Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          xQ4qFYwKNiS95VXrbiD9YeZ9nJuXruRrrewxNnwXig4=
Subject key identifier:   EF:E4:3D:CE:A0:0E:CA:BB:F7:F3:AD:53:92:34:D2:74:DD:69:9A:C7
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       6CA569D22F61715BBAAF9113608CE9FBC98437D1
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa
Signing time:             Fri 05 Apr 2024 02:12:01 +0000
ROA not before:           Fri 05 Apr 2024 02:07:01 +0000
ROA not after:            Fri 04 Apr 2025 02:12:01 +0000
asID:                     269184
IP address blocks:        45.181.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a5:69:d2:2f:61:71:5b:ba:af:91:13:60:8c:e9:fb:c9:84:37:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Apr  5 02:07:01 2024 GMT
            Not After : Apr  4 02:12:01 2025 GMT
        Subject: CN=EFE43DCEA00ECABBF7F3AD539234D274DD699AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:38:ad:8c:4c:22:f2:cb:cc:65:28:cd:71:
                    fa:55:25:fa:17:12:1c:57:93:09:79:cb:73:67:e2:
                    99:9f:7a:54:4a:eb:e8:fd:ce:4c:96:3b:f4:4d:d4:
                    84:dc:5a:ce:41:54:11:26:f4:54:a5:24:06:97:7f:
                    73:a9:5c:c3:7a:0e:e4:86:e3:da:da:81:f2:e4:14:
                    56:06:28:02:c1:65:a2:9b:d3:6a:47:57:55:08:78:
                    6c:20:49:d0:5f:1f:9a:d6:b1:04:d5:39:5c:58:d1:
                    80:45:8a:8f:98:fe:9b:a5:bf:17:19:46:05:fb:81:
                    5a:df:d2:96:76:bb:97:5f:9e:f0:11:6a:a9:22:84:
                    11:42:7c:1c:2c:fe:2f:23:a2:88:84:a2:e1:12:18:
                    7e:7b:ba:88:2a:32:f0:ff:c2:a4:3e:e5:f0:76:b7:
                    17:f1:4e:e2:3e:8b:54:89:b3:d7:2e:f1:5a:9e:b7:
                    61:89:93:8e:51:ca:ab:2c:f9:e7:e7:17:1b:49:bf:
                    75:c8:84:58:0a:a4:df:9d:cd:c7:cf:8c:e2:9d:53:
                    f2:46:d3:82:9e:76:dc:9e:36:75:69:3c:cd:e1:4b:
                    2b:06:c6:26:2b:9d:af:5b:b1:0c:f4:f1:02:c1:07:
                    63:37:38:f7:ce:a4:d3:7b:db:65:56:43:9a:18:4b:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E4:3D:CE:A0:0E:CA:BB:F7:F3:AD:53:92:34:D2:74:DD:69:9A:C7
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:4a:dc:6a:8a:ed:75:e5:5a:79:8b:e4:2a:73:c3:90:be:
         72:59:72:ab:0c:ff:d6:b3:09:e0:05:78:0b:d8:d1:24:0f:78:
         99:31:59:f1:84:eb:82:d4:ff:3c:7d:7c:36:cf:8c:ea:0f:06:
         b4:82:96:b1:22:ad:9f:e7:f9:92:38:53:68:d0:64:0e:d1:d2:
         4a:31:b8:4d:db:cd:46:95:3e:38:ac:e0:fc:b3:c1:62:1d:53:
         b0:ef:a9:3e:80:23:de:c9:fc:3f:04:03:f8:0f:53:c6:c9:16:
         7f:98:77:08:4f:74:5e:76:e0:4e:29:10:c8:c2:7c:01:4c:18:
         f2:f8:a6:45:c8:c8:d6:4c:88:50:f9:40:b6:09:e5:36:1c:c9:
         ac:6b:7a:90:29:47:d0:a9:c2:7f:4c:80:31:2b:a4:61:04:14:
         eb:6f:8d:60:51:72:83:36:e8:aa:01:c3:af:ef:d1:7e:08:0a:
         c5:ca:4e:9a:a2:cf:45:05:6a:8d:2c:14:e4:61:80:d6:49:78:
         b8:e9:11:af:10:24:0d:60:a0:13:c7:51:85:44:a6:a4:a0:94:
         55:20:77:c2:a4:de:8f:bf:55:52:12:54:75:d4:37:81:f6:5b:
         9e:c9:84:4b:7f:47:cb:26:5b:a1:4c:a2:1d:69:d1:af:a7:cd:
         68:dc:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org