Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e35302e302f32342d3234203d3e20323637393935.roa
File:                     34352e3136372e35302e302f32342d3234203d3e20323637393935.roa (raw, json)
Hash identifier:          4B46+yY1dK/CRUVy03mavZk5wS81Pt4CchEe5AJrIhA=
Subject key identifier:   45:8E:E1:1D:80:5F:E3:61:BF:CD:D2:EE:6B:A9:4E:3E:CD:EE:76:36
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       762B671DB5160D38A70254D3AD0CFF3F7EF85514
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e35302e302f32342d3234203d3e20323637393935.roa
Signing time:             Thu 04 Apr 2024 20:39:05 +0000
ROA not before:           Thu 04 Apr 2024 20:34:05 +0000
ROA not after:            Thu 03 Apr 2025 20:39:05 +0000
asID:                     267995
IP address blocks:        45.167.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 14:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2b:67:1d:b5:16:0d:38:a7:02:54:d3:ad:0c:ff:3f:7e:f8:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: Apr  4 20:34:05 2024 GMT
            Not After : Apr  3 20:39:05 2025 GMT
        Subject: CN=458EE11D805FE361BFCDD2EE6BA94E3ECDEE7636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:a6:14:7e:0a:49:a5:2a:c6:2a:ba:e5:de:
                    dc:38:2b:65:86:87:1b:f2:4e:55:ee:4b:a5:e0:dd:
                    7c:9a:e7:bc:fa:99:a1:12:6d:fe:64:b7:04:cf:8a:
                    4e:78:6d:54:bf:a4:49:62:fe:18:1a:c4:3f:bf:ef:
                    d3:9c:89:78:1e:f3:78:87:6b:3d:25:c8:05:85:02:
                    d1:b5:54:32:8d:11:3a:cc:e4:e1:90:70:25:dc:64:
                    66:f8:0e:56:04:d5:e7:e6:62:0f:68:7f:94:70:fa:
                    71:aa:29:16:07:d5:b5:d8:71:4b:fa:8a:05:f3:19:
                    2d:f8:ee:40:72:22:34:f8:6c:a7:79:79:1a:98:c9:
                    0b:ac:3c:57:5f:62:1e:6a:76:f4:06:27:61:41:2b:
                    c9:e5:35:b2:5f:35:31:cb:06:59:22:5a:d3:78:99:
                    42:a3:d9:dd:45:5a:bc:23:80:f8:08:7a:b9:03:d3:
                    a3:ff:6d:2b:f1:5b:19:75:9f:62:33:17:93:3b:f2:
                    1f:53:f2:e2:4c:d4:c4:dc:96:76:32:40:70:b7:4b:
                    2e:9c:8f:91:e7:f9:72:36:96:70:bf:8d:fe:1b:ba:
                    d4:0c:1f:99:20:94:7c:c7:46:b2:9e:c1:5b:b8:0a:
                    2e:60:1d:bd:a8:17:49:76:e2:5f:0b:ec:7a:4e:0d:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8E:E1:1D:80:5F:E3:61:BF:CD:D2:EE:6B:A9:4E:3E:CD:EE:76:36
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e35302e302f32342d3234203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ab:f7:d5:6c:4e:de:40:af:d0:8f:f8:74:3f:8d:c4:2d:62:
         f2:f2:10:50:37:26:93:50:7b:8e:01:16:11:ba:5d:95:d8:80:
         8f:09:3f:5a:c0:23:5a:09:0c:24:50:57:9a:31:37:02:a7:18:
         33:0d:05:bb:3e:cc:b9:f2:2d:10:a9:00:2b:3b:4f:51:1f:d3:
         39:45:76:1b:bf:8b:91:d6:74:1a:63:ae:00:7e:fb:be:a2:63:
         75:06:14:bf:ac:d2:df:19:b3:b9:24:7a:fb:cf:7b:3d:1e:a4:
         b6:f2:64:d6:91:58:72:2b:cc:05:0d:14:5e:43:66:81:a2:50:
         3a:6e:ac:6b:e7:2c:46:d2:3a:f1:03:c4:20:ee:78:f7:5f:c0:
         f9:a1:9c:61:d4:73:39:68:ed:83:ea:a6:73:0c:bc:cf:4a:7b:
         c7:26:23:09:bb:54:2b:78:a1:ef:2e:6b:0a:f4:0b:9e:6b:a8:
         86:26:40:f9:43:32:e5:bb:c2:76:5e:76:4f:cd:47:81:6d:df:
         79:f7:1e:de:e0:32:ac:e5:41:77:4d:07:e6:da:00:73:e9:f0:
         e8:7a:ae:52:5a:73:8b:f1:6e:0d:4c:38:6c:69:6f:f8:2f:ab:
         72:45:2f:38:c8:7e:f4:d4:10:f4:a6:d3:e3:83:b3:83:89:8d:
         bc:c6:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 15:46:32 2024 by rpki-client on console-ams.rpki-client.org