Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/34352e3138322e3139322e302f32322d3234203d3e20323639323436.roa
File:                     34352e3138322e3139322e302f32322d3234203d3e20323639323436.roa (raw, json)
Hash identifier:          dM6Nl3tCIipdb/skpTSGpsj4oWgUCMkA/Op/7NlsD+c=
Subject key identifier:   A6:71:A1:84:FD:7D:EF:78:6E:D8:FD:B5:17:19:2A:57:4F:B8:FB:B4
Certificate issuer:       /CN=56EF908030B1AD8FDDE7531F9937D0753B21F47F
Certificate serial:       6B11B7F898F760F0B7A57F397C96BA5684488BC7
Authority key identifier: 56:EF:90:80:30:B1:AD:8F:DD:E7:53:1F:99:37:D0:75:3B:21:F4:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/34352e3138322e3139322e302f32322d3234203d3e20323639323436.roa
Signing time:             Wed 05 Jun 2024 19:34:56 +0000
ROA not before:           Wed 05 Jun 2024 19:29:56 +0000
ROA not after:            Wed 04 Jun 2025 19:34:56 +0000
asID:                     269246
IP address blocks:        45.182.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.crl
                          rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 00:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:11:b7:f8:98:f7:60:f0:b7:a5:7f:39:7c:96:ba:56:84:48:8b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EF908030B1AD8FDDE7531F9937D0753B21F47F
        Validity
            Not Before: Jun  5 19:29:56 2024 GMT
            Not After : Jun  4 19:34:56 2025 GMT
        Subject: CN=A671A184FD7DEF786ED8FDB517192A574FB8FBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:6f:95:31:5b:da:71:ea:8d:98:6b:c7:44:
                    51:9e:4e:f6:94:39:36:a9:6b:a9:3d:b7:25:86:b3:
                    02:38:8e:b3:08:2a:a5:d4:04:86:81:69:ec:59:86:
                    70:09:1d:e0:8e:91:2b:78:ec:d5:bc:cb:6c:7d:b1:
                    23:90:28:49:f8:b9:21:32:81:73:47:53:9b:c2:33:
                    84:70:88:44:da:43:b4:42:c3:35:20:77:b3:e6:5a:
                    fb:34:1c:fd:e7:e6:f2:19:10:53:bf:11:d2:1c:dc:
                    93:d2:3e:2f:53:55:16:18:47:67:da:67:cf:d8:dd:
                    00:f3:3e:38:06:70:22:54:a5:91:92:20:cf:78:af:
                    c9:6a:22:74:ac:2a:99:59:97:0c:e9:09:45:67:63:
                    cf:97:69:e6:6f:97:64:bd:27:b0:c1:9e:80:7f:25:
                    26:f2:3c:df:d7:35:eb:90:62:47:95:f0:94:e0:92:
                    30:80:48:69:07:8c:77:40:9e:90:dc:ce:c2:d1:99:
                    03:72:6e:51:03:df:22:40:96:d9:a0:43:38:17:b8:
                    90:d2:06:20:72:a4:23:5d:5e:57:f8:6b:21:60:ce:
                    07:21:20:02:6e:80:76:cc:1e:e9:56:d7:60:b9:45:
                    7d:80:b6:57:ac:72:94:3a:6f:bc:fc:af:4d:48:67:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:A1:84:FD:7D:EF:78:6E:D8:FD:B5:17:19:2A:57:4F:B8:FB:B4
            X509v3 Authority Key Identifier:
                keyid:56:EF:90:80:30:B1:AD:8F:DD:E7:53:1F:99:37:D0:75:3B:21:F4:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/34352e3138322e3139322e302f32322d3234203d3e20323639323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:00:41:3f:aa:48:c4:2a:43:b5:06:0a:3e:e8:20:67:e8:
         a3:82:0e:f5:7c:3e:7d:75:07:e0:07:ae:61:c1:b6:0e:77:72:
         fa:2c:a6:9a:64:d1:89:87:cc:5a:d3:d5:1f:55:8f:ae:56:d5:
         81:1f:d4:cd:80:6a:04:72:62:ed:b8:f4:21:83:eb:04:6f:02:
         95:57:a9:70:2d:7e:7f:31:cc:d0:3a:f1:64:63:9c:11:e9:82:
         e7:3d:5d:ca:a3:68:f2:95:01:be:ca:26:1c:19:47:44:2b:5d:
         80:20:8f:1c:a6:25:a1:aa:a5:93:5f:a4:f2:24:1a:16:1e:04:
         0b:81:34:36:52:1c:ad:de:9b:ea:34:ee:41:3c:ba:49:86:cf:
         e5:97:d1:c9:ba:48:d2:f4:c5:00:5d:ef:e6:85:8a:53:4b:2e:
         64:f8:f4:7e:f7:d2:8b:bb:4d:f4:d8:a9:2c:84:af:49:db:3e:
         81:cb:92:80:6c:6d:94:eb:ad:bd:69:60:ca:78:a2:3e:b2:e2:
         6e:86:1a:8f:b6:67:3a:08:b5:c4:9e:29:fb:d4:ff:c7:bc:57:
         70:a8:d0:5c:d5:06:1b:b5:80:8f:91:05:ec:29:58:9e:e7:0e:
         9f:31:49:72:b9:db:78:b4:9c:51:59:9f:9b:2e:89:f1:b1:9b:
         12:cf:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:42 2024 by rpki-client on console-fra.rpki-client.org