Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/1/34352e3136332e37362e302f32322d3235203d3e20323638353531.roa
File:                     34352e3136332e37362e302f32322d3235203d3e20323638353531.roa (raw, json)
Hash identifier:          czKEaA/VeAOwjpUBPcN2rZuQ+2bNRNHqp+P5QTcmD+0=
Subject key identifier:   89:1D:52:52:DD:A9:50:2F:8C:E5:1A:4B:42:82:B7:CB:1C:C7:F5:5B
Certificate issuer:       /CN=F6CAD12BAFF830F718329AADF02FF0F3C703641B
Certificate serial:       1D1B1FAB0080D434E1A8E50FA072274026D88815
Authority key identifier: F6:CA:D1:2B:AF:F8:30:F7:18:32:9A:AD:F0:2F:F0:F3:C7:03:64:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6CAD12BAFF830F718329AADF02FF0F3C703641B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/1/34352e3136332e37362e302f32322d3235203d3e20323638353531.roa
Signing time:             Wed 03 Apr 2024 18:30:24 +0000
ROA not before:           Wed 03 Apr 2024 18:25:24 +0000
ROA not after:            Wed 02 Apr 2025 18:30:24 +0000
asID:                     268551
IP address blocks:        45.163.76.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/1/F6CAD12BAFF830F718329AADF02FF0F3C703641B.crl
                          rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/1/F6CAD12BAFF830F718329AADF02FF0F3C703641B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6CAD12BAFF830F718329AADF02FF0F3C703641B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1b:1f:ab:00:80:d4:34:e1:a8:e5:0f:a0:72:27:40:26:d8:88:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6CAD12BAFF830F718329AADF02FF0F3C703641B
        Validity
            Not Before: Apr  3 18:25:24 2024 GMT
            Not After : Apr  2 18:30:24 2025 GMT
        Subject: CN=891D5252DDA9502F8CE51A4B4282B7CB1CC7F55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:e9:f0:cb:26:ca:de:43:71:d6:45:1b:47:
                    32:e2:39:5f:2d:73:90:64:13:86:64:56:da:d9:57:
                    7d:99:92:53:08:e4:1e:01:ce:48:3c:5c:77:0f:08:
                    58:c2:e0:ce:6f:f7:14:0c:57:ae:93:ff:3f:03:55:
                    2d:ab:ac:40:6d:20:55:27:30:26:00:79:e4:e3:7d:
                    17:4f:b0:9d:f3:1d:3b:c1:f1:c0:15:0d:ac:7f:6a:
                    1c:65:26:49:95:11:47:74:1f:da:18:5c:a1:a8:a0:
                    06:bd:8f:1d:19:a6:95:7b:9c:5e:e4:d2:a5:df:08:
                    b0:65:67:d3:1f:3c:76:1f:cf:cd:d5:dc:7c:d5:9b:
                    74:46:ea:b0:57:51:f3:1b:f4:1a:eb:ba:bf:d6:7d:
                    53:9c:f3:6a:1d:06:bf:e7:e0:f3:80:46:41:b6:ab:
                    3f:21:04:17:ab:8c:f2:50:12:fe:28:52:cc:cd:85:
                    5a:eb:be:49:15:a2:1f:91:40:67:be:16:8a:d7:fb:
                    cb:fe:b3:98:97:13:c3:d6:a4:31:1c:46:47:87:c3:
                    8b:92:3b:33:6c:ec:63:24:91:fe:3f:19:dc:9b:9b:
                    16:74:5c:a5:a0:8d:49:8e:04:8d:e1:d2:7b:70:60:
                    7f:13:6e:30:30:c8:a4:85:dc:c7:d5:4b:7e:66:9b:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1D:52:52:DD:A9:50:2F:8C:E5:1A:4B:42:82:B7:CB:1C:C7:F5:5B
            X509v3 Authority Key Identifier:
                keyid:F6:CA:D1:2B:AF:F8:30:F7:18:32:9A:AD:F0:2F:F0:F3:C7:03:64:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/1/F6CAD12BAFF830F718329AADF02FF0F3C703641B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6CAD12BAFF830F718329AADF02FF0F3C703641B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/1/34352e3136332e37362e302f32322d3235203d3e20323638353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:0c:c2:de:13:52:b9:af:37:66:44:26:86:b0:82:ea:d9:71:
         29:5f:f9:23:14:69:97:7a:07:2e:97:ab:b0:30:ec:d7:9c:c8:
         30:0e:e0:85:e6:66:b1:83:2e:3f:3d:dd:78:2e:9f:24:b8:48:
         79:fb:e1:37:b1:2d:2f:c4:1b:14:e3:41:26:84:e8:c8:d9:d2:
         f2:c0:77:1e:3f:cd:f8:40:d4:5a:af:bb:e5:15:60:f4:d5:8c:
         4a:b0:ec:b6:ec:9b:f5:ac:ca:05:07:f2:cb:fa:13:4e:a1:52:
         91:77:86:49:a7:1a:69:2f:1e:f8:c9:36:4b:f5:27:85:c7:b2:
         c0:9a:61:2e:0f:01:a6:78:13:85:5b:a7:41:b8:e1:a4:4f:e5:
         4e:97:60:17:93:4b:15:c1:2f:f0:9c:9f:38:b8:aa:5c:44:20:
         17:0f:14:d0:46:36:68:58:a7:11:37:d4:9f:29:04:54:02:15:
         96:d5:ac:89:bd:1f:f3:1d:6b:8d:cb:85:40:92:51:c3:d2:d4:
         d6:9a:84:ee:af:6d:b5:24:c0:6c:3d:1a:61:ff:74:af:de:e9:
         65:cf:57:52:ea:8b:62:44:cb:4d:b2:84:14:8d:5a:97:ae:a6:
         5e:3c:76:bf:44:36:77:b5:22:2b:f4:4b:a3:07:be:3e:a6:7a:
         20:4f:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:09 2024 by rpki-client on console-ams.rpki-client.org