Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/34352e3138392e302e302f32332d3234203d3e20323639363438.roa
File:                     34352e3138392e302e302f32332d3234203d3e20323639363438.roa (raw, json)
Hash identifier:          /PrNLR1qZz7ZDiVwNFBI8l94gVP2jX8svL8HCxc09TQ=
Subject key identifier:   5C:3E:1E:F3:64:64:A8:7B:40:82:AA:91:42:8B:8D:8D:86:57:D0:97
Certificate issuer:       /CN=3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2
Certificate serial:       276FC1A9DFB97652F98BA2816AFCC808CBD9113F
Authority key identifier: 3A:81:CD:2D:56:EA:80:8D:67:DD:15:6F:E3:D9:3A:5D:88:6A:DD:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/34352e3138392e302e302f32332d3234203d3e20323639363438.roa
Signing time:             Wed 03 Apr 2024 22:05:38 +0000
ROA not before:           Wed 03 Apr 2024 22:00:38 +0000
ROA not after:            Wed 02 Apr 2025 22:05:38 +0000
asID:                     269648
IP address blocks:        45.189.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.crl
                          rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6f:c1:a9:df:b9:76:52:f9:8b:a2:81:6a:fc:c8:08:cb:d9:11:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2
        Validity
            Not Before: Apr  3 22:00:38 2024 GMT
            Not After : Apr  2 22:05:38 2025 GMT
        Subject: CN=5C3E1EF36464A87B4082AA91428B8D8D8657D097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:d3:08:33:81:09:3e:b5:a7:4e:d3:c5:95:
                    82:0f:bd:49:76:38:d8:99:86:20:af:dd:c6:6a:25:
                    e9:e2:8f:55:49:6c:e7:92:0f:f8:a2:87:df:2d:96:
                    93:85:28:f2:08:43:02:ef:3e:24:6c:ad:c4:22:ee:
                    88:5b:f1:f6:a6:ac:7a:5b:68:69:20:d0:1a:db:18:
                    91:90:dd:29:ac:0d:50:e9:5a:22:77:5d:0a:69:4c:
                    77:68:4e:7f:60:37:49:d1:52:f5:21:71:ee:3c:72:
                    d5:e7:06:a0:eb:99:71:e0:79:a6:85:e7:2e:78:04:
                    bc:0b:d0:cd:76:b2:b5:53:73:13:35:81:90:6d:09:
                    e7:a5:e6:19:8c:90:c2:e9:b2:02:22:fa:a9:b0:44:
                    0e:71:cb:e9:1e:4a:c0:e2:f5:6f:64:b6:b6:e3:74:
                    42:8e:3b:7c:50:99:39:f5:67:6d:48:39:cd:4d:a2:
                    0d:b4:18:12:dd:c1:de:99:1a:d2:1f:6a:d8:8a:2a:
                    6c:63:9e:ce:fc:db:e9:eb:8d:98:48:b7:81:88:38:
                    15:4e:02:e0:74:af:7f:1f:fb:83:05:2c:34:0d:16:
                    df:78:63:ec:86:ce:1e:43:fc:28:53:53:3b:1a:54:
                    a0:41:50:43:f3:39:14:9a:a9:96:31:94:b0:c6:3a:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3E:1E:F3:64:64:A8:7B:40:82:AA:91:42:8B:8D:8D:86:57:D0:97
            X509v3 Authority Key Identifier:
                keyid:3A:81:CD:2D:56:EA:80:8D:67:DD:15:6F:E3:D9:3A:5D:88:6A:DD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/34352e3138392e302e302f32332d3234203d3e20323639363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:e4:c6:f9:72:bd:9a:45:e2:9c:0e:e6:b5:3f:07:06:4d:4b:
         a5:e4:e0:c6:29:2e:ea:b7:41:04:2d:b0:0d:92:cb:0b:8f:c2:
         52:a3:d6:14:5d:bb:16:c7:b3:25:c6:03:ca:09:22:f8:48:48:
         0b:17:03:a7:d0:b0:20:88:b1:ec:e8:ce:11:fe:33:2b:5e:85:
         af:3a:53:14:bc:21:a9:42:34:ed:77:a8:da:f1:d8:07:42:09:
         9e:65:59:25:d5:cd:ce:9e:aa:a2:cd:45:84:f4:43:0a:1b:a3:
         f4:22:66:19:d9:a5:47:de:bf:e1:cc:7a:64:2a:69:4f:cb:e5:
         62:e8:43:7f:92:b0:4d:d4:40:70:4a:32:4e:fe:d7:2c:7b:f8:
         d6:b0:89:98:1d:cf:02:95:2b:99:86:a2:6f:6a:12:0c:0c:0f:
         7b:03:8c:23:c3:fa:1e:e5:10:c4:50:5f:26:8f:bf:cc:e0:60:
         aa:27:1a:b5:a6:c4:cb:6e:13:dc:9e:d6:81:3b:cf:97:ee:b3:
         d8:d2:8b:14:ac:9d:95:1d:df:d9:9b:49:27:47:65:e9:6a:18:
         87:1b:89:21:ff:1f:b6:5a:b7:76:51:84:50:22:fa:7b:24:23:
         c8:d8:c4:67:88:29:fc:e5:d6:c5:04:d7:10:e5:c5:78:ef:a4:
         b2:80:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:59 2024 by rpki-client on console-fra.rpki-client.org