Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa
File:                     34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (raw, json)
Hash identifier:          o3ie+ltQUKhmw96v0AHL13ZOiElMAUYrTJGl9XGQ1a8=
Subject key identifier:   65:C5:7A:6F:E7:4F:52:64:DB:CF:E9:8A:82:33:87:3C:FC:B9:8E:48
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       22ABA94B38B4022E410678C0FAFF37E941D2F8FD
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa
Signing time:             Fri 05 Apr 2024 02:12:02 +0000
ROA not before:           Fri 05 Apr 2024 02:07:02 +0000
ROA not after:            Fri 04 Apr 2025 02:12:02 +0000
asID:                     269184
IP address blocks:        45.181.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ab:a9:4b:38:b4:02:2e:41:06:78:c0:fa:ff:37:e9:41:d2:f8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Apr  5 02:07:02 2024 GMT
            Not After : Apr  4 02:12:02 2025 GMT
        Subject: CN=65C57A6FE74F5264DBCFE98A8233873CFCB98E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:86:ed:7b:42:57:41:64:0a:44:53:e7:c0:
                    54:ec:5e:32:e1:f3:47:74:b8:50:cd:a5:75:78:89:
                    97:41:01:d1:e4:db:13:ce:f3:ba:51:65:48:bf:e5:
                    5f:9e:32:9a:f2:65:68:a7:7e:a6:a3:1f:20:57:9a:
                    23:2e:bf:f8:81:08:6b:87:a3:ff:ae:ce:a0:37:d1:
                    bc:f3:9e:84:2a:16:18:33:02:ae:50:26:75:e6:5e:
                    72:09:56:f4:85:43:11:b3:d3:95:b2:b8:5a:4e:81:
                    8f:28:71:8d:57:23:83:68:9c:89:5a:2b:6e:df:f5:
                    da:d5:2d:a9:24:a7:c9:82:89:d4:26:44:c2:e2:ab:
                    f5:2d:c9:7c:b9:d4:26:d4:15:de:3e:b1:bd:7a:76:
                    56:84:27:6e:fa:6a:d8:40:1d:ff:1c:e6:74:92:a8:
                    db:c5:9a:52:9b:7e:b9:71:82:b6:f0:9f:e1:c3:91:
                    0a:94:29:55:0c:59:b5:11:64:3b:4e:21:fa:1a:a2:
                    70:35:2a:cb:b0:f9:8b:81:e2:ea:39:4f:bf:52:3c:
                    eb:b6:90:7c:70:f1:5e:9f:cc:c0:51:0e:4f:af:a9:
                    87:53:50:6d:15:cb:d2:59:d5:80:94:51:c2:d3:7e:
                    e3:2a:2f:94:39:e5:68:f5:d0:f9:60:23:e8:9b:d7:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C5:7A:6F:E7:4F:52:64:DB:CF:E9:8A:82:33:87:3C:FC:B9:8E:48
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:c9:27:de:6b:3c:27:71:00:4d:21:8b:bd:17:52:87:ce:
         89:de:e3:23:5f:33:21:59:89:4e:66:29:4f:dc:c2:7f:c7:46:
         0a:12:54:b3:9d:b4:b7:d5:0d:02:0d:fd:a2:f5:7d:7d:88:d8:
         75:e4:b1:2b:40:39:e0:96:ad:60:eb:0e:e4:04:a2:e0:df:61:
         fc:2b:5b:61:27:eb:14:e6:09:5e:d4:ef:0e:6c:65:c4:b3:22:
         db:72:e0:fc:79:43:b6:50:bf:e7:f6:9a:43:6b:e7:ee:a6:68:
         e4:f1:d2:d3:a9:c8:ec:ff:f8:43:87:0a:4b:fd:59:86:11:f2:
         be:77:3b:0f:1b:21:c7:e8:b3:52:f5:6c:11:08:54:b0:c7:b9:
         a1:8c:a3:ef:c1:e7:06:32:d0:5b:45:96:4d:2b:fc:63:45:94:
         51:1c:db:c2:ea:3e:0a:05:ad:66:e4:97:fa:31:16:25:bf:c5:
         2b:37:02:36:55:35:c9:67:4e:ec:91:4f:f9:59:5a:9e:e6:9e:
         4d:ad:b3:a1:9b:22:7c:0f:d2:62:23:b5:ed:4e:1a:6d:81:e8:
         7a:cc:b0:cf:d5:84:a3:f0:b3:39:ae:a1:4e:3d:2e:55:71:c3:
         89:a3:88:22:e7:57:99:23:ea:68:08:96:4c:30:1c:b2:db:cf:
         3a:e1:f1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org