Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235352e302f32342d3234203d3e20323638323532.roa
File:                     34352e3233362e3235352e302f32342d3234203d3e20323638323532.roa (raw, json)
Hash identifier:          N6b1uTH086YHK13JpsvGORDPfJ3ABz8ExMA/4APK9TM=
Subject key identifier:   28:86:ED:4F:DA:C4:11:0C:55:A8:6B:A2:78:05:4D:69:7E:2C:6C:F2
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       3C9AC6ED7230745F75B682EB4CC5A4E424448DE0
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235352e302f32342d3234203d3e20323638323532.roa
Signing time:             Mon 01 Jul 2024 17:21:01 +0000
ROA not before:           Mon 01 Jul 2024 17:16:01 +0000
ROA not after:            Mon 30 Jun 2025 17:21:01 +0000
asID:                     268252
IP address blocks:        45.236.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9a:c6:ed:72:30:74:5f:75:b6:82:eb:4c:c5:a4:e4:24:44:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: Jul  1 17:16:01 2024 GMT
            Not After : Jun 30 17:21:01 2025 GMT
        Subject: CN=2886ED4FDAC4110C55A86BA278054D697E2C6CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:a2:33:a3:b0:5b:a9:62:53:0f:03:a5:87:
                    38:fa:6e:08:3a:33:28:b1:65:bc:97:c6:d1:62:87:
                    16:84:3e:59:b7:0b:06:2a:8c:08:5b:33:f3:12:ac:
                    e9:18:4e:16:8e:b8:3e:20:fb:49:b1:8a:e6:c7:3e:
                    a3:ac:53:fd:34:b1:fb:ce:85:c3:39:ca:21:c1:c1:
                    9f:71:b2:44:5f:33:02:b4:ae:61:40:6b:4c:f6:52:
                    db:1e:db:a9:e2:28:96:44:ed:2f:d9:26:e3:33:fb:
                    0e:3d:80:ef:63:5e:05:26:cb:63:a8:c9:c8:9f:56:
                    22:24:7b:f9:d5:29:6b:0b:17:52:a6:43:f1:bf:d6:
                    92:1d:09:93:3f:7f:46:fd:8d:01:ca:99:7d:24:67:
                    89:42:80:81:06:8a:05:3a:f3:6b:42:86:6f:8f:07:
                    42:56:6a:d1:64:68:d0:3a:41:5f:52:26:c5:5c:af:
                    82:3a:41:21:dd:99:72:7e:67:f3:bd:ce:a1:97:9e:
                    f3:6b:8f:a2:a1:80:11:d0:0b:a0:1d:fd:b7:7c:6a:
                    f6:78:61:b7:39:1c:e5:cd:66:7e:1c:0f:86:23:2e:
                    99:b4:f5:a0:80:d8:03:35:58:60:dc:ea:11:12:5e:
                    7d:94:ee:12:90:30:ea:92:aa:40:82:1a:b5:49:bd:
                    f1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:86:ED:4F:DA:C4:11:0C:55:A8:6B:A2:78:05:4D:69:7E:2C:6C:F2
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235352e302f32342d3234203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:35:9a:1c:b7:88:99:4f:ef:5e:17:26:96:ad:ef:a2:ad:
         53:35:b5:bf:7e:62:2d:a3:a0:f7:db:8a:44:c9:10:29:49:27:
         17:bc:fd:eb:bf:05:c4:9e:4d:89:ed:ca:ca:34:66:3a:6a:50:
         45:83:18:7c:b6:d3:94:fa:b7:33:72:67:4b:ef:19:a7:1e:3b:
         4e:6d:12:2e:10:c1:45:f1:23:9b:6d:c2:b8:29:52:7f:b9:4f:
         ce:03:9f:10:00:bf:4b:be:09:e5:2b:04:e7:e8:c2:51:08:de:
         f3:31:03:1c:d7:6b:04:49:f5:1f:3b:87:f4:51:d7:8e:4a:b4:
         ce:0f:bb:5d:45:56:6c:79:27:36:c9:db:ea:c4:db:ce:cf:4e:
         27:71:58:f5:f0:dc:3e:e4:30:21:27:24:f6:ab:1e:31:30:ca:
         e3:02:11:a5:80:f7:4d:ae:7d:72:84:7c:88:70:d3:18:e4:41:
         90:46:4d:ff:87:d6:15:2c:ee:3b:c4:e0:ce:1c:54:b9:c4:0d:
         77:56:c5:db:80:5a:fe:26:f1:d3:aa:5d:67:50:fe:cb:8a:3c:
         22:bd:d3:ef:e1:a6:ee:7d:39:79:f9:20:0a:91:44:62:6f:ca:
         44:7d:24:23:a4:e6:2a:bd:f6:ac:1d:02:f1:c9:77:89:11:fe:
         d5:7b:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:58 2024 by rpki-client on console-fra.rpki-client.org