Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/34352e3138352e32342e302f32322d3232203d3e20323637343538.roa
File:                     34352e3138352e32342e302f32322d3232203d3e20323637343538.roa (raw, json)
Hash identifier:          CFM6R70TNy/tUl2R9gRBs3C3EftRcQhV1PdgK5Z40sM=
Subject key identifier:   E2:D2:2E:0A:98:AC:3A:A2:0A:C6:4A:FF:F2:CA:31:74:F5:A2:80:DB
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       56BD608AF0ABEFCB8220FD4606941364B40C3729
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/34352e3138352e32342e302f32322d3232203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:15 +0000
ROA not before:           Thu 04 Apr 2024 02:02:15 +0000
ROA not after:            Thu 03 Apr 2025 02:07:15 +0000
asID:                     267458
IP address blocks:        45.185.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bd:60:8a:f0:ab:ef:cb:82:20:fd:46:06:94:13:64:b4:0c:37:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:15 2024 GMT
            Not After : Apr  3 02:07:15 2025 GMT
        Subject: CN=E2D22E0A98AC3AA20AC64AFFF2CA3174F5A280DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:8c:9b:82:ed:b4:e6:72:0c:39:2d:13:d4:
                    a2:c0:00:5f:d5:a4:52:6b:61:8d:30:f2:e6:53:6c:
                    62:23:e4:b8:fe:58:02:2a:69:aa:97:29:56:1f:f9:
                    a6:da:95:01:c7:0f:bc:8b:eb:b7:21:11:cc:9d:f9:
                    35:c8:ae:7a:d8:c1:b3:fc:05:75:fe:25:7d:d3:d0:
                    bd:84:b2:0b:94:1e:36:8a:54:5e:62:1d:89:6a:04:
                    86:4c:0c:92:27:68:cb:16:50:f3:f2:67:04:16:8d:
                    92:1f:2c:e1:48:e1:3c:84:4d:19:52:14:41:73:a9:
                    03:03:73:a5:5b:54:17:0e:8b:fa:f7:e9:b2:ca:4f:
                    cf:df:b9:4c:37:2f:01:e2:8e:4a:97:16:ac:52:fd:
                    79:1b:c4:e5:9b:97:97:37:3f:1c:66:45:35:c4:2f:
                    97:b1:6d:f9:fd:55:1c:81:f5:7e:8c:77:17:f7:82:
                    c6:bf:aa:fb:dd:6a:ec:4d:c5:15:d2:0d:b4:73:f9:
                    ab:4e:54:9c:8d:c3:20:81:1a:f7:cf:63:0b:6f:aa:
                    99:4a:d6:5a:af:41:ff:93:b8:b3:2b:47:b1:8b:b3:
                    33:00:50:41:e5:21:dd:d3:c0:1c:92:43:74:da:69:
                    24:24:2c:8a:cb:d1:47:c2:d7:8b:17:21:ce:82:78:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D2:2E:0A:98:AC:3A:A2:0A:C6:4A:FF:F2:CA:31:74:F5:A2:80:DB
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/34352e3138352e32342e302f32322d3232203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:21:65:a8:6d:81:e5:cd:8d:79:80:0e:d3:a1:2c:59:54:
         c2:12:7a:cc:0f:1c:9c:57:9f:7d:04:20:f5:23:25:09:59:94:
         52:4c:c3:dc:19:ee:6e:63:08:30:de:a5:be:39:67:5b:4d:2c:
         09:d5:45:f0:2f:40:54:31:87:38:ad:90:31:f8:0f:45:03:dc:
         95:08:70:59:d4:38:11:a0:95:65:9f:2a:be:b1:a2:1b:0d:76:
         03:3b:fc:e8:81:cd:11:26:ff:86:0b:39:c9:6d:44:cf:6c:3d:
         61:6b:83:38:da:59:b5:0d:91:c1:72:29:c2:34:da:a8:02:8b:
         07:57:1b:ee:9a:ec:1a:52:15:6f:7f:f5:d4:61:8f:40:a6:7e:
         cf:3c:02:52:94:d9:36:73:73:f9:4f:90:bf:7e:c1:4a:54:80:
         6f:3c:58:b4:4f:42:bc:0a:a6:cf:7c:30:4b:21:c0:48:22:37:
         5e:2d:aa:0b:7b:c0:a5:89:70:20:f5:e7:46:03:e9:af:e9:87:
         96:1c:70:0a:d9:65:78:be:a5:33:a5:82:7f:26:80:fe:4c:a3:
         72:94:f6:b8:f5:84:20:b6:be:0b:7d:8c:2b:fd:12:a0:9a:86:
         8a:20:ca:25:4f:47:96:12:01:27:9a:ca:df:60:75:6f:c2:d9:
         e4:34:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:04 2024 by rpki-client on console-fra.rpki-client.org