Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/34352e3232342e322e302f32332d3234203d3e20323634393837.roa
File:                     34352e3232342e322e302f32332d3234203d3e20323634393837.roa (raw, json)
Hash identifier:          7rQf8RagrpPDLDwCqAD/jusKgCwIIDH9P9xWWQkIPdY=
Subject key identifier:   62:31:6B:D4:CA:E7:E2:82:84:DE:8C:B5:84:CB:CF:4F:8F:74:94:CF
Certificate issuer:       /CN=2085C2E26105617BC4502F8911A5BE52CC061122
Certificate serial:       4B4FB66F75204012EAA73B14F75819159EA24EA0
Authority key identifier: 20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/34352e3232342e322e302f32332d3234203d3e20323634393837.roa
Signing time:             Fri 16 Aug 2024 11:45:59 +0000
ROA not before:           Fri 16 Aug 2024 11:40:59 +0000
ROA not after:            Fri 15 Aug 2025 11:45:59 +0000
asID:                     264987
IP address blocks:        45.224.2.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl
                          rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4f:b6:6f:75:20:40:12:ea:a7:3b:14:f7:58:19:15:9e:a2:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085C2E26105617BC4502F8911A5BE52CC061122
        Validity
            Not Before: Aug 16 11:40:59 2024 GMT
            Not After : Aug 15 11:45:59 2025 GMT
        Subject: CN=62316BD4CAE7E28284DE8CB584CBCF4F8F7494CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:bf:50:4e:c6:4b:ec:9b:b9:45:de:ef:a4:
                    d9:12:c8:44:6c:6e:c8:15:e8:96:5d:dc:a2:9a:23:
                    27:f4:3a:fd:05:dd:68:47:93:78:f4:96:29:39:63:
                    23:7a:ab:a2:9f:b2:58:95:10:76:47:fd:8f:05:6f:
                    4f:d3:04:32:33:1a:48:75:94:c3:d7:a2:6a:51:db:
                    e4:bf:b7:28:ca:7d:31:0a:5d:1a:25:c1:fd:47:5c:
                    84:bc:c0:4f:fd:24:9f:d6:9b:2a:3a:51:d9:13:d7:
                    84:3c:0a:41:68:99:fb:54:5b:28:e7:c1:dc:8e:af:
                    31:86:15:2b:a0:c8:2d:7c:62:6e:79:f9:12:90:64:
                    5c:31:41:6c:d9:c1:4c:a0:ad:c8:92:8b:03:ba:3a:
                    11:93:05:35:dc:76:7d:fa:75:0c:28:9b:1f:05:cc:
                    c6:0e:83:b2:9f:7a:fe:b8:20:df:1f:22:cf:d2:ee:
                    6d:0b:19:53:98:e8:1d:32:17:23:1c:25:98:36:b5:
                    7e:43:57:4c:99:93:f2:49:bf:11:75:f4:45:b4:1b:
                    0d:73:fb:74:af:52:96:ce:50:7b:e9:95:9c:11:c2:
                    65:6b:4f:0e:5e:e1:41:ba:b2:c0:25:40:3c:d2:c7:
                    dd:07:72:fe:7d:a4:6f:7c:16:53:72:26:d5:12:8f:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:31:6B:D4:CA:E7:E2:82:84:DE:8C:B5:84:CB:CF:4F:8F:74:94:CF
            X509v3 Authority Key Identifier:
                keyid:20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/34352e3232342e322e302f32332d3234203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:68:44:ff:1b:75:3b:d2:c3:25:1f:86:dd:71:dc:73:87:ac:
         80:60:34:f7:55:9e:41:3c:55:68:10:48:1b:ee:c3:c2:4e:83:
         44:7b:68:d1:87:e4:ee:84:1a:81:e1:b6:b4:0b:78:ce:9d:c8:
         e1:81:72:53:af:d7:93:21:c2:ce:58:81:0b:a5:a1:4f:20:51:
         c5:19:75:a3:99:81:56:a5:85:af:a0:55:d3:bf:9b:94:33:08:
         08:50:56:f8:47:92:71:2a:64:1d:ee:bc:24:99:f1:39:e9:65:
         4a:dd:11:87:a8:92:5e:e5:92:ca:03:74:8d:0f:53:50:6c:a8:
         94:c5:45:9a:ac:be:15:4e:56:c2:66:3e:f1:e8:0d:a1:d7:2b:
         82:ad:3d:c0:f1:c7:10:1b:91:af:76:f5:c6:90:fd:58:35:29:
         61:2b:5a:7f:e6:73:b2:c5:5c:b7:6d:b9:79:be:43:48:12:6b:
         92:2f:c1:75:1a:4f:b3:c8:cb:52:de:65:a5:8c:e1:4a:e1:45:
         4c:32:69:f4:bf:57:54:40:1e:8e:e2:9b:92:0f:d1:e5:a2:95:
         e5:41:c3:9f:e5:0f:80:b5:74:2a:e6:ad:0e:00:6c:dc:3f:70:
         58:ff:e8:82:06:7b:fd:cf:b7:25:2b:84:43:eb:2a:dc:32:dc:
         37:d7:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:49 2024 by rpki-client on console-ams.rpki-client.org