Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33392e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138312e33392e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          eWA139OirtAZcP5oTRkBMNODw3jR924Io7HzZizpLBY=
Subject key identifier:   7F:94:B0:4F:46:76:A2:A9:82:4B:6C:9B:22:CE:3E:66:15:90:FA:AC
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       175782D2DAD2515AA53B196123E86AB9F138ECD3
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33392e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 04 Apr 2024 14:27:13 +0000
ROA not before:           Thu 04 Apr 2024 14:22:13 +0000
ROA not after:            Thu 03 Apr 2025 14:27:13 +0000
asID:                     269597
IP address blocks:        45.181.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:57:82:d2:da:d2:51:5a:a5:3b:19:61:23:e8:6a:b9:f1:38:ec:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Apr  4 14:22:13 2024 GMT
            Not After : Apr  3 14:27:13 2025 GMT
        Subject: CN=7F94B04F4676A2A9824B6C9B22CE3E661590FAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:30:8c:5d:49:ec:90:d5:75:7d:b9:84:ea:
                    79:ac:43:e8:05:e0:89:36:25:bc:e6:ed:f6:00:09:
                    24:47:00:0d:99:59:d3:ac:82:7f:bd:05:41:3d:26:
                    ca:fe:17:70:05:7a:af:60:ba:63:52:d8:24:33:ef:
                    5f:7c:05:a0:0b:e6:fb:60:03:12:d7:63:ef:83:a2:
                    1c:49:11:70:c7:d3:a3:a0:35:04:1c:f6:e9:ba:81:
                    77:2e:84:55:e1:8a:f1:60:33:c5:df:62:ae:e5:76:
                    0c:d2:87:5a:14:8a:dd:27:73:bf:0a:65:a0:7b:e2:
                    28:ec:52:74:b7:59:50:92:43:79:fa:d4:5e:7c:3d:
                    1f:56:ef:15:34:d6:6a:b1:dd:fa:55:a3:cb:23:5e:
                    e4:be:54:18:82:33:4c:b3:f7:e9:44:81:64:55:b3:
                    b3:e8:e8:87:6e:b1:af:c7:e0:37:9e:b2:b8:17:cc:
                    52:43:41:ca:73:79:e5:db:fe:1d:0a:f4:8e:89:8f:
                    34:69:0e:c6:67:37:92:0d:0c:e7:26:81:b3:aa:9c:
                    14:87:1e:75:8b:dd:fd:6f:3f:34:c0:e7:ac:92:a8:
                    48:e7:05:28:18:49:63:b6:6c:2c:52:8a:07:6b:ce:
                    66:71:fb:62:58:c9:3d:de:55:3f:05:62:e6:5b:a2:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:94:B0:4F:46:76:A2:A9:82:4B:6C:9B:22:CE:3E:66:15:90:FA:AC
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33392e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c1:c8:f6:7f:6b:4f:95:00:8d:90:30:2c:c5:9b:89:48:68:
         4e:bc:24:8e:56:5b:c4:3d:c7:34:12:f7:39:20:54:9e:64:e3:
         21:4b:52:17:8c:44:ae:e4:e9:df:94:82:ff:e9:00:8c:d6:cb:
         74:d9:7f:fd:27:b1:fd:9b:b3:2a:bb:96:4a:79:b3:2f:ec:a2:
         4c:ba:d6:a0:b4:fa:52:5b:98:12:32:86:eb:07:ff:cf:fb:33:
         d2:45:7a:75:a7:31:94:84:7d:d3:36:e8:27:bd:bd:7e:61:70:
         f1:7d:26:f6:83:61:74:e8:db:de:f8:03:32:05:1c:89:45:e3:
         b6:b8:1e:6f:76:db:42:e9:65:69:0b:a1:ff:63:33:c7:a6:02:
         d0:7c:06:76:12:07:de:d8:be:1c:de:4a:fe:65:7f:f1:ff:5f:
         0d:c3:57:df:c0:80:f2:ae:e8:e1:86:74:d0:03:d4:02:cb:6a:
         b3:de:78:11:28:26:56:07:ed:e2:8a:f3:8d:90:fe:bf:0e:10:
         61:5d:58:1b:f9:9d:64:81:54:1e:7e:83:01:ec:96:38:c2:07:
         f8:d9:98:3c:81:95:cd:56:9a:9f:ae:92:d1:ce:fa:12:7b:b1:
         3c:8c:64:00:4f:06:c1:58:30:5f:d6:56:3e:d3:29:2a:d0:b9:
         50:45:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:09 2024 by rpki-client on console-ams.rpki-client.org