Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa
File:                     34352e3138302e34302e302f32322d3332203d3e20323639313330.roa (raw, json)
Hash identifier:          0E3OMREoP/78Spg7JgbCOXe71XwewimNENpdK6igK8s=
Subject key identifier:   51:0C:04:3B:6D:AC:93:D3:B2:8F:2A:BB:B3:48:3C:65:6F:6B:F5:44
Certificate issuer:       /CN=1DDA37CFF677169A3C8B633EAA86B7B95B70716C
Certificate serial:       26B0F36F6D79F28CA46C38D7C752B7D7F16BD5CC
Authority key identifier: 1D:DA:37:CF:F6:77:16:9A:3C:8B:63:3E:AA:86:B7:B9:5B:70:71:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa
Signing time:             Thu 04 Apr 2024 07:43:07 +0000
ROA not before:           Thu 04 Apr 2024 07:38:07 +0000
ROA not after:            Thu 03 Apr 2025 07:43:07 +0000
asID:                     269130
IP address blocks:        45.180.40.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.crl
                          rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b0:f3:6f:6d:79:f2:8c:a4:6c:38:d7:c7:52:b7:d7:f1:6b:d5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DDA37CFF677169A3C8B633EAA86B7B95B70716C
        Validity
            Not Before: Apr  4 07:38:07 2024 GMT
            Not After : Apr  3 07:43:07 2025 GMT
        Subject: CN=510C043B6DAC93D3B28F2ABBB3483C656F6BF544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:1c:01:e7:7f:37:22:16:2f:52:54:63:b2:
                    56:97:aa:cc:f2:1b:94:e5:a2:27:d5:a3:f4:3a:f6:
                    a6:ae:7d:1f:77:3a:18:c8:64:c4:49:ae:a8:34:8d:
                    11:ad:08:f4:b4:a8:78:7d:c9:e1:33:fc:9d:23:af:
                    72:52:40:7b:06:f2:e8:6e:6a:68:7e:8d:fe:6d:10:
                    1b:ea:a4:54:1e:82:66:1d:16:19:0b:83:a7:2a:ad:
                    40:93:78:e9:1e:6b:c8:57:99:42:21:42:9b:28:08:
                    bf:36:84:3a:e6:26:89:f2:ef:67:05:b0:ec:c3:a4:
                    77:fd:62:2b:e0:30:e8:d5:b2:c5:49:23:5f:68:1c:
                    07:54:14:18:73:fe:51:d1:34:65:68:0e:f3:b7:4c:
                    33:a8:0f:8d:43:73:5a:46:88:3e:47:dd:56:6e:a2:
                    45:71:df:5f:65:3c:ea:70:e4:50:58:60:16:dc:7f:
                    66:7a:13:1b:4d:28:71:5d:b8:cb:5f:9f:1a:a0:ea:
                    fb:c4:ce:39:38:47:04:ec:47:9b:f7:ef:3c:be:d8:
                    48:32:c8:d4:51:ef:51:12:eb:d8:a5:59:72:b5:9a:
                    93:56:00:09:81:64:28:da:6e:56:ac:72:3c:01:79:
                    f7:f5:37:fc:5f:15:f3:4d:6b:a0:fb:d5:7c:6a:59:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0C:04:3B:6D:AC:93:D3:B2:8F:2A:BB:B3:48:3C:65:6F:6B:F5:44
            X509v3 Authority Key Identifier:
                keyid:1D:DA:37:CF:F6:77:16:9A:3C:8B:63:3E:AA:86:B7:B9:5B:70:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:e9:22:bb:aa:7b:bd:02:c0:d1:d1:c8:78:9d:8f:7d:44:b4:
         e8:21:f4:3b:2d:c2:73:58:02:0d:34:09:82:22:60:c7:c6:e3:
         76:7a:c2:2b:17:dd:ab:3e:ab:17:c8:9a:39:2d:fa:54:00:d5:
         ae:e3:4c:19:66:15:2e:35:9a:e2:b3:bd:28:f9:3e:ae:12:ab:
         36:05:79:8f:80:0d:07:1e:27:84:4d:8c:ea:fa:7a:13:d6:27:
         03:aa:12:f5:ab:f6:3d:17:7f:e4:65:f1:42:c9:54:6e:f8:f2:
         2d:b1:3a:c1:1a:33:55:25:03:3a:b2:db:c8:b3:6c:1d:b6:1b:
         4a:ba:06:b3:99:ed:5f:b7:ea:48:c6:ef:1d:3e:66:a4:1d:be:
         d1:2e:f8:f6:99:9c:e0:06:5b:19:7b:36:44:fc:f0:21:27:99:
         f0:75:f5:87:a1:33:0e:b4:76:d5:2f:48:2d:9d:8d:10:f0:bb:
         55:65:07:df:7f:3a:ad:b8:4e:48:d2:a2:84:f5:5d:14:23:7e:
         59:e4:b3:8a:06:9a:54:c6:6f:d5:db:91:f8:68:ec:e8:ca:c2:
         ad:23:da:cb:93:d9:77:44:3a:b4:ca:62:4c:dc:26:d1:0f:06:
         43:5b:da:8c:52:39:02:e3:7c:00:b1:4e:0f:52:de:ec:dd:08:
         ad:85:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org