Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e34382e302f32342d3234203d3e20323637393935.roa
File:                     34352e3136372e34382e302f32342d3234203d3e20323637393935.roa (raw, json)
Hash identifier:          M4HeJw3etmpiUNYpl50nuv1lzXt6Baab2YbCjKvXgW8=
Subject key identifier:   C8:66:21:9F:97:2D:05:07:81:52:41:26:0B:0F:77:3B:D4:E2:FF:8A
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       1C286C03DCED1022913C392721F3F3B60DA85AA4
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e34382e302f32342d3234203d3e20323637393935.roa
Signing time:             Thu 04 Apr 2024 20:39:05 +0000
ROA not before:           Thu 04 Apr 2024 20:34:05 +0000
ROA not after:            Thu 03 Apr 2025 20:39:05 +0000
asID:                     267995
IP address blocks:        45.167.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:28:6c:03:dc:ed:10:22:91:3c:39:27:21:f3:f3:b6:0d:a8:5a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: Apr  4 20:34:05 2024 GMT
            Not After : Apr  3 20:39:05 2025 GMT
        Subject: CN=C866219F972D0507815241260B0F773BD4E2FF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:88:e4:15:07:64:ab:a1:1d:fb:18:f4:49:
                    6e:a4:76:8e:0f:f5:9c:56:f8:50:69:da:7c:08:5d:
                    11:d7:21:20:02:a7:35:71:3e:36:90:c2:7c:64:42:
                    c4:ec:a7:24:04:23:c2:6c:13:be:ef:96:28:6b:01:
                    d4:46:74:21:21:ee:45:e8:4d:1d:e0:15:19:cf:0a:
                    98:4d:15:57:1b:00:bd:27:27:8e:09:c8:25:25:ad:
                    3b:f9:dd:fa:fd:8e:e5:3b:fe:a4:66:12:c4:f2:d5:
                    ca:70:33:7b:25:c7:db:29:2d:f7:93:56:23:c6:d1:
                    13:cd:32:5e:31:a3:98:d7:a2:8d:96:0f:89:77:92:
                    b1:f4:99:b3:d4:ce:f7:4c:79:f9:78:fd:ac:e9:28:
                    e4:f9:12:1f:96:12:47:42:63:a8:f3:6f:84:b7:1f:
                    79:2b:b3:02:1e:58:14:e1:47:7c:fa:c6:cd:5d:d1:
                    e0:f0:14:28:fb:4c:f6:67:a1:a3:4f:df:3c:c7:bb:
                    85:dc:87:85:64:35:1a:a2:7b:46:a5:71:ac:40:76:
                    8f:fc:57:21:3e:95:e9:78:43:d6:06:cc:b0:90:c2:
                    4a:4f:09:13:bf:79:ce:a8:e7:fc:72:e1:0c:7d:fc:
                    ef:ef:06:4d:54:6c:67:71:3e:c3:62:69:70:70:20:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:66:21:9F:97:2D:05:07:81:52:41:26:0B:0F:77:3B:D4:E2:FF:8A
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e34382e302f32342d3234203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:63:ab:bd:68:24:8b:74:d6:d1:66:90:79:9d:6e:af:35:
         fd:73:f1:1b:77:ba:04:81:d0:f9:de:fa:ef:01:d7:64:0e:5c:
         f0:03:28:bc:a6:7a:cd:74:1d:bb:db:21:80:bc:11:aa:c7:bd:
         2c:d3:22:f1:3b:78:70:b6:92:41:9b:13:50:36:43:18:84:ee:
         4b:8d:e1:6e:a3:cf:40:aa:44:54:b3:59:5f:27:04:87:06:ce:
         fa:c3:f0:6e:a7:8b:76:c9:1c:42:c4:22:33:bf:5b:5a:94:7e:
         cd:5d:6e:54:7b:5f:7f:68:ed:f4:da:04:35:cb:41:27:b2:bf:
         78:d8:77:4e:39:28:87:39:fc:19:3e:91:68:25:0e:d7:24:01:
         9d:20:9e:ea:ac:50:a5:14:dd:94:7d:b5:07:b1:ab:60:60:f8:
         e8:22:25:e8:48:b8:f6:e0:62:9d:b5:0b:47:eb:2f:99:0d:62:
         7a:f3:9d:d8:09:61:2c:0a:9c:bd:4a:10:86:64:2e:15:9c:af:
         4e:5e:cb:7a:5e:ac:9e:5e:9c:b3:1f:5e:2c:a6:c1:e9:5b:54:
         0f:fc:67:f4:df:ce:b7:ef:45:e5:4c:fe:a3:69:2e:07:4d:01:
         93:0d:0c:61:9e:9e:f5:ae:10:1f:c1:7c:23:71:2e:d0:28:dd:
         af:c6:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org