Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa
File:                     34352e3233312e33362e302f32322d3234203d3e20323637323230.roa (raw, json)
Hash identifier:          hG5/wQl2Ox8GIYNwATqaH8VKfyxG7st+yjP0qfCFUC8=
Subject key identifier:   66:8F:C3:66:A2:AB:7B:DC:46:7A:23:29:1A:8A:31:2B:73:91:45:1D
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       3086F47E33880ACFE5FF297D66FA44E011277504
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa
Signing time:             Wed 03 Apr 2024 18:39:17 +0000
ROA not before:           Wed 03 Apr 2024 18:34:17 +0000
ROA not after:            Wed 02 Apr 2025 18:39:17 +0000
asID:                     267220
IP address blocks:        45.231.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:86:f4:7e:33:88:0a:cf:e5:ff:29:7d:66:fa:44:e0:11:27:75:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: Apr  3 18:34:17 2024 GMT
            Not After : Apr  2 18:39:17 2025 GMT
        Subject: CN=3082010A0282010100E35C8C38DBC78BA55A23C01115818C4E5AAC7A319037F3D1415263C0D5D877BAA9F8B074F7BB0E04B742B121228881BE6BA9388EEFFD6EF18ED4B979F8ABBFE590185BCFCC7D0D2F9112D45BF5571BD99ED1B67F6D68DF7C5EE95071BD9995B4B6AE9481C6DE3E27D29795A09E62D89E4E8C4762C7926C5B9D0E6449180909246B1BDE215A90C69A9D4D0B20604F7FC5D3291D1089AC618F23E64CECC0ECD5706B642CE9A4C054BA2ACBD1E0CB0A11B875FB526B2F6F03F76612F182388DC7B916D70338EDCFDF1AA5396B9448C692C2A9D17D08A9B7FCE7F99EF2256E5DE53556189828C0669670753CB47EAB8FDB84320EEDBFFF59D0BC4777697141DD5F2F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5c:8c:38:db:c7:8b:a5:5a:23:c0:11:15:81:
                    8c:4e:5a:ac:7a:31:90:37:f3:d1:41:52:63:c0:d5:
                    d8:77:ba:a9:f8:b0:74:f7:bb:0e:04:b7:42:b1:21:
                    22:88:81:be:6b:a9:38:8e:ef:fd:6e:f1:8e:d4:b9:
                    79:f8:ab:bf:e5:90:18:5b:cf:cc:7d:0d:2f:91:12:
                    d4:5b:f5:57:1b:d9:9e:d1:b6:7f:6d:68:df:7c:5e:
                    e9:50:71:bd:99:95:b4:b6:ae:94:81:c6:de:3e:27:
                    d2:97:95:a0:9e:62:d8:9e:4e:8c:47:62:c7:92:6c:
                    5b:9d:0e:64:49:18:09:09:24:6b:1b:de:21:5a:90:
                    c6:9a:9d:4d:0b:20:60:4f:7f:c5:d3:29:1d:10:89:
                    ac:61:8f:23:e6:4c:ec:c0:ec:d5:70:6b:64:2c:e9:
                    a4:c0:54:ba:2a:cb:d1:e0:cb:0a:11:b8:75:fb:52:
                    6b:2f:6f:03:f7:66:12:f1:82:38:8d:c7:b9:16:d7:
                    03:38:ed:cf:df:1a:a5:39:6b:94:48:c6:92:c2:a9:
                    d1:7d:08:a9:b7:fc:e7:f9:9e:f2:25:6e:5d:e5:35:
                    56:18:98:28:c0:66:96:70:75:3c:b4:7e:ab:8f:db:
                    84:32:0e:ed:bf:ff:59:d0:bc:47:77:69:71:41:dd:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8F:C3:66:A2:AB:7B:DC:46:7A:23:29:1A:8A:31:2B:73:91:45:1D
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:4e:d2:b4:10:3d:bc:a8:ea:a2:8e:55:6a:8e:86:e6:5f:cc:
         af:a2:6c:c9:f4:15:af:ce:88:bd:66:f9:04:39:1c:74:d6:f0:
         7e:17:0d:0e:1c:bf:e5:73:46:d5:21:ae:31:aa:cb:d8:b8:be:
         e1:60:f5:80:de:a6:44:aa:dc:1f:b2:55:48:23:3e:b3:26:2b:
         e5:a6:f0:e1:e4:83:87:49:39:1f:4e:69:17:4a:49:d8:cb:60:
         d7:2d:5b:36:ce:f2:ab:d6:37:f0:09:96:c7:11:b9:28:18:60:
         db:47:e7:76:59:16:34:7d:7f:9f:49:92:57:d2:ba:43:9c:35:
         9f:b6:f0:fe:f4:2a:9f:b8:9b:2d:4b:e2:d7:4c:0d:88:55:c5:
         db:42:90:e7:74:ba:35:a3:89:17:89:b1:c0:04:a4:f1:cc:23:
         98:f3:62:81:2d:c4:5b:4a:e3:42:b2:9b:4b:79:fb:67:93:3b:
         d4:66:46:c5:5e:3c:71:8f:16:b2:ca:82:b0:ff:fe:67:eb:88:
         ef:56:36:c2:a7:12:65:27:32:4d:ab:ea:2b:61:96:4c:8b:c1:
         56:08:c5:ba:90:e6:d8:19:f3:e0:ed:4e:63:4d:67:db:02:5b:
         20:43:6e:da:fa:f1:d8:6b:10:72:3b:a3:e8:75:24:6a:b2:bd:
         bd:58:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:49 2024 by rpki-client on console-ams.rpki-client.org