Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e382f32392d3239203d3e20323639303036.roa
File:                     34352e3137362e3135302e382f32392d3239203d3e20323639303036.roa (raw, json)
Hash identifier:          m5yCG6WeE3sk7XZ2R0C8ZkLZsRI0z3Ctu5NODsRo6CY=
Subject key identifier:   EB:AA:4C:E4:B5:33:3A:09:86:72:CC:6C:60:AD:E5:CD:FF:AF:5E:FF
Certificate issuer:       /CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
Certificate serial:       08F082A5F00D917EC8ABE8523018FF59C7545863
Authority key identifier: AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e382f32392d3239203d3e20323639303036.roa
Signing time:             Wed 30 Oct 2024 18:15:52 +0000
ROA not before:           Wed 30 Oct 2024 18:10:52 +0000
ROA not after:            Wed 29 Oct 2025 18:15:52 +0000
asID:                     269006
IP address blocks:        45.176.150.8/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f0:82:a5:f0:0d:91:7e:c8:ab:e8:52:30:18:ff:59:c7:54:58:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
        Validity
            Not Before: Oct 30 18:10:52 2024 GMT
            Not After : Oct 29 18:15:52 2025 GMT
        Subject: CN=EBAA4CE4B5333A098672CC6C60ADE5CDFFAF5EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:46:7b:6f:b1:f5:20:be:d6:90:90:43:68:
                    b2:87:8d:db:b1:3e:ca:2e:6a:8a:4c:2f:c7:f6:ea:
                    5c:5f:51:ee:c9:21:50:f7:18:62:95:7f:23:67:35:
                    e6:b7:8f:55:40:8f:8b:78:f6:80:97:e8:03:89:76:
                    42:14:87:68:c1:14:1f:15:9c:4e:80:74:25:99:2e:
                    0d:28:b1:88:08:bc:cb:b0:b1:82:08:53:21:8d:84:
                    6e:3c:15:4a:4f:74:6a:ef:e5:69:7e:20:e3:92:d3:
                    b0:55:a2:68:90:d1:7e:26:4b:5b:83:b7:1e:5d:eb:
                    da:f9:0d:8d:5a:f0:a0:33:73:ea:e5:6f:12:70:a2:
                    62:97:1b:c2:48:e3:e1:20:37:eb:67:b8:b2:f3:e6:
                    b8:fa:fd:49:e1:f6:da:bb:c6:8d:25:74:91:40:33:
                    aa:05:60:c1:f3:58:3d:74:36:3d:65:58:74:28:89:
                    4d:67:3b:0f:d5:74:e5:21:1b:e7:b3:ab:b5:cc:53:
                    b2:69:6f:98:82:b5:10:54:73:75:48:7b:85:23:9e:
                    d4:f0:a5:4d:68:b0:55:60:ac:20:e4:69:2c:4f:dd:
                    e8:bc:eb:7b:11:88:ea:0c:46:c0:8f:aa:bb:15:db:
                    68:15:72:f9:9e:87:52:25:1d:25:eb:53:81:58:59:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AA:4C:E4:B5:33:3A:09:86:72:CC:6C:60:AD:E5:CD:FF:AF:5E:FF
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e382f32392d3239203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.150.8/29

    Signature Algorithm: sha256WithRSAEncryption
         29:9d:5a:69:1e:65:db:bb:c9:fc:4c:84:ed:05:c7:71:a1:80:
         88:6f:93:c4:46:ad:ae:a8:71:e3:7c:d6:80:18:d4:8f:2f:4c:
         fa:dc:a5:ca:70:9a:ba:ea:16:2a:31:06:2f:ae:44:23:4c:07:
         aa:41:8b:9d:99:36:eb:a7:9e:67:2f:e3:eb:36:25:42:d7:c6:
         3e:10:fc:6f:e9:ef:bc:5d:af:81:76:4f:81:d2:99:b2:f3:03:
         a4:aa:a5:42:f4:4d:f9:ba:63:70:03:cb:26:97:d5:03:fd:ba:
         4d:f4:d2:f5:c6:c6:8c:de:65:60:ba:aa:af:ed:28:e5:88:ea:
         5d:c8:cc:6b:95:5b:68:5f:a5:98:17:fd:d6:74:93:01:b2:c7:
         18:7e:cb:9e:00:79:9e:9b:74:67:79:aa:57:e6:c3:57:13:e9:
         a6:6f:91:67:05:fd:42:ca:a0:6d:ab:19:54:45:9a:d6:40:d9:
         b7:c8:9e:ba:d2:1d:f2:75:20:f2:2c:2d:bf:9e:c9:7b:d9:98:
         2e:34:c4:6e:d6:a8:c5:49:9e:e5:1d:f9:9b:88:35:92:52:83:
         0d:f1:85:9b:30:85:eb:a6:05:9e:c1:aa:99:bf:94:1a:32:ea:
         0c:5a:00:88:02:50:43:2b:53:cd:68:f3:21:a6:e4:7d:2d:70:
         49:08:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org