Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa
File:                     34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (raw, json)
Hash identifier:          lZskLdLcJqp/BvV6VTotsWcR15SUiQ8/wHIVlzwsryg=
Subject key identifier:   39:03:60:42:7C:7E:81:CE:66:6D:C6:61:F3:20:AB:0C:38:81:39:0F
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       3DFD594D2518E72A7D8120980AFD3FB776C8B206
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa
Signing time:             Fri 05 Apr 2024 02:12:01 +0000
ROA not before:           Fri 05 Apr 2024 02:07:01 +0000
ROA not after:            Fri 04 Apr 2025 02:12:01 +0000
asID:                     269184
IP address blocks:        45.181.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fd:59:4d:25:18:e7:2a:7d:81:20:98:0a:fd:3f:b7:76:c8:b2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Apr  5 02:07:01 2024 GMT
            Not After : Apr  4 02:12:01 2025 GMT
        Subject: CN=390360427C7E81CE666DC661F320AB0C3881390F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:5d:29:d2:0d:3a:a1:5b:cf:28:1a:f6:06:
                    67:17:d4:33:fd:35:6d:af:6c:99:2d:c0:07:03:86:
                    bb:3e:a2:b3:7b:03:c9:21:06:79:b1:35:97:fe:79:
                    c6:70:83:d6:92:43:f1:d7:4f:85:f1:14:5a:de:69:
                    c4:ed:c5:e3:08:d0:c0:9e:73:e1:b3:b8:10:ec:be:
                    28:fd:2f:4a:f4:b5:fb:46:f7:8a:a7:ff:2c:54:91:
                    f1:02:22:5e:fd:0f:5e:30:a2:5a:c1:8f:83:87:7f:
                    bc:23:e5:da:e2:ed:29:08:9a:d2:0f:af:75:4a:f3:
                    4a:4c:bf:e8:d9:b5:af:08:b9:4d:b9:1b:7b:8a:6a:
                    e3:d2:17:51:03:58:51:ba:9c:47:38:4a:21:87:07:
                    b8:d5:e9:4f:8e:81:33:c1:21:ef:7d:94:94:0d:e7:
                    eb:81:4b:c2:e1:9a:ac:9e:8b:44:66:6b:91:32:38:
                    8c:cd:9d:7a:14:bd:6a:70:38:3f:91:94:49:1c:bc:
                    23:5c:4b:e9:af:c6:d7:94:aa:57:6a:ed:66:5c:d9:
                    34:b5:3f:01:90:27:b8:39:61:89:e9:96:9d:3a:ee:
                    07:9d:9f:ce:ba:4a:94:99:0c:d8:34:bc:31:7c:f4:
                    a0:7c:5c:8a:85:b2:19:e9:60:a3:02:05:c0:18:4e:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:03:60:42:7C:7E:81:CE:66:6D:C6:61:F3:20:AB:0C:38:81:39:0F
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:85:99:dd:97:08:7b:27:86:3d:2e:bb:29:12:93:bb:37:
         3a:0c:d2:84:2e:66:6b:20:5f:e3:da:b9:9b:e8:86:12:e7:fa:
         09:99:a3:34:8a:07:d1:c8:f2:f9:bd:8b:c0:b1:ed:a6:d0:15:
         fe:49:d4:30:b6:56:18:25:55:86:f8:ae:5a:96:cb:84:58:2b:
         27:83:6b:c8:ad:63:57:11:a8:49:31:af:02:a6:7f:73:7c:8c:
         ff:dc:1f:a8:22:7e:49:97:33:6a:b3:e0:c3:da:e5:18:1f:7a:
         bb:90:59:e2:0f:60:eb:3e:de:c3:c9:3f:b4:49:c4:2c:b6:b1:
         a1:e4:f0:ab:95:94:29:30:ea:28:01:79:1f:cd:af:71:dd:ae:
         1b:31:98:9a:88:1f:90:11:45:56:58:1b:5d:62:39:83:5a:5c:
         4f:2e:dd:13:cb:21:97:bd:33:6b:6a:82:84:89:fe:50:12:72:
         72:02:95:b9:df:10:07:0c:5b:5c:64:11:08:c0:62:d8:20:81:
         60:00:08:6d:0b:a1:9c:83:b1:9c:99:fe:0d:c5:fc:12:5d:4e:
         8b:85:e8:dc:b3:56:62:a6:9b:5a:7c:c6:43:f9:8e:1c:ab:92:
         5c:3d:cb:ea:a3:b2:7d:9c:e9:38:94:87:2b:00:6c:a6:5e:23:
         47:43:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org