Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa
File:                     34352e3232392e35322e302f32322d3232203d3e20323637313234.roa (raw, json)
Hash identifier:          9llWiVz29h+7sSHb9tmTOhQ9eJ4Xbtwu0PS6quXP8Vc=
Subject key identifier:   5E:C5:1C:FF:0A:46:86:15:1C:17:38:25:C3:A1:B3:F3:D8:52:B4:C3
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       114B5F5520C4CA86982FCEA49D40DCE713A00CBE
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa
Signing time:             Thu 04 Apr 2024 16:10:09 +0000
ROA not before:           Thu 04 Apr 2024 16:05:09 +0000
ROA not after:            Thu 03 Apr 2025 16:10:09 +0000
asID:                     267124
IP address blocks:        45.229.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4b:5f:55:20:c4:ca:86:98:2f:ce:a4:9d:40:dc:e7:13:a0:0c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Apr  4 16:05:09 2024 GMT
            Not After : Apr  3 16:10:09 2025 GMT
        Subject: CN=5EC51CFF0A4686151C173825C3A1B3F3D852B4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:f1:fe:41:22:33:93:69:c7:54:4f:ff:b3:
                    2f:17:12:dd:6c:99:b5:35:85:ba:fd:52:d5:0c:ea:
                    8e:2b:51:b2:a1:f8:5a:9a:42:99:78:21:b8:ec:a8:
                    0b:8a:2c:e7:70:d1:63:a7:bf:e3:70:ef:c0:4e:c2:
                    51:20:3c:6a:4e:6f:39:31:f4:80:46:08:8c:16:3d:
                    35:db:9c:77:79:6e:da:ff:39:d9:2f:fd:4d:a8:66:
                    50:cb:91:76:be:8b:d5:60:e7:75:da:33:fe:fb:d2:
                    bd:5b:c8:d1:9f:2e:a7:0e:15:e2:41:19:3b:ca:bb:
                    9e:19:cf:49:ff:12:82:a3:3b:33:aa:8b:e3:05:a7:
                    03:f8:49:69:a8:12:8f:c2:8b:d0:c0:e1:2c:99:cf:
                    f9:c8:9f:2f:a2:6d:b1:3d:2d:79:53:50:26:65:1b:
                    06:29:8f:e8:78:0e:a3:49:0f:e2:c6:92:9a:92:18:
                    cb:f3:0d:1f:cc:8d:bc:80:90:fa:ec:42:42:0b:67:
                    a8:19:db:18:37:34:e6:38:5b:63:05:ce:3e:85:b5:
                    9a:f1:8f:af:d0:0b:17:5d:15:67:3c:e0:83:af:aa:
                    2e:f0:a6:46:d2:4b:25:48:b9:bf:1a:7c:84:a2:60:
                    e8:97:e6:7b:5a:5a:6c:e6:96:02:40:70:c2:11:cf:
                    98:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C5:1C:FF:0A:46:86:15:1C:17:38:25:C3:A1:B3:F3:D8:52:B4:C3
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:51:6c:bb:53:45:40:d8:3b:45:b9:50:b7:68:1e:4d:39:c5:
         64:0d:f5:96:8f:a7:01:91:b7:55:32:f3:20:19:6d:69:da:c8:
         07:fc:bf:14:12:c5:6b:a8:0b:01:32:d8:aa:4d:e5:0f:1c:97:
         97:77:e8:4b:f9:d2:e6:e5:38:03:53:29:01:3c:09:ee:96:5c:
         d8:6b:0c:c8:ad:7a:94:1b:59:e2:16:54:72:74:cd:68:fe:e9:
         78:f2:46:cc:f1:39:20:85:f9:cc:b6:6a:07:34:3c:66:e1:bf:
         d2:16:7e:e2:2c:d5:cd:3e:9c:5d:35:a4:3b:cd:69:71:2e:3c:
         7d:4a:f8:e3:3d:97:fd:5c:1c:d5:b3:24:56:ae:80:a6:86:a0:
         c5:eb:65:d6:69:fc:16:e8:62:19:cf:33:ae:a7:b4:fd:a4:0a:
         5e:b5:0d:71:dd:05:f8:c6:78:4d:b4:20:b5:51:c8:34:2e:ee:
         02:1e:f4:b8:5b:df:53:f2:08:ad:9e:ea:5e:80:0c:df:7b:ef:
         7a:65:60:21:b0:e7:f2:a8:a3:d6:99:bc:01:a6:59:3b:24:e6:
         5d:32:cb:ae:62:e2:c2:c8:62:c8:5a:c0:13:fd:a7:25:25:16:
         94:9e:a5:62:c3:99:e9:a3:5c:47:a6:a6:75:b7:05:39:ca:eb:
         d3:52:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:48 2024 by rpki-client on console-fra.rpki-client.org