Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          NZx1MigcDMzB9Gb/U7oXqmLcAsmzAFY/GTI+b26JytI=
Subject key identifier:   E8:DF:5C:EF:C6:3A:A4:D6:A6:C4:EF:CA:FE:E4:5A:AF:F6:86:9A:75
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       3A2163E0AA93DCC6A0BC23B6FE2526EDD59D2B5E
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 04 Apr 2024 14:27:12 +0000
ROA not before:           Thu 04 Apr 2024 14:22:12 +0000
ROA not after:            Thu 03 Apr 2025 14:27:12 +0000
asID:                     269597
IP address blocks:        45.189.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:21:63:e0:aa:93:dc:c6:a0:bc:23:b6:fe:25:26:ed:d5:9d:2b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Apr  4 14:22:12 2024 GMT
            Not After : Apr  3 14:27:12 2025 GMT
        Subject: CN=E8DF5CEFC63AA4D6A6C4EFCAFEE45AAFF6869A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:75:dd:03:d9:8f:35:d5:3b:af:d4:32:4f:
                    13:ec:6e:90:a6:00:1f:eb:53:17:2a:e0:98:40:7b:
                    88:79:fb:e2:e0:79:c4:a5:2d:fb:2a:1d:52:64:6a:
                    0a:be:c8:cd:e0:56:e2:de:a4:c4:54:0a:71:1f:01:
                    46:0c:da:9c:22:d3:06:c5:b1:0b:05:65:00:3e:80:
                    7b:7e:a3:00:03:61:10:ac:61:72:67:a5:6d:a0:9f:
                    6c:de:a0:a2:45:8a:dd:7b:b7:c3:21:30:12:a4:cc:
                    07:ea:4b:8a:c0:39:47:02:65:8b:bd:cf:63:eb:5d:
                    9c:d8:82:f8:8c:9c:70:d7:35:6a:58:6f:78:0b:b8:
                    1e:05:5b:d6:af:d8:cd:02:4e:8d:34:70:1f:2b:da:
                    7c:5f:e3:a9:26:19:4a:f6:b8:78:23:5a:46:74:64:
                    7c:99:6e:47:63:43:aa:b7:1f:9e:2d:bd:2f:11:b3:
                    f9:3c:a9:59:1f:af:19:54:0e:22:56:40:a9:8d:cb:
                    b8:e9:33:ed:1f:24:0e:ad:4c:f4:60:ec:a3:cb:bd:
                    36:c6:ec:ed:d6:f1:8b:e9:b0:f2:a6:ed:c5:05:6f:
                    94:ba:06:ed:14:db:a3:68:b7:3c:94:1e:42:a3:7b:
                    00:07:70:d9:9d:74:f7:d2:d3:5e:e0:9e:f2:a0:1c:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DF:5C:EF:C6:3A:A4:D6:A6:C4:EF:CA:FE:E4:5A:AF:F6:86:9A:75
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:6a:1c:3a:8a:e5:ec:23:ff:0e:25:18:a5:19:0a:e8:12:9e:
         bc:da:b3:75:f2:8e:23:c6:de:60:27:d4:07:0d:c0:e7:49:0e:
         99:1f:0e:fc:16:cd:91:a6:79:78:10:30:8a:e5:aa:57:df:18:
         7b:23:46:15:cb:6b:30:65:57:f9:87:67:20:b6:b0:9f:21:79:
         a1:2d:a5:ab:97:18:d2:e3:8b:d5:08:b9:34:a1:b4:1b:19:4e:
         b9:60:6b:e3:18:82:69:84:d7:b6:7b:e3:2d:a0:43:cb:6f:43:
         06:fd:58:b1:25:bd:9a:94:ec:b5:fd:3a:64:82:f9:ec:1e:1e:
         0a:19:f5:01:69:4b:65:a8:72:3d:3f:4f:51:53:d2:a7:47:e3:
         f2:30:4e:b6:1f:29:ec:bd:ee:87:29:24:7c:8d:80:74:85:7a:
         17:fd:44:ef:ff:cd:6b:c9:2c:69:08:7c:58:ca:7c:e2:24:c8:
         db:4a:59:41:bd:f5:1b:23:be:fa:c3:bc:7c:76:7b:db:1e:33:
         31:b1:35:59:71:08:67:65:83:41:1f:63:d5:2d:a6:fc:e1:59:
         e2:50:20:aa:fc:6a:86:79:3f:dc:29:48:f0:77:87:1d:68:27:
         27:1c:58:3a:21:e1:08:4a:2a:40:d5:0b:72:e1:12:8f:5e:c7:
         0b:cf:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:09 2024 by rpki-client on console-ams.rpki-client.org