Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa
File:                     34352e3232392e35322e302f32322d3234203d3e20323637313234.roa (raw, json)
Hash identifier:          7rRWrWMGnhD7Ic7z9eWSHZFQ4dZ9wSA0rSQzSTjhFQc=
Subject key identifier:   49:CC:FA:FE:6F:C3:E5:23:4C:32:05:00:0A:A6:6E:A4:3C:15:9A:A1
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       0BC3CA8295E4EB79BDF9C72DEDD2120A9AD9C4BA
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa
Signing time:             Wed 21 Aug 2024 15:12:54 +0000
ROA not before:           Wed 21 Aug 2024 15:07:54 +0000
ROA not after:            Wed 20 Aug 2025 15:12:54 +0000
asID:                     267124
IP address blocks:        45.229.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c3:ca:82:95:e4:eb:79:bd:f9:c7:2d:ed:d2:12:0a:9a:d9:c4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Aug 21 15:07:54 2024 GMT
            Not After : Aug 20 15:12:54 2025 GMT
        Subject: CN=49CCFAFE6FC3E5234C3205000AA66EA43C159AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:a2:43:21:58:87:02:1d:29:23:d4:fd:38:
                    db:16:5b:7a:ef:d3:15:19:30:ca:0e:0c:e2:7c:8d:
                    81:e2:4c:80:1b:f0:2a:34:00:63:2e:9b:6f:cc:64:
                    fb:6d:d8:94:67:42:4c:a4:33:53:49:72:69:85:87:
                    6a:c4:b6:4e:36:8d:41:95:28:0a:0f:c2:c3:9a:9a:
                    e9:a9:31:03:d5:b2:aa:19:a7:b1:e2:f4:29:5b:f5:
                    a9:70:bf:00:58:bd:b5:ad:7d:82:9e:de:c5:ae:05:
                    1a:2c:6c:f5:5b:aa:c7:ea:54:18:23:c4:07:a0:fe:
                    50:56:09:84:0a:78:64:ca:cb:24:16:e0:b7:5e:01:
                    f9:91:5f:80:df:11:15:fe:95:55:72:b1:a4:8d:03:
                    73:de:84:16:40:1c:1c:1b:24:31:4d:89:60:d4:be:
                    40:f4:d0:44:0a:5b:c4:9c:5a:8c:5d:50:d6:dc:ba:
                    de:30:f2:6e:30:fd:9a:50:58:9f:02:09:77:ee:f7:
                    31:1b:37:97:8b:56:54:06:38:3e:e5:53:18:08:d2:
                    7f:49:c9:21:c2:f6:18:0c:8a:7c:15:5c:25:81:ef:
                    ce:3c:4f:7c:82:69:34:09:d3:53:7e:2a:4f:33:31:
                    3c:41:5c:eb:9d:f4:54:81:37:14:20:8c:c4:be:96:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:FA:FE:6F:C3:E5:23:4C:32:05:00:0A:A6:6E:A4:3C:15:9A:A1
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b4:79:34:fa:cd:49:d8:7b:15:10:7c:70:6a:a5:50:a5:9b:
         8b:0c:37:dd:d1:d7:21:74:47:a4:c9:7d:3a:bf:dc:cf:7b:c7:
         72:04:80:ec:77:4d:34:9c:f6:36:39:f4:b7:9b:a8:fb:88:56:
         42:dc:8d:82:9d:2f:1c:91:ab:32:62:6b:1c:28:f6:77:43:6e:
         91:2d:fa:47:f6:6c:a6:a9:3d:5d:69:34:55:7c:ed:3d:8f:aa:
         7e:db:32:16:a0:ab:c6:4f:8c:3f:eb:38:7a:64:c9:6a:c1:4c:
         8e:47:af:43:a7:0a:8f:46:e9:c2:1e:11:07:9a:40:69:8a:39:
         b4:bc:60:99:da:c7:f1:cf:8d:f2:41:9c:b2:63:79:85:95:60:
         37:b2:c4:06:c9:75:05:0a:22:65:50:f6:d8:b5:47:17:b8:09:
         9b:aa:1c:6e:76:0e:f9:05:fd:49:88:13:08:d1:05:24:6f:7f:
         cf:42:67:f2:6b:0b:02:40:0d:1d:fa:d6:01:05:47:23:ec:cf:
         e5:db:86:01:fb:76:05:a3:07:7f:37:e7:ec:28:be:38:fd:8c:
         e0:a0:ad:e0:a3:3e:e8:64:e5:1a:9e:dd:f1:8a:8f:fb:7e:3e:
         e5:4b:da:4a:d5:46:f1:07:bb:3d:a6:59:93:06:bf:55:fb:ab:
         8f:87:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org