Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32332d3233203d3e20323638383538.roa
File:                     34352e3137342e3136302e302f32332d3233203d3e20323638383538.roa (raw, json)
Hash identifier:          t/gMHEYwO+W6vkLS43K+kKAODPUQYfNZE8WiRjjet1w=
Subject key identifier:   DA:D5:5A:21:61:5A:A4:3A:CF:64:8E:F9:07:A9:26:E7:A8:42:3A:61
Certificate issuer:       /CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
Certificate serial:       504EE43A38E8942E1215786BF05052AF22175C05
Authority key identifier: EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32332d3233203d3e20323638383538.roa
Signing time:             Tue 03 Sep 2024 12:33:01 +0000
ROA not before:           Tue 03 Sep 2024 12:28:01 +0000
ROA not after:            Tue 02 Sep 2025 12:33:01 +0000
asID:                     268858
IP address blocks:        45.174.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4e:e4:3a:38:e8:94:2e:12:15:78:6b:f0:50:52:af:22:17:5c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Validity
            Not Before: Sep  3 12:28:01 2024 GMT
            Not After : Sep  2 12:33:01 2025 GMT
        Subject: CN=DAD55A21615AA43ACF648EF907A926E7A8423A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:11:ff:4a:b9:ba:1f:39:df:cd:97:8e:e2:
                    3d:35:55:95:78:53:50:68:0e:b2:0c:53:13:b3:92:
                    d4:5d:13:fc:92:eb:7a:15:86:de:c0:4f:5d:91:f2:
                    c9:7b:0f:a8:a0:19:b4:2c:3c:dc:c2:d6:3c:b5:39:
                    03:a5:52:5e:04:d3:76:cb:f8:f0:91:b3:a3:76:b4:
                    b9:db:48:36:7b:a6:76:32:61:34:05:d3:0f:0d:ce:
                    2a:af:e0:18:99:59:e5:99:42:0f:9e:46:28:9c:cc:
                    b5:7c:93:8f:52:ba:d0:db:75:e1:07:4b:54:0a:79:
                    0a:33:42:df:18:f7:48:68:09:85:a5:bc:d9:93:b0:
                    bb:62:a0:49:13:14:78:49:79:1f:de:f9:ce:b8:72:
                    1b:00:b7:b8:20:98:94:3b:20:8f:f8:76:d9:7a:1b:
                    fd:3a:45:14:ad:6a:a7:9c:71:fc:11:1a:33:86:81:
                    32:ca:95:17:7d:40:2b:64:5f:35:55:33:b1:12:e0:
                    2b:ba:e5:0b:4b:0a:10:d2:75:69:c1:3e:98:f7:ea:
                    95:f4:c5:da:60:85:e8:4a:b6:05:ce:b3:b0:e7:5e:
                    3b:55:0c:da:f6:ce:62:18:3a:3e:c8:d9:69:1c:3c:
                    09:6c:b6:14:1c:ac:ec:96:59:2b:26:69:e4:37:de:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D5:5A:21:61:5A:A4:3A:CF:64:8E:F9:07:A9:26:E7:A8:42:3A:61
            X509v3 Authority Key Identifier:
                keyid:EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32332d3233203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:8f:4a:73:cc:c8:fa:ad:fd:8a:89:9e:7c:aa:16:ee:35:3d:
         f0:16:d2:76:75:a0:60:b2:81:e1:c7:29:89:33:58:0c:31:51:
         dc:c4:38:89:2e:fb:8d:73:24:0f:59:d0:71:5d:04:14:b8:d4:
         16:a8:d1:d2:ec:bf:2f:ac:96:fe:29:cd:8d:99:cd:69:bc:fd:
         ae:0e:52:e1:4c:a4:27:8b:7d:ee:b9:6c:9f:93:4f:68:93:e8:
         c0:fa:59:d3:21:f3:55:77:de:96:2b:20:7d:ec:eb:f0:6c:e5:
         15:35:6b:01:50:73:54:41:6a:61:60:62:40:75:84:90:71:63:
         5b:e1:8d:ed:56:c9:c6:85:39:a0:b7:8d:fb:42:49:90:a6:15:
         b9:2d:26:a3:bc:55:17:ec:da:84:0b:95:17:dc:a1:87:4b:80:
         b2:aa:2c:72:47:a0:ca:92:45:1b:15:29:81:ec:a9:d5:33:83:
         a1:e2:db:50:40:0d:56:44:66:83:ff:2f:9a:9b:36:32:fe:c0:
         e9:82:7c:7b:1c:78:0c:1f:1d:5a:6c:ec:af:12:6c:bb:3c:b4:
         5e:9c:d5:57:13:c2:cd:0e:fe:13:10:d0:0d:ee:8e:b1:af:a6:
         2c:62:60:2b:4e:f5:96:40:d1:05:3f:83:44:64:1e:d3:ba:27:
         e4:7d:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:54 2024 by rpki-client on console-ams.rpki-client.org