Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136312e302f32342d3234203d3e20323638383538.roa
File:                     34352e3137342e3136312e302f32342d3234203d3e20323638383538.roa (raw, json)
Hash identifier:          E+XCVdQX5gBDq8bmGDk61NzVHvTTxe8uYdFCdyBkn6s=
Subject key identifier:   28:27:47:3A:37:6B:C8:0A:97:52:A8:1E:BE:EA:9F:0D:D1:1E:7D:A5
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       06D905CC1EC4E0D084BDADB31AA85A0E59AA1DF4
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136312e302f32342d3234203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:54 +0000
ROA not before:           Wed 03 Apr 2024 20:38:54 +0000
ROA not after:            Wed 02 Apr 2025 20:43:54 +0000
asID:                     268858
IP address blocks:        45.174.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d9:05:cc:1e:c4:e0:d0:84:bd:ad:b3:1a:a8:5a:0e:59:aa:1d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:54 2024 GMT
            Not After : Apr  2 20:43:54 2025 GMT
        Subject: CN=2827473A376BC80A9752A81EBEEA9F0DD11E7DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:8b:10:ff:bb:92:2d:c5:ac:70:25:b7:28:
                    cb:06:8d:3c:bd:60:0e:4e:69:8f:68:07:eb:a1:71:
                    bc:86:e4:ed:de:81:a6:e8:a5:34:ab:39:2a:99:99:
                    e2:f6:42:52:8d:70:92:76:da:c0:6f:44:10:80:de:
                    fa:fa:79:74:ea:b5:8f:77:0e:06:b9:46:fc:e0:8b:
                    bf:44:a3:f5:7f:3e:d2:cd:c8:f0:3a:53:90:ae:f9:
                    35:52:3a:11:a3:f5:5f:f0:81:c1:67:e9:e3:3f:72:
                    a2:90:f7:85:47:60:61:28:90:32:98:fc:e5:10:20:
                    a4:44:2a:75:88:cb:16:1d:06:8b:91:6c:99:00:31:
                    c9:25:56:38:f7:d6:ec:be:1f:e8:be:53:23:d2:5f:
                    df:b7:1e:a5:a7:ee:5e:9c:7f:42:ef:05:25:fc:ad:
                    98:c5:20:3b:06:c7:d9:52:99:1f:58:da:fb:66:0e:
                    9a:68:55:94:98:5d:b1:b7:17:0d:3f:5f:e7:b7:24:
                    7b:62:7b:8f:1a:2e:6b:a1:50:2f:69:3a:48:d4:97:
                    83:bc:66:d9:f8:89:bc:cd:78:f0:15:de:bf:b6:e1:
                    3c:75:dd:ff:7f:a5:54:df:d2:e6:83:71:b4:ed:55:
                    d4:ec:09:d8:90:41:b1:4b:d3:78:10:ee:77:1b:42:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:27:47:3A:37:6B:C8:0A:97:52:A8:1E:BE:EA:9F:0D:D1:1E:7D:A5
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136312e302f32342d3234203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:24:c8:fe:47:28:cf:5e:4e:55:c6:ee:bc:f6:0e:e8:93:b8:
         3e:ca:25:31:43:5e:ba:fc:90:c1:81:7d:8c:af:72:e7:9e:b1:
         9d:c4:1f:a6:2d:24:07:ee:ac:18:d9:b6:c4:f6:47:7f:66:8d:
         9b:a2:6c:d9:68:4e:28:a7:9f:a7:3e:38:c9:5c:b5:c8:9c:af:
         7b:5e:31:2e:1d:52:03:b5:f6:5f:16:40:86:19:ea:3d:61:df:
         e1:ed:d6:5e:4f:3c:b8:59:57:df:45:7b:1b:30:0d:d4:2b:1d:
         c4:27:be:f3:34:6e:ca:f6:fa:34:e4:9f:68:91:a9:0c:9d:37:
         4c:a0:21:9c:85:98:4d:39:e0:e5:4c:0a:c7:25:3b:b1:0b:bf:
         a5:0f:f6:97:ad:6b:31:82:21:04:e7:26:21:18:bd:9f:bb:98:
         73:20:b9:6b:7a:cc:eb:60:94:21:69:ff:f3:02:57:71:1b:f7:
         fc:dc:4d:47:ab:bc:2c:f0:f7:00:9f:c4:4a:94:9a:a9:b9:da:
         e5:53:a3:bb:1b:f2:46:46:d5:cb:56:d9:f4:b8:c8:7c:14:8a:
         3d:18:38:d8:f6:c5:86:61:49:19:fe:c1:7f:7b:20:52:46:10:
         e5:50:16:fa:be:81:3f:cb:a1:c1:79:78:0b:82:89:b1:27:63:
         6b:a6:02:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:22 2024 by rpki-client on console-ams.rpki-client.org