Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          jdQ2pfMXv4dEzArWOM3nf75bDvrTBG8gsubnWORVx1M=
Subject key identifier:   F7:9F:8D:2B:B8:D1:8E:FA:80:2F:46:28:0B:4A:3D:20:97:09:0E:E7
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       648AFF46ABD0B1FA6548FB23D7319D351FEDE2C9
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa
Signing time:             Fri 05 Apr 2024 02:12:02 +0000
ROA not before:           Fri 05 Apr 2024 02:07:02 +0000
ROA not after:            Fri 04 Apr 2025 02:12:02 +0000
asID:                     269184
IP address blocks:        45.181.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8a:ff:46:ab:d0:b1:fa:65:48:fb:23:d7:31:9d:35:1f:ed:e2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Apr  5 02:07:02 2024 GMT
            Not After : Apr  4 02:12:02 2025 GMT
        Subject: CN=F79F8D2BB8D18EFA802F46280B4A3D2097090EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:96:d8:a5:71:be:e5:34:b4:e2:67:1a:1d:
                    e0:6c:2a:5e:f2:72:27:45:92:5a:3e:d2:10:bc:51:
                    a2:ca:c2:d8:4a:ba:00:1e:06:b4:bb:91:bb:4f:98:
                    8c:2c:1c:b1:7e:cd:b5:fe:81:a7:14:3e:ad:35:cc:
                    93:35:24:5c:8c:32:a1:ec:aa:78:5a:1d:f1:66:af:
                    e6:c9:46:3e:ca:95:a2:16:e6:03:88:8d:64:6b:f4:
                    27:7e:8a:87:71:81:27:e5:41:e7:18:28:49:b0:36:
                    81:e3:df:3c:f1:32:35:ce:57:29:34:bf:08:05:fe:
                    5e:81:4f:1a:77:85:29:ca:3c:4e:22:cb:e4:88:5f:
                    7c:c9:6c:1f:7e:94:38:59:af:79:49:85:a5:a8:2c:
                    6f:35:00:16:da:96:4d:9b:e6:3e:5c:92:a9:fe:30:
                    28:9a:86:45:9e:0a:99:7a:b2:84:bc:88:af:4e:df:
                    e7:4a:b4:43:8c:f9:fd:06:20:47:b2:ad:45:77:54:
                    6a:f0:85:a6:67:59:c6:0b:10:0c:d7:67:10:95:b9:
                    b7:24:1e:48:3b:83:19:47:31:d8:de:d3:48:83:f6:
                    31:aa:23:99:e0:7b:18:0f:01:d3:4a:bf:cb:2b:d2:
                    76:28:17:8b:97:1e:09:e2:7d:14:e3:fd:93:c7:00:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:8D:2B:B8:D1:8E:FA:80:2F:46:28:0B:4A:3D:20:97:09:0E:E7
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:4e:10:03:c7:fe:20:df:08:02:42:8b:4f:e2:d9:b1:f0:
         4f:22:7a:7a:c5:18:5c:e2:e7:9e:1d:5f:0a:d3:7e:d2:9b:a1:
         0e:7b:7c:a8:dd:6d:fb:15:29:62:67:ea:f1:d8:ea:b8:be:6f:
         82:ff:3a:a1:c9:d4:3e:a9:c3:b5:bd:7b:ea:c8:11:00:08:14:
         a4:66:30:52:37:9b:96:f3:04:87:6c:7f:8a:78:34:20:e9:4b:
         41:d5:d1:50:d2:db:0e:7a:20:41:e8:28:9e:55:54:c7:e1:84:
         e2:36:fa:d4:0e:7c:12:f8:53:26:67:b4:e8:14:dd:9e:eb:09:
         08:2a:6c:68:91:1d:34:72:0b:b7:42:6c:c2:25:81:11:20:6c:
         10:e7:77:68:c1:99:e1:c5:8a:9f:ef:1a:ca:dc:5c:de:d2:a0:
         70:c7:2a:15:c5:c7:35:3c:9c:f4:b0:ae:ed:4d:48:b3:54:46:
         f4:84:fd:10:38:f5:fd:a2:df:18:41:36:c2:e7:20:c5:8e:33:
         b0:cf:83:7f:b6:1c:14:83:fd:c7:dd:09:70:94:73:72:63:1a:
         64:6f:15:f2:b2:d1:8b:00:b6:4a:18:0a:e6:38:1f:23:44:c2:
         31:bb:2a:ed:2a:26:79:e2:da:23:b6:00:a6:fb:d6:52:e3:79:
         d0:31:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org