Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e302f32342d3234203d3e20323639303036.roa
File:                     34352e3137362e3135312e302f32342d3234203d3e20323639303036.roa (raw, json)
Hash identifier:          8rhBqzKGR108JkNQY8FIYX5VleNPl/nw6abPcE5ssfI=
Subject key identifier:   A0:EC:E1:39:5A:F0:1A:64:14:54:81:81:59:D1:DD:CB:28:E5:F2:14
Certificate issuer:       /CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
Certificate serial:       4CC1223AD4B01B265E958932C10DEB07A64032DA
Authority key identifier: AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e302f32342d3234203d3e20323639303036.roa
Signing time:             Wed 30 Oct 2024 18:15:04 +0000
ROA not before:           Wed 30 Oct 2024 18:10:04 +0000
ROA not after:            Wed 29 Oct 2025 18:15:04 +0000
asID:                     269006
IP address blocks:        45.176.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c1:22:3a:d4:b0:1b:26:5e:95:89:32:c1:0d:eb:07:a6:40:32:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
        Validity
            Not Before: Oct 30 18:10:04 2024 GMT
            Not After : Oct 29 18:15:04 2025 GMT
        Subject: CN=A0ECE1395AF01A641454818159D1DDCB28E5F214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:7b:dd:7b:da:f3:c9:c2:8d:35:3e:1b:27:
                    fe:51:8b:86:6d:5e:d2:82:53:e9:9d:fa:26:e5:d5:
                    6d:dc:11:a7:d3:e3:d1:16:ec:36:da:58:7f:cd:b7:
                    1d:8d:4a:a8:2f:80:b6:ac:27:6e:d2:c7:2e:d1:89:
                    7b:87:7a:df:ec:5d:2f:ef:e4:d5:2c:9a:64:95:81:
                    01:e8:fa:03:f4:17:2f:05:71:73:2c:af:a4:da:0e:
                    fd:b7:9c:0c:38:8f:aa:07:39:ee:1b:34:fa:42:ee:
                    df:21:c4:d1:cd:aa:6c:99:53:dd:1c:73:3e:cd:61:
                    d9:be:1a:9e:09:7f:d3:d4:39:28:f8:86:63:99:a7:
                    46:15:16:45:49:dc:86:3a:ec:d6:46:50:55:a2:99:
                    61:61:a8:5e:64:b2:fc:8d:e4:6a:11:ac:d6:a6:54:
                    d1:c2:cf:26:cf:f4:f1:af:92:29:3b:b6:f2:f2:7e:
                    15:14:8f:3b:e0:8a:c0:e5:70:f4:d8:14:15:ba:6a:
                    a6:99:47:77:32:b5:35:30:4e:eb:f0:92:ed:67:f4:
                    28:80:1f:78:ef:e5:3c:51:d6:1e:7d:f5:d9:7c:b2:
                    65:b7:77:2c:17:6d:03:f5:7c:3f:d6:01:1d:b7:75:
                    43:a4:51:90:cb:9d:d1:72:20:0a:85:fb:30:3f:33:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EC:E1:39:5A:F0:1A:64:14:54:81:81:59:D1:DD:CB:28:E5:F2:14
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e302f32342d3234203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:38:5f:4e:98:15:7e:bc:79:97:77:87:c8:7a:b7:cf:24:
         e8:76:0a:a8:32:f9:94:cc:72:ae:1a:0f:8c:76:18:91:a0:e9:
         0b:0a:ce:fe:f5:60:72:6f:bf:b2:b2:77:f4:9e:8d:b2:6e:ea:
         15:fd:12:15:7d:1c:11:07:8a:5a:7a:4b:6e:aa:7a:e8:4c:5a:
         fa:82:2f:ab:b6:9b:00:82:44:da:77:77:6b:74:cd:06:8e:42:
         b3:17:da:87:e2:68:31:74:8f:c3:cd:df:ee:d8:ff:8f:bf:80:
         4d:5c:8f:c0:de:fe:f4:05:22:5f:0c:13:5d:f7:fc:d6:39:8b:
         d8:35:47:1f:56:97:e2:b7:8a:01:70:37:b7:c3:f3:aa:59:eb:
         30:57:ec:69:6a:b1:a5:da:26:a7:93:66:aa:56:59:fc:bc:17:
         98:49:29:cc:45:75:6b:b6:40:49:cf:42:73:98:f2:65:d8:b6:
         a9:6a:8e:b0:66:cc:35:55:90:fa:cf:ce:8e:27:09:b1:ad:95:
         02:7b:0e:a4:3f:1f:f2:66:74:72:3f:dc:0f:cc:b2:86:85:6f:
         c9:a9:ab:fc:b2:a2:e7:9b:ca:b8:e8:82:a3:cb:39:1b:2a:27:
         8e:6e:85:86:cc:67:05:a5:23:75:1c:13:21:45:65:92:27:67:
         e5:65:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org