Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32342d3234203d3e20323639313434.roa
File:                     34352e3137392e3234302e302f32342d3234203d3e20323639313434.roa (raw, json)
Hash identifier:          oFowUKvKkPUdGZSMczZ0fxZGvFJx7Og3qR2lw0FluCs=
Subject key identifier:   FA:E4:51:1F:15:53:D7:5E:0F:6F:66:A1:70:E2:43:3E:78:FD:82:F1
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       04E7D7B755C267CFD701C7E41963278FDFF64F70
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32342d3234203d3e20323639313434.roa
Signing time:             Mon 29 Jul 2024 17:09:39 +0000
ROA not before:           Mon 29 Jul 2024 17:04:39 +0000
ROA not after:            Mon 28 Jul 2025 17:09:39 +0000
asID:                     269144
IP address blocks:        45.179.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e7:d7:b7:55:c2:67:cf:d7:01:c7:e4:19:63:27:8f:df:f6:4f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jul 29 17:04:39 2024 GMT
            Not After : Jul 28 17:09:39 2025 GMT
        Subject: CN=FAE4511F1553D75E0F6F66A170E2433E78FD82F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:7a:9f:05:3c:ed:ef:35:98:79:0e:51:b0:
                    1a:98:bb:9a:d3:f8:fc:ee:a9:16:df:57:3d:9a:2e:
                    ea:c5:6d:03:92:f5:c0:7e:c8:a2:21:b2:ba:1d:12:
                    26:78:4b:a0:58:46:37:ab:ca:da:2d:21:8e:65:4a:
                    e0:e7:21:52:47:da:5c:ca:bf:29:bb:f2:62:78:ef:
                    45:b9:0a:19:f9:83:a1:6f:21:43:5a:00:c1:39:4d:
                    30:b5:a6:08:de:fc:65:41:82:26:f4:21:29:31:9b:
                    38:59:c5:02:ae:f5:73:48:f4:68:3b:b6:82:60:21:
                    1f:4f:49:7e:b4:82:80:f8:57:7f:4c:95:5d:3b:77:
                    77:42:b8:ac:8b:50:a7:55:06:b1:b5:14:80:46:e9:
                    07:59:52:3c:9d:5b:8a:ee:55:12:20:ce:66:61:39:
                    bb:73:ca:99:f5:02:54:1d:65:5e:a2:a1:d4:96:24:
                    eb:92:4d:47:c4:d8:3d:f8:f6:01:21:d5:a2:eb:52:
                    6f:69:0c:f5:bb:2b:17:74:78:ff:77:91:0d:83:2e:
                    56:78:3f:d3:6a:ef:74:a1:6b:4d:11:e0:8d:47:99:
                    d2:30:ce:2f:f5:7d:97:25:ce:b7:97:04:86:8f:88:
                    67:f5:77:37:45:5c:f4:de:58:cc:cf:1c:12:10:a4:
                    27:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E4:51:1F:15:53:D7:5E:0F:6F:66:A1:70:E2:43:3E:78:FD:82:F1
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32342d3234203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:62:46:3b:91:44:97:78:3b:20:2a:01:bf:54:02:7d:fd:76:
         d7:f7:58:16:09:7a:22:30:29:8b:06:f4:f4:4f:5c:bb:54:1e:
         d9:19:fb:d9:08:1d:cf:30:57:ec:ee:37:60:73:21:93:5b:19:
         00:97:6e:13:4d:3e:15:76:36:9b:e7:c4:bd:15:1e:7f:b7:47:
         11:24:3a:2a:4c:c8:e9:2b:36:49:a0:cf:70:02:05:fa:d2:57:
         10:de:6e:ef:2d:03:d4:48:4e:be:6e:28:85:72:c1:d8:2f:55:
         75:0b:0c:bc:4f:ab:19:f2:04:7e:75:c7:40:4b:e4:76:8a:21:
         6c:39:62:49:af:7b:e4:0e:fe:57:55:b1:f0:e3:0b:fe:d8:4a:
         eb:28:d5:ba:1c:32:c4:21:c7:0e:e5:fa:52:77:b5:97:dd:1a:
         c3:9e:ce:26:f1:cd:ad:60:8d:44:d4:c8:48:99:71:57:cc:a1:
         ca:e1:73:d8:e9:56:3c:6b:a5:7f:75:d7:55:b9:76:2c:17:2d:
         08:e4:1a:1b:11:82:a7:eb:cb:5a:fe:85:fd:e7:80:7e:ce:99:
         57:f3:27:14:05:66:47:a1:dd:56:b4:84:6f:f2:19:fa:11:c0:
         e7:b6:fa:8e:fa:5f:36:fb:e6:3b:28:4e:54:46:b3:65:2f:ec:
         6c:e5:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:10 2025 by rpki-client