Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa
File:                     34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa (raw, json)
Hash identifier:          FB0FvObkqmTJF7F/GYWVwmW/esGFWGHuphrCeTxLB6A=
Subject key identifier:   28:B8:F4:C5:72:45:D4:80:00:0C:10:63:C6:24:C9:EF:17:10:EB:46
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       48189AB8093EBDFAE9B4AB71D23905FDBE1D46BB
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:51 +0000
ROA not before:           Wed 03 Apr 2024 20:38:51 +0000
ROA not after:            Wed 02 Apr 2025 20:43:51 +0000
asID:                     268858
IP address blocks:        45.174.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:9a:b8:09:3e:bd:fa:e9:b4:ab:71:d2:39:05:fd:be:1d:46:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:51 2024 GMT
            Not After : Apr  2 20:43:51 2025 GMT
        Subject: CN=28B8F4C57245D480000C1063C624C9EF1710EB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:b2:2b:48:7b:3f:ec:39:ed:6d:c5:c3:d5:
                    57:dd:cd:60:ea:e4:54:dd:c2:69:61:0c:67:48:e5:
                    ef:08:2f:d2:9f:14:1f:f0:73:72:9b:46:09:4f:7c:
                    77:c0:8e:2c:f5:75:97:89:bc:cd:5f:f5:f1:93:76:
                    cf:9d:8b:9d:8e:09:88:1d:b6:9f:4a:58:a9:31:fb:
                    90:30:4b:81:3e:37:0c:84:e5:ba:d9:f3:ef:35:9d:
                    82:58:50:8f:4e:09:40:aa:8e:f2:6a:9b:fd:b6:22:
                    90:93:79:87:ab:7a:b9:dd:78:e7:5e:22:5e:d5:9c:
                    af:35:8f:53:33:7e:0f:5d:88:ab:f7:91:8b:4a:f4:
                    17:c2:cc:05:29:5e:d6:94:36:e3:7d:6d:27:93:38:
                    48:33:22:17:7a:f2:b6:da:0c:33:99:a6:7e:00:cf:
                    b8:44:ac:78:04:7f:4c:01:5b:72:cf:38:15:d0:57:
                    8d:04:93:e9:6c:7c:59:57:20:1b:6c:71:42:81:06:
                    59:11:39:16:a8:88:45:b8:6b:ba:cd:22:8b:da:7b:
                    37:1a:7a:94:4a:54:76:48:55:42:ac:d2:f5:68:fe:
                    e2:f1:96:cd:d0:2f:15:fb:6b:f3:79:53:a4:64:92:
                    a3:d8:2c:22:a8:d5:44:bc:63:f9:64:10:67:1c:1c:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B8:F4:C5:72:45:D4:80:00:0C:10:63:C6:24:C9:EF:17:10:EB:46
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2d:ac:ce:35:49:1d:42:ca:88:23:fe:25:c9:22:16:7c:88:
         ae:8f:b1:88:7d:f3:5e:f7:05:1a:eb:46:81:cb:69:15:33:9f:
         df:2d:7d:14:e5:f8:87:66:ef:3a:76:25:cc:7c:ed:c6:5a:e6:
         30:2d:96:85:87:51:5c:df:e6:08:d4:a6:22:0a:51:7d:29:46:
         df:e3:0c:6a:fe:da:98:f2:35:9b:58:48:21:e4:be:95:82:15:
         bc:f8:ce:79:88:09:4e:44:ff:12:96:3d:20:a7:5a:36:db:12:
         ed:fd:a6:8a:14:b3:bc:b9:d3:c9:77:96:df:35:53:a0:89:d6:
         9d:db:80:16:eb:d9:98:8e:9d:0c:d9:38:c7:3b:39:c5:84:b8:
         36:35:7d:4d:43:6e:75:33:b8:cf:89:c0:6b:c6:a7:30:34:52:
         50:ad:73:79:fe:d9:71:a4:09:00:d9:82:a3:d5:a4:8f:3c:5d:
         34:c3:f3:d5:c9:3d:a7:2e:8c:11:c2:4e:b2:af:cf:d4:1e:84:
         8e:11:df:29:21:bd:c8:75:88:63:fb:f4:5e:5e:d2:72:4b:47:
         09:5d:80:90:d0:8b:a2:51:c7:68:a8:b6:c1:ba:a1:ea:1b:9d:
         d1:ee:b8:7a:77:80:9b:be:d7:03:a4:8e:d1:21:98:a0:8d:77:
         4f:ff:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:22 2024 by rpki-client on console-ams.rpki-client.org