Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33382e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138312e33382e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          Sgo+7dnc+/uT56GWEzUNXWzJ9i5m3EotsBXe8BnmgLg=
Subject key identifier:   0B:F2:B1:3C:E6:B1:58:45:C2:77:66:F9:8C:D6:61:8D:71:74:A4:39
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       7F7620EA5D1D69D1DA895C54F60FEDB5E622212E
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33382e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 04 Apr 2024 14:27:12 +0000
ROA not before:           Thu 04 Apr 2024 14:22:12 +0000
ROA not after:            Thu 03 Apr 2025 14:27:12 +0000
asID:                     269597
IP address blocks:        45.181.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:76:20:ea:5d:1d:69:d1:da:89:5c:54:f6:0f:ed:b5:e6:22:21:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Apr  4 14:22:12 2024 GMT
            Not After : Apr  3 14:27:12 2025 GMT
        Subject: CN=0BF2B13CE6B15845C27766F98CD6618D7174A439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:f7:6a:39:4d:73:f1:1a:00:e3:71:f8:13:
                    fb:a4:11:01:59:d5:14:4a:43:a9:78:90:eb:44:1d:
                    98:b4:3c:74:56:34:1f:a1:b1:6c:40:7e:64:8d:6a:
                    07:a7:61:3b:ec:6e:44:ee:0f:59:b0:a0:f7:5d:ad:
                    7d:ec:6d:60:c2:12:7d:ad:5f:83:32:ad:63:6a:28:
                    e5:42:67:27:13:7e:a1:48:03:d3:d3:46:f8:56:ff:
                    67:e6:84:55:6e:e7:44:bc:e5:82:db:d9:0d:b3:9f:
                    b5:1c:d7:52:84:60:f1:a9:e9:fd:3b:f2:73:db:50:
                    40:94:32:cb:7e:e9:9a:f5:ca:a0:c3:da:ae:cb:07:
                    05:53:9d:79:88:66:9c:ae:0e:d4:64:f1:9d:8c:c4:
                    fb:36:b7:a0:0d:64:f0:64:dd:45:f6:d6:bb:91:7d:
                    9a:f8:e5:d9:01:54:b8:ff:c6:f8:99:3e:87:35:d3:
                    2e:10:7d:9d:c0:57:e0:be:38:16:ef:33:4d:94:92:
                    8b:71:29:a0:ee:93:20:bd:08:e0:0f:43:e1:a3:06:
                    92:d9:60:d5:8d:ec:f2:bb:79:45:d6:db:83:0d:30:
                    fd:2e:9f:04:16:8b:ad:0b:24:8e:6a:a4:63:9c:1a:
                    28:57:5e:03:8f:57:4a:27:c5:e1:75:1a:80:36:6a:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F2:B1:3C:E6:B1:58:45:C2:77:66:F9:8C:D6:61:8D:71:74:A4:39
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33382e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:ac:71:45:f7:05:d4:ce:4d:46:aa:cd:a6:4d:59:be:b5:
         76:28:74:7c:87:c9:51:b0:2b:1f:e0:48:68:28:bb:9a:c3:27:
         9a:52:99:d8:1c:65:42:17:14:59:90:46:4a:c9:00:87:42:0c:
         83:c0:28:6e:2a:b1:a0:3b:90:ff:a2:61:89:1e:b7:5f:e5:17:
         7d:5d:5d:2f:b3:73:85:36:9d:59:ea:ae:d2:90:44:10:2f:8f:
         06:d4:45:ec:a4:03:7a:5d:cd:ac:24:34:4e:4b:78:8b:27:f9:
         bf:be:06:c2:ca:21:31:59:8e:4c:55:d4:d2:b0:b0:4b:5c:4e:
         f5:3e:14:49:38:61:29:e4:54:b7:44:70:48:8c:01:44:a8:32:
         d7:e4:f1:8a:53:66:47:fa:1a:c0:3f:c2:d3:9e:21:36:b0:4c:
         98:7a:91:4e:08:58:03:eb:ae:08:8e:bb:a5:5e:61:a0:65:a4:
         0e:15:84:23:07:ea:f8:85:2d:6d:c6:90:39:e0:2e:b0:2b:a2:
         7b:1b:e9:bd:17:79:b1:83:52:f8:cc:3e:ec:1c:1b:f4:fb:81:
         11:f7:5e:b0:a3:58:59:47:1f:5b:4e:23:17:5b:6a:8b:1c:0c:
         ba:37:b0:d6:69:c4:30:6a:58:68:6f:6e:bc:7d:bb:e3:ab:1d:
         b5:5f:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org