Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e3137362f32392d3239203d3e20323639303036.roa
File:                     34352e3137362e3135312e3137362f32392d3239203d3e20323639303036.roa (raw, json)
Hash identifier:          qW41oldxeXRfmGdOLX8q9cf2KOgmYkUjyxUKUtle9S4=
Subject key identifier:   58:C5:BF:93:A5:F7:3C:2E:0F:21:DF:B0:8B:DB:F2:8F:D1:11:0C:05
Certificate issuer:       /CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
Certificate serial:       290B242C7C760E03CFA17A8A91A4A5085FB20054
Authority key identifier: AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e3137362f32392d3239203d3e20323639303036.roa
Signing time:             Wed 30 Oct 2024 18:16:53 +0000
ROA not before:           Wed 30 Oct 2024 18:11:53 +0000
ROA not after:            Wed 29 Oct 2025 18:16:53 +0000
asID:                     269006
IP address blocks:        45.176.151.176/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0b:24:2c:7c:76:0e:03:cf:a1:7a:8a:91:a4:a5:08:5f:b2:00:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
        Validity
            Not Before: Oct 30 18:11:53 2024 GMT
            Not After : Oct 29 18:16:53 2025 GMT
        Subject: CN=58C5BF93A5F73C2E0F21DFB08BDBF28FD1110C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:17:8f:03:1e:87:db:34:77:cc:0f:0e:82:
                    3a:db:6c:60:d4:ca:65:1f:55:89:4b:de:18:1a:5b:
                    ec:e6:84:30:d4:e3:ef:08:c5:d1:ad:59:f7:56:0f:
                    eb:e9:b6:b3:3e:04:c4:20:92:a2:4a:d1:97:3f:a6:
                    9a:a5:61:f1:5a:3b:9c:86:75:6a:91:20:f5:14:6d:
                    36:5b:8f:85:3f:3e:d1:dc:6c:60:85:6e:f1:0b:25:
                    f3:fe:f0:8b:f2:ce:89:28:f3:cf:57:e5:2b:87:15:
                    c3:08:b4:0f:23:21:c2:f2:d1:b7:ba:50:76:86:1e:
                    b4:74:e9:43:20:bd:c2:69:87:d4:ee:2a:f2:01:58:
                    24:17:3c:b9:61:1b:51:8b:f8:38:88:fc:49:22:86:
                    55:e1:f3:5f:11:13:0e:81:75:9f:ae:32:26:b3:c3:
                    2e:d5:29:91:7b:79:7f:d3:1a:27:3a:c2:cd:17:1d:
                    59:0e:cf:95:c0:1d:89:06:ae:ff:a7:56:38:58:c7:
                    8c:92:e3:5e:b9:12:03:5d:be:3f:01:e2:be:af:af:
                    b2:fb:17:16:6b:f8:30:db:79:b0:82:40:b8:27:5c:
                    ef:1a:4f:94:80:c2:d0:e2:65:79:36:f2:85:ed:93:
                    d9:62:2c:36:44:d3:b8:e4:5d:eb:8d:72:17:3e:50:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C5:BF:93:A5:F7:3C:2E:0F:21:DF:B0:8B:DB:F2:8F:D1:11:0C:05
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e3137362f32392d3239203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.151.176/29

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:a7:e6:43:85:f1:4d:cc:ce:02:96:07:c6:36:91:37:36:
         84:33:c5:fa:25:59:18:db:cd:e2:77:4e:34:a1:c4:c5:b5:d4:
         96:ac:78:f0:d8:02:68:6b:90:98:e1:66:5f:72:87:f7:e8:9f:
         13:2b:7a:05:c4:a5:65:b2:f1:b8:ad:af:c0:32:5a:71:86:a1:
         ba:65:e8:3f:a4:18:f4:fb:76:8d:f2:9f:b0:8f:b4:b4:cc:7f:
         7f:39:9d:2f:37:7d:a4:d8:f8:4b:b2:f3:0a:23:75:7e:20:fe:
         79:33:d8:fc:d8:44:a8:03:0b:90:5d:b1:e1:70:50:0a:c0:9b:
         13:77:60:db:d3:7c:e7:2b:20:96:d9:3e:9b:d1:0d:e0:70:13:
         06:aa:8c:b9:82:bf:e5:77:bd:e8:30:c4:95:b7:50:b3:75:07:
         0c:cb:39:17:06:6e:86:77:2e:1b:25:2b:c0:9f:a1:46:68:81:
         69:59:a8:c0:af:0d:89:7d:72:e6:16:6a:31:69:ad:73:65:a9:
         c0:d1:f9:f2:16:0d:48:d3:32:92:a2:1d:8a:26:d5:1d:52:0b:
         37:aa:23:cc:01:2c:54:d5:3a:8c:4e:9d:f1:49:e5:ce:f9:28:
         4d:8d:eb:cd:2f:b5:95:b5:6c:c7:dc:ba:d5:d3:6f:85:b7:03:
         30:d8:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:04 2024 by rpki-client on console-fra.rpki-client.org