Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa
File:                     34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa (raw, json)
Hash identifier:          SlFDL3wgWhllpCmETc/kpapNoji5GjWnbXejzaXZQgg=
Subject key identifier:   82:60:28:A8:B8:05:46:06:E9:79:E5:A5:12:CB:34:11:85:12:FD:9F
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       139D58BF3A98F06F07EADA241E5777C70AD0FACA
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa
Signing time:             Mon 01 Jul 2024 17:21:41 +0000
ROA not before:           Mon 01 Jul 2024 17:16:41 +0000
ROA not after:            Mon 30 Jun 2025 17:21:41 +0000
asID:                     268252
IP address blocks:        45.236.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9d:58:bf:3a:98:f0:6f:07:ea:da:24:1e:57:77:c7:0a:d0:fa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: Jul  1 17:16:41 2024 GMT
            Not After : Jun 30 17:21:41 2025 GMT
        Subject: CN=826028A8B8054606E979E5A512CB34118512FD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:d7:dd:d1:47:e8:76:3e:35:70:b5:e8:e7:
                    89:1b:60:a1:4e:05:6d:c2:ed:dc:0a:5d:e0:71:6a:
                    a5:e8:3b:56:41:37:42:32:9c:55:fc:f2:ab:e9:24:
                    f6:48:57:89:30:9d:96:cb:d3:7d:ec:97:d6:bd:a7:
                    ad:70:47:09:1f:26:57:60:80:99:76:a8:ed:c7:4e:
                    ef:dc:91:30:22:8f:97:82:37:35:82:44:8f:41:9d:
                    fa:c7:10:15:3e:df:bc:67:4c:10:a2:cf:f1:e9:83:
                    48:03:64:09:dc:f5:14:c1:1d:b8:09:ee:94:b5:c6:
                    46:ac:fc:4c:2a:5e:c0:e2:b5:fd:0a:53:00:de:58:
                    c4:6f:ac:74:69:f6:d8:e3:92:5f:56:01:10:07:52:
                    94:96:cc:25:e1:fd:8f:0e:b1:18:0f:64:f6:6b:49:
                    76:32:43:39:9d:31:03:75:bc:93:c2:6f:fe:1d:59:
                    72:3f:b6:23:2f:25:bf:0d:7c:7e:f8:72:5c:c3:2c:
                    e7:78:f3:05:21:b8:be:c2:80:0e:44:a6:92:7c:34:
                    c0:af:f4:6f:22:8a:ee:05:a5:19:75:97:0b:77:1e:
                    70:21:7f:22:e9:4c:e4:2c:9a:1b:84:32:2f:20:cb:
                    84:33:c0:82:4b:de:b0:36:88:e6:f3:d3:81:4d:db:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:60:28:A8:B8:05:46:06:E9:79:E5:A5:12:CB:34:11:85:12:FD:9F
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:b8:c8:b3:4e:b8:98:20:28:f4:36:24:9e:ce:c2:a3:c2:
         73:05:71:ef:12:34:78:80:c0:28:1b:a7:9c:24:af:97:24:54:
         eb:28:a7:96:cb:1c:af:ab:a2:fb:62:53:da:64:b1:0c:e9:45:
         e3:91:b0:0f:60:43:b1:53:7a:0b:0d:5e:e3:ea:dc:84:19:9c:
         39:07:1d:7b:b1:88:16:14:c2:91:63:ac:d5:9f:04:f8:2c:e2:
         20:48:a0:93:df:85:25:85:f0:eb:d0:74:8d:7d:98:ea:b9:ee:
         78:6d:2e:cf:6c:07:7a:00:d2:07:5a:d5:3a:65:e4:c9:82:c2:
         c7:d0:e4:74:94:14:c4:05:ab:14:2d:8f:9d:a6:ee:11:2b:7e:
         a6:7c:91:0a:90:25:20:1f:95:3f:97:0f:f3:cc:ca:dd:a1:6d:
         53:ea:f3:cb:dd:db:33:e3:08:bb:97:86:ff:e9:ed:65:bf:1d:
         d0:20:dc:62:4f:6b:e6:93:95:f5:2c:f9:f2:85:bb:62:c4:33:
         25:54:8d:15:a6:4e:3a:4b:d5:79:e9:b0:19:e2:c1:c0:c8:e3:
         41:e9:bb:d1:2a:25:c4:a2:7f:a5:33:d8:48:7f:02:38:d0:d3:
         bc:77:aa:86:03:14:08:47:b5:e7:69:1f:c3:94:9a:6d:77:53:
         d8:f4:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org