Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          rIVYHnI/K5qPVMt5ZUn3zZySl1xdJrg+62BfQeRisHE=
Subject key identifier:   25:9A:1C:9A:F5:C1:A1:CF:03:D9:5A:E2:70:74:59:77:17:A9:E5:84
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       702BE1261A7C6597EF11A38B83F85529F322E1B1
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa
Signing time:             Fri 05 Apr 2024 02:12:01 +0000
ROA not before:           Fri 05 Apr 2024 02:07:01 +0000
ROA not after:            Fri 04 Apr 2025 02:12:01 +0000
asID:                     269184
IP address blocks:        45.181.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2b:e1:26:1a:7c:65:97:ef:11:a3:8b:83:f8:55:29:f3:22:e1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Apr  5 02:07:01 2024 GMT
            Not After : Apr  4 02:12:01 2025 GMT
        Subject: CN=259A1C9AF5C1A1CF03D95AE27074597717A9E584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:b8:12:51:5a:5d:77:7b:43:bd:2d:4f:2f:
                    43:93:5a:76:a2:05:71:bf:09:3e:63:e7:35:78:51:
                    58:68:e9:18:4a:87:03:44:45:72:c3:67:b7:ae:ca:
                    dd:1f:0c:13:67:28:60:e3:c8:87:48:50:af:63:78:
                    11:89:40:74:b1:4b:36:de:cf:88:ad:af:4f:06:aa:
                    19:52:72:0e:ff:19:83:ec:da:7a:48:0b:a2:3e:de:
                    e5:38:3e:f6:75:5d:3a:4c:23:28:90:7e:36:7c:17:
                    f5:bd:aa:5b:f2:4a:89:ff:41:ed:06:af:0d:e7:46:
                    57:62:ce:ec:d7:f1:c7:30:d5:8a:24:f7:39:62:52:
                    91:8a:26:f9:ac:63:93:b2:1d:7e:e8:a9:8d:b8:a4:
                    56:50:f8:47:e9:2f:ec:94:a2:b6:02:fe:49:ec:15:
                    11:3c:76:6f:f4:49:fa:a1:65:0a:6b:41:cd:c8:6c:
                    e4:93:8b:c4:ed:d5:b8:d4:42:02:dd:0b:90:e6:eb:
                    77:45:4e:b2:cf:d4:ae:3f:5f:a6:e3:c7:83:9e:ad:
                    e6:a5:b0:b8:07:a1:fb:b0:b2:a8:29:58:67:90:11:
                    01:e7:ce:47:53:fd:f2:fa:70:0f:de:c9:43:e1:3d:
                    ec:9c:8a:f8:b1:04:cb:eb:79:44:66:ec:6f:a0:c6:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9A:1C:9A:F5:C1:A1:CF:03:D9:5A:E2:70:74:59:77:17:A9:E5:84
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:92:31:2d:ea:94:05:fb:0e:be:6b:4d:a6:8f:70:4d:e7:e8:
         23:a1:9c:ac:0d:f1:f9:cd:0f:7b:af:43:7a:ee:69:9b:84:0a:
         c3:4c:55:76:7b:ac:42:5d:00:e3:06:4a:22:b2:b6:47:37:fa:
         e0:f8:54:27:bf:9e:19:bc:42:91:94:57:ae:86:6b:f2:c8:89:
         03:9e:d3:60:a4:5b:f4:59:96:a2:57:c2:64:bb:57:d2:6a:30:
         19:76:1e:51:0a:d9:ff:89:d9:52:97:49:c6:3d:d7:f9:f6:64:
         fc:8a:6c:4c:aa:90:dc:2b:8a:30:73:fe:91:84:21:35:8a:95:
         91:a0:6c:9b:b1:d2:45:5d:bb:20:ca:1f:95:c6:a6:10:65:31:
         3e:28:b4:e9:0e:0c:e5:1a:40:ce:c6:17:ba:8b:eb:9d:ff:e2:
         48:db:69:5d:93:55:44:40:de:a3:a4:6b:e7:c7:1c:47:11:2e:
         66:3f:c0:fd:bb:52:b5:0e:d5:99:c2:6e:b6:a1:ff:20:5e:64:
         83:d8:bd:24:c2:e1:56:61:ed:1f:5a:0f:9b:ff:7f:f2:1d:ab:
         2e:d8:d0:35:47:a4:f3:69:6a:77:80:e2:26:71:d2:4a:9b:57:
         5a:21:95:28:71:ff:f9:ec:28:e2:87:0d:13:c3:7c:eb:40:79:
         eb:16:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org