:ad:2a:81:55:5d:a1:a9:15:69:22:74:aa:16:
                    76:3c:ad:91:7e:15:18:f3:80:a5:cc:37:ef:08:d7:
                    7a:99:8e:92:8f:11:3b:04:f8:7d:c7:15:40:53:a0:
                    61:52:70:21:7f:b0:70:88:95:3d:8d:87:02:b7:e2:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EB:62:3C:65:C4:9C:E3:DA:E3:AB:22:81:8D:94:E4:AD:2E:3A:CF
            X509v3 Authority Key Identifier:
                keyid:E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3233362e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ec:8f:1f:93:12:a5:a6:16:29:71:7e:66:da:b8:87:ac:9f:
         4a:2d:95:ab:0f:6b:d2:30:46:7e:4c:6a:c6:f3:89:6e:6f:c0:
         77:63:03:94:81:f9:92:7d:86:e2:0c:b8:a5:0b:0c:4e:87:77:
         48:db:72:79:d1:4f:09:d7:f4:25:e7:7d:f7:04:a3:7d:71:e5:
         d7:f3:7a:3f:84:43:36:80:9f:0f:c9:58:13:5f:06:ea:21:c9:
         3d:de:45:4e:5c:e7:65:f8:eb:f2:e0:b1:94:26:a0:7a:82:1e:
         0a:ea:cc:3e:33:90:f3:83:22:8c:89:fe:df:f4:ac:73:b8:f3:
         2f:b6:70:f1:38:d4:08:58:10:6a:59:ea:57:04:5b:b3:75:b1:
         bf:f5:48:a8:6d:35:72:1e:05:75:9e:72:c0:ec:c2:6a:f9:22:
         db:66:51:24:f8:01:7c:2c:32:e4:77:9e:60:11:28:33:2e:00:
         f2:5a:8a:56:66:db:67:31:78:bd:13:cf:23:55:7e:80:c2:ad:
         f5:43:68:15:4b:c2:de:c9:57:38:50:22:44:90:2a:a4:f2:6e:
         e8:c3:62:04:65:42:d5:9e:88:86:a3:90:33:75:04:9e:db:75:
         00:fa:4c:88:b4:e4:d8:dc:4f:8d:8e:3e:f3:c9:f1:6b:ea:6d:
         fd:5d:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org