Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32322d3234203d3e20323638353731.roa
File:                     34352e3136332e3136302e302f32322d3234203d3e20323638353731.roa (raw, json)
Hash identifier:          Wb4fW0WB3QSQF+QKnoSgyV3ymXGLG/xYSbzslNQk7b4=
Subject key identifier:   1B:AC:FC:FE:2D:06:60:24:51:59:61:30:CD:36:8E:3C:9E:B1:42:51
Certificate issuer:       /CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
Certificate serial:       408E928F35183579CF6403BAE7BD946303E6E461
Authority key identifier: ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32322d3234203d3e20323638353731.roa
Signing time:             Mon 05 Aug 2024 13:18:24 +0000
ROA not before:           Mon 05 Aug 2024 13:13:24 +0000
ROA not after:            Mon 04 Aug 2025 13:18:24 +0000
asID:                     268571
IP address blocks:        45.163.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl
                          rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8e:92:8f:35:18:35:79:cf:64:03:ba:e7:bd:94:63:03:e6:e4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
        Validity
            Not Before: Aug  5 13:13:24 2024 GMT
            Not After : Aug  4 13:18:24 2025 GMT
        Subject: CN=1BACFCFE2D06602451596130CD368E3C9EB14251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:4d:c0:4d:77:6d:6e:40:b0:fc:2e:5b:cf:
                    dc:98:00:0a:74:46:3a:24:76:3e:ae:db:f9:2f:5f:
                    1e:ad:16:12:a7:94:03:89:b7:51:15:7f:f0:44:c3:
                    9c:01:d0:c3:fc:f2:b7:3b:3d:28:d9:e3:5e:b8:62:
                    f4:0e:7b:ee:26:90:c4:51:ce:9e:e4:f4:a5:e9:62:
                    fe:fe:94:08:60:98:eb:49:82:4a:f3:a5:28:70:98:
                    38:ba:7a:73:f3:1d:4d:4a:36:f9:92:8b:58:e7:2c:
                    32:fe:84:aa:97:2f:a3:4f:42:e3:12:c7:3a:b0:2c:
                    81:3c:23:19:e4:bf:ef:01:fe:2f:1e:c8:63:c4:7c:
                    23:0d:a3:b9:1d:dd:ca:d7:5a:d0:2d:48:ce:15:e7:
                    7b:2c:6e:c4:7c:75:91:a5:a2:e4:7e:d7:fb:44:b2:
                    e8:f4:ef:b4:fb:01:ca:6c:15:11:4c:0c:02:1b:59:
                    5e:ff:24:bd:82:8e:ea:a8:74:30:35:b2:d0:89:5a:
                    ad:94:51:72:b9:d7:52:53:b8:00:65:cd:3e:da:76:
                    36:2b:9f:6f:f8:9e:6f:75:85:29:32:60:8c:1b:ea:
                    42:43:04:4b:f0:76:ee:56:b2:54:4d:84:a4:dd:06:
                    31:32:b4:62:da:64:5b:02:ee:52:ca:ea:23:25:32:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AC:FC:FE:2D:06:60:24:51:59:61:30:CD:36:8E:3C:9E:B1:42:51
            X509v3 Authority Key Identifier:
                keyid:ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32322d3234203d3e20323638353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:92:03:21:d6:bd:df:88:7a:72:94:ba:59:47:7b:fa:18:7f:
         d4:2d:6d:92:b4:32:5c:b5:5d:ed:42:91:dc:b9:ef:43:a3:a7:
         b3:92:cc:c2:46:66:71:72:0c:32:83:23:75:84:b5:45:db:e3:
         57:49:65:ab:0c:c2:57:8d:5c:86:98:e7:25:4d:06:19:65:8d:
         02:21:1b:42:65:e6:d4:a6:8d:c6:1f:20:7e:dc:df:01:58:68:
         8a:5c:c3:98:ab:29:7d:59:ca:10:49:6b:81:19:52:20:de:10:
         ff:71:36:0b:aa:6a:f4:f2:37:ac:91:59:b8:88:0a:6e:2f:ab:
         3a:21:38:66:08:f7:ab:9e:45:a8:7a:7a:63:21:76:0e:e2:dd:
         16:6b:9c:56:fe:88:40:e6:ad:97:5b:21:fd:5c:de:86:3d:1f:
         54:a0:ed:4e:87:34:52:a2:5a:d7:3f:50:f1:8c:fd:d3:93:3c:
         0c:7a:34:2c:44:67:a3:82:73:7f:44:8b:37:5d:d0:b9:8b:bb:
         18:35:72:42:5b:9c:14:6b:87:81:da:28:f2:92:09:95:13:fc:
         33:cd:b9:44:6a:f0:15:76:a0:07:2b:4a:a1:4e:9d:0b:ae:40:
         25:bd:63:e7:f2:de:c1:db:a6:eb:76:2e:7e:21:71:c5:20:d5:
         29:49:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:47 2024 by rpki-client on console-fra.rpki-client.org