Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134392e302f32342d3234203d3e20323639303036.roa
File:                     34352e3137362e3134392e302f32342d3234203d3e20323639303036.roa (raw, json)
Hash identifier:          N5/bLiaijouI7EmZD6f+4o25IEvWqkKaK2jWwhHZCko=
Subject key identifier:   A5:82:87:58:B9:C3:3C:74:A5:11:F0:12:55:16:EC:EB:15:B2:EF:BE
Certificate issuer:       /CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
Certificate serial:       1B0D9C97A01A3862E60ED2B5D4005110B28BA2B2
Authority key identifier: AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134392e302f32342d3234203d3e20323639303036.roa
Signing time:             Wed 30 Oct 2024 18:14:15 +0000
ROA not before:           Wed 30 Oct 2024 18:09:15 +0000
ROA not after:            Wed 29 Oct 2025 18:14:15 +0000
asID:                     269006
IP address blocks:        45.176.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0d:9c:97:a0:1a:38:62:e6:0e:d2:b5:d4:00:51:10:b2:8b:a2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
        Validity
            Not Before: Oct 30 18:09:15 2024 GMT
            Not After : Oct 29 18:14:15 2025 GMT
        Subject: CN=A5828758B9C33C74A511F0125516ECEB15B2EFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:b5:20:0d:47:8f:35:0e:26:56:6a:5c:36:
                    1d:19:35:d3:bc:ea:9a:63:3c:22:08:3d:cd:e9:37:
                    7c:df:1e:80:3c:81:29:98:95:82:31:ea:cd:a8:32:
                    8f:a8:30:f5:c2:f8:42:62:00:b2:32:71:97:e0:a7:
                    8f:5f:d1:74:3d:f3:f3:db:ed:b9:6b:a6:3c:fd:31:
                    dc:cc:16:b8:ee:47:75:97:d3:73:35:c4:73:be:72:
                    e0:e8:d0:a6:8e:c1:17:26:72:0a:ee:0a:64:8b:cb:
                    b7:d7:3c:05:2f:10:84:36:60:22:7c:85:e8:52:92:
                    e3:59:36:8e:f2:20:56:bb:56:6c:12:35:e7:c0:bd:
                    99:f9:25:74:13:99:3c:46:8f:24:e6:bb:82:cd:00:
                    4f:9f:3b:80:3e:6b:fd:0f:93:6f:6c:46:aa:13:96:
                    bf:09:d7:44:28:77:8b:89:5f:80:0d:97:16:97:38:
                    11:0a:01:c7:7d:ed:00:77:d5:b8:65:82:a7:f2:2b:
                    63:3d:e5:33:13:c7:0a:3d:d2:92:65:ba:1b:17:1f:
                    69:74:c8:0c:d9:9b:34:e3:8a:e6:96:93:83:33:97:
                    21:78:96:e4:41:3f:ae:3c:8c:e5:48:b1:01:44:e6:
                    d8:a2:5b:1f:b8:31:5c:33:2d:10:28:25:e8:d9:1d:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:82:87:58:B9:C3:3C:74:A5:11:F0:12:55:16:EC:EB:15:B2:EF:BE
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134392e302f32342d3234203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:e7:12:a1:f7:61:db:53:18:f5:d9:0d:1b:09:16:7d:42:
         d7:3d:93:ac:6e:b7:fa:2e:3b:cf:4f:6d:76:64:69:bd:3c:0c:
         f1:6d:c9:63:11:49:69:62:4e:be:6c:02:ba:50:88:8d:74:ef:
         ab:f5:cf:22:9c:a7:cf:48:93:29:ec:95:5f:16:3f:bf:4c:c2:
         91:64:bc:e8:4b:83:16:50:1e:34:65:d4:49:d9:41:61:d2:86:
         c2:f3:a0:d4:89:d0:90:23:3e:e4:04:bd:c2:3e:09:4b:90:41:
         b1:45:d4:fd:0f:3e:b8:0b:8d:75:49:92:68:03:81:ff:ee:6d:
         8d:45:5e:e3:ff:87:fa:13:d9:b0:4e:dc:36:88:fc:14:5c:6b:
         55:1b:57:55:1f:fc:29:59:e4:1a:15:0d:d4:2d:28:6e:51:c4:
         80:63:e1:b3:4f:8d:6a:62:aa:c1:b0:ab:57:a4:71:b6:66:cd:
         e6:2d:8e:ae:56:21:10:b5:b1:3b:25:a5:99:59:32:a6:e7:6d:
         24:05:8d:8f:f7:b1:38:37:f7:cd:7c:5f:2d:60:2e:e4:46:f8:
         a8:ad:24:0e:f3:d5:0c:a4:f1:e3:63:86:3e:6e:55:92:fb:10:
         5c:bb:87:65:40:32:4d:e2:05:e7:68:25:9c:20:0f:b6:47:28:
         e1:34:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:04 2024 by rpki-client on console-fra.rpki-client.org