Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/34352e3138352e32352e302f32342d3234203d3e20323637343538.roa
File:                     34352e3138352e32352e302f32342d3234203d3e20323637343538.roa (raw, json)
Hash identifier:          pKAGl+EMpwyqyozAxjLFw3qwBQ0FpDvwV9M7vyK8j+w=
Subject key identifier:   E4:0F:84:2E:46:0C:FD:47:DD:DE:EE:B1:8C:6A:3D:FD:DB:D4:0F:40
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       263FB8B98131C294B707FCD5D7516FE9B51818D0
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/34352e3138352e32352e302f32342d3234203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:16 +0000
ROA not before:           Thu 04 Apr 2024 02:02:16 +0000
ROA not after:            Thu 03 Apr 2025 02:07:16 +0000
asID:                     267458
IP address blocks:        45.185.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3f:b8:b9:81:31:c2:94:b7:07:fc:d5:d7:51:6f:e9:b5:18:18:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:16 2024 GMT
            Not After : Apr  3 02:07:16 2025 GMT
        Subject: CN=E40F842E460CFD47DDDEEEB18C6A3DFDDBD40F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:c8:e7:14:f7:d7:9c:66:03:19:0d:91:11:
                    14:17:1e:86:cf:9c:a0:f4:f8:ec:5a:27:9f:fd:2f:
                    60:02:0a:f3:1d:d8:60:6c:a6:50:70:34:6a:eb:01:
                    16:6f:b2:47:d7:51:5a:66:48:c3:86:8b:b1:b3:67:
                    b2:20:18:4b:63:2f:1c:b2:bd:f7:d7:21:08:b7:f0:
                    12:16:cf:5e:a2:78:fd:30:e4:19:a1:7f:7b:cd:7a:
                    4f:99:fe:84:c5:23:7b:28:9d:f3:25:cf:b0:ca:aa:
                    29:8f:48:57:5d:08:93:48:59:98:99:c0:1e:4f:c2:
                    ae:41:c2:70:4a:d4:39:0c:86:37:e0:a3:05:76:9b:
                    19:7f:05:f4:04:e9:21:d4:9f:9f:86:e3:2e:7f:10:
                    ba:08:77:4d:ca:f7:df:f6:a4:9e:ec:b7:47:e1:d7:
                    a4:92:84:4b:ee:5d:d5:25:8b:e7:7d:cd:59:32:91:
                    87:5c:eb:d8:8c:0d:49:8f:fd:11:a0:cf:f1:9c:d9:
                    31:29:48:bf:27:58:e3:ab:6c:2a:19:61:1a:f5:5f:
                    32:50:e3:f0:0c:a0:b4:2b:e4:46:14:8f:0e:c6:2e:
                    45:a0:f7:11:ac:2b:09:aa:9f:17:17:dc:eb:05:78:
                    dc:43:65:56:af:f3:68:f3:4b:13:53:1e:4f:b2:67:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:84:2E:46:0C:FD:47:DD:DE:EE:B1:8C:6A:3D:FD:DB:D4:0F:40
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/34352e3138352e32352e302f32342d3234203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f5:cb:0f:3f:c5:49:7d:99:98:26:c4:d4:64:b1:66:18:e4:4e:
         4c:33:ea:84:d6:99:61:23:e7:6c:7b:11:ce:c0:97:47:31:a7:
         af:0b:c6:80:f3:c2:15:c0:a4:0c:3e:dd:4b:b9:e1:87:ab:52:
         32:07:4b:03:80:61:22:b6:93:24:29:28:96:7a:36:a7:7d:9f:
         e1:0f:dc:01:8e:a3:70:45:f6:5f:11:ae:49:f8:df:82:de:85:
         c7:7c:04:af:35:4f:84:30:c2:57:c9:94:77:dd:0e:02:d6:87:
         90:35:23:36:ec:19:2a:1b:9e:3b:12:28:85:87:19:f2:83:d9:
         5a:60:3c:9e:3a:d6:62:da:f1:32:95:47:25:f0:ff:0d:4f:ee:
         cf:76:0a:40:57:95:3e:ab:76:8f:49:35:50:7e:62:0c:56:a6:
         89:c3:1e:a7:26:85:5e:fb:88:7c:e6:a3:18:f0:ad:1e:5e:b6:
         24:0d:ee:9e:45:b2:90:f4:bb:22:3d:89:f6:53:76:dd:e8:f9:
         da:6a:67:cb:9d:61:14:a7:2a:29:86:10:26:90:95:76:b5:8d:
         65:a7:a3:69:54:05:6b:75:8b:54:6c:d2:96:48:9e:9f:15:52:
         32:2b:8b:43:db:a1:54:1d:25:69:fc:f4:83:15:75:8f:63:06:
         72:9a:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:46 2024 by rpki-client on console-ams.rpki-client.org