Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa
File:                     34352e37312e3230382e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          5soneOQwlfw78IAXit5I+OSr5wrgD95AyhPG7SJGK6Q=
Subject key identifier:   6F:A7:9D:96:EA:48:C1:45:9D:6C:BC:14:85:A2:29:C4:16:97:94:8C
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       7D51421E0F3E45465B232BC4F19086EDD8CFA0F2
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 04 Apr 2024 14:27:12 +0000
ROA not before:           Thu 04 Apr 2024 14:22:12 +0000
ROA not after:            Thu 03 Apr 2025 14:27:12 +0000
asID:                     269597
IP address blocks:        45.71.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:51:42:1e:0f:3e:45:46:5b:23:2b:c4:f1:90:86:ed:d8:cf:a0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Apr  4 14:22:12 2024 GMT
            Not After : Apr  3 14:27:12 2025 GMT
        Subject: CN=6FA79D96EA48C1459D6CBC1485A229C41697948C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:ef:ce:33:5e:83:64:99:10:2a:fe:44:3e:
                    e6:42:64:91:95:76:e2:c8:54:07:20:c9:bd:e2:55:
                    df:89:09:ec:64:d3:ba:6f:53:61:db:bf:a1:e8:f5:
                    3e:d7:28:01:ad:8e:f2:f3:cb:b7:3a:d8:d5:dd:e9:
                    00:be:39:9c:4c:d1:f8:c7:06:d1:6a:95:e3:aa:2c:
                    66:65:ea:e4:68:64:49:74:6d:b7:d9:e9:0c:ae:19:
                    eb:0e:4c:b8:89:f8:4a:04:66:da:d3:83:33:ab:e9:
                    13:80:f4:ed:f3:39:3c:bf:50:6c:fa:dd:fb:c1:12:
                    5c:9c:f1:bd:af:af:72:0a:02:d6:ee:b6:07:a5:ed:
                    c2:f6:db:22:75:d6:2f:36:43:bc:38:f8:5f:e0:ed:
                    07:86:18:79:f0:ee:81:49:8b:81:5b:ee:0b:9c:81:
                    e2:74:a4:37:f7:0f:1c:ae:c2:c4:49:6b:e5:5d:14:
                    46:b9:1f:76:a5:c0:25:19:1c:85:3e:89:b7:1d:5f:
                    8c:91:8a:bf:f3:22:ca:28:5c:ae:96:29:ec:20:34:
                    50:3a:f6:4b:8c:33:d3:81:8d:ac:f6:91:42:ac:8c:
                    ce:8e:70:3c:71:f9:e8:2b:fc:b0:2f:6e:4c:65:e1:
                    3b:c8:9b:29:e7:a7:86:19:15:95:79:0f:8e:d9:5f:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A7:9D:96:EA:48:C1:45:9D:6C:BC:14:85:A2:29:C4:16:97:94:8C
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f6:8f:36:53:02:25:f8:61:92:3c:44:9d:0d:62:98:e0:8b:77:
         68:ea:d7:65:b0:83:56:39:a0:63:2b:95:dc:4e:bf:0f:5b:3a:
         ce:af:e6:7b:2a:40:db:53:3e:c7:84:aa:c5:a4:c6:aa:45:13:
         5b:24:d1:54:95:e5:29:37:59:76:c8:19:9e:0f:27:9c:03:68:
         f0:c1:c3:43:b8:f0:25:56:6d:9c:c7:61:cb:ec:90:2c:b7:c5:
         be:2a:b3:bd:7a:1a:a9:88:e0:71:87:14:0b:e5:82:d0:d7:09:
         70:2b:fc:b9:5a:87:e9:7b:db:38:d2:cf:58:32:89:b3:b0:78:
         06:04:4f:3b:3f:90:d9:b2:84:8f:53:72:65:c6:cb:c5:33:8e:
         c2:b8:2b:20:62:b0:1c:f9:29:0d:54:5c:8f:6e:2f:5b:7c:d2:
         5b:ab:2c:dd:77:6f:aa:4c:2e:b3:a6:d2:9d:73:c8:87:ff:11:
         77:23:c3:52:a7:86:6b:f4:64:f0:85:0e:5c:25:20:60:be:6c:
         10:a6:cc:42:f7:09:2a:e7:9b:44:b2:67:40:de:f7:42:ba:13:
         ab:1b:88:02:40:31:bc:d7:a0:62:f2:0c:03:d3:7d:3a:66:11:
         de:55:d3:10:40:3c:73:f5:11:5c:0e:b5:f9:7d:03:81:27:94:
         da:08:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:09 2024 by rpki-client on console-ams.rpki-client.org