Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136322e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          JFi4K4MIMmwgRIm2pJR3ZttcsJBYj4Tk4BjnyIB54n4=
Subject key identifier:   94:B5:C4:67:FA:D3:0B:BC:22:9B:C2:89:77:58:CA:B5:0E:89:AD:10
Certificate issuer:       /CN=4BFC875BB620AF91362E3BE00B276B5E37F4DD35
Certificate serial:       7C8941C43C36D89EB0A13F1058727B739441699F
Authority key identifier: 4B:FC:87:5B:B6:20:AF:91:36:2E:3B:E0:0B:27:6B:5E:37:F4:DD:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
Signing time:             Sun 07 Apr 2024 22:13:41 +0000
ROA not before:           Sun 07 Apr 2024 22:08:41 +0000
ROA not after:            Sun 06 Apr 2025 22:13:41 +0000
asID:                     266196
IP address blocks:        45.6.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:89:41:c4:3c:36:d8:9e:b0:a1:3f:10:58:72:7b:73:94:41:69:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFC875BB620AF91362E3BE00B276B5E37F4DD35
        Validity
            Not Before: Apr  7 22:08:41 2024 GMT
            Not After : Apr  6 22:13:41 2025 GMT
        Subject: CN=94B5C467FAD30BBC229BC2897758CAB50E89AD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:9a:6a:15:15:5b:f8:87:32:05:8b:98:45:
                    d9:2f:90:28:42:b5:b6:73:bc:aa:66:ea:7a:12:98:
                    59:f2:1f:16:2b:13:17:86:39:c0:eb:e5:a4:6d:67:
                    3a:f3:0e:e0:91:b9:37:3d:3e:bd:33:a9:e6:78:70:
                    fc:bf:61:4e:a1:18:3f:c3:9b:c1:57:60:b8:69:89:
                    6a:a2:48:86:4d:03:85:bd:62:01:cb:59:8f:94:86:
                    e6:0b:56:23:36:f3:60:99:ff:9f:3d:3f:42:fc:b3:
                    36:c4:69:ff:66:47:03:4c:b4:37:ef:3f:71:8d:36:
                    34:7f:12:5c:22:28:44:5a:6e:c9:15:88:17:01:98:
                    e6:81:a1:c1:57:d5:18:16:b8:62:c0:c9:4d:ba:03:
                    f9:59:5d:7d:70:f3:7e:4d:50:5e:5a:5c:89:72:41:
                    09:4b:5a:a7:f8:fc:c8:53:08:4b:52:03:a9:99:d2:
                    80:2a:92:32:8b:91:31:a1:6f:2f:eb:9f:75:6d:cd:
                    df:ce:c6:8d:28:73:eb:c0:15:e1:75:f1:cf:52:16:
                    08:60:39:cc:92:0f:5d:57:d6:0a:1d:08:24:a8:9f:
                    4d:5d:44:60:e2:34:9c:40:18:07:fc:c0:60:01:4e:
                    4c:43:36:13:3e:06:40:10:31:9a:3b:f9:11:ce:07:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B5:C4:67:FA:D3:0B:BC:22:9B:C2:89:77:58:CA:B5:0E:89:AD:10
            X509v3 Authority Key Identifier:
                keyid:4B:FC:87:5B:B6:20:AF:91:36:2E:3B:E0:0B:27:6B:5E:37:F4:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:a7:6e:5e:6e:f6:ed:a2:e0:26:d7:ba:f9:37:10:54:c3:
         e4:0b:62:18:72:30:58:93:40:15:f6:cc:c2:75:2e:4a:16:c5:
         0d:e3:5a:1e:47:a6:44:e0:1b:3d:58:b2:10:1d:10:71:08:f6:
         7d:f9:5d:b8:9e:28:cf:ec:cf:99:74:68:78:19:11:fd:56:39:
         49:2c:4b:af:9a:35:e9:5c:59:ad:46:b1:5b:e3:85:95:01:37:
         b9:b2:f0:36:3c:76:8d:e8:33:fc:62:62:ef:29:f5:4f:12:24:
         02:4d:be:a4:80:81:a5:e9:b8:eb:57:b5:72:fd:53:67:ce:8b:
         c7:88:e4:11:2f:0c:97:1b:74:f6:9d:4f:53:3d:06:03:71:2e:
         f2:1b:ee:33:d0:95:65:31:9e:1d:51:ab:de:40:d9:87:43:a8:
         9e:84:46:4d:5d:41:b4:39:94:2d:51:08:09:22:3d:cb:34:7e:
         97:48:d1:f9:23:df:37:87:99:f3:bd:b9:2b:a4:a7:6c:d4:2e:
         a1:1f:bc:da:93:a6:bb:5b:34:cb:3c:66:62:4d:24:0a:eb:86:
         ae:e5:45:73:71:e6:11:24:3f:22:59:5b:c1:52:06:3f:e5:5a:
         b0:87:c5:be:52:d3:1b:46:71:7b:77:b7:fd:f1:63:4d:e8:3a:
         82:1c:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:46 2024 by rpki-client on console-fra.rpki-client.org