Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa
File:                     34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (raw, json)
Hash identifier:          duk2x5Mj7Ll7RTUfnGYtM0LPbfWPGcTn1VI/tdJnzGA=
Subject key identifier:   08:0D:A5:5C:C9:CE:D2:7B:02:F6:BE:66:45:A3:E9:D4:44:65:84:28
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       360D27C595F11D0B5EFD66E890E00D48C60FFF1E
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa
Signing time:             Wed 03 Apr 2024 21:48:24 +0000
ROA not before:           Wed 03 Apr 2024 21:43:24 +0000
ROA not after:            Wed 02 Apr 2025 21:48:24 +0000
asID:                     268533
IP address blocks:        45.162.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0d:27:c5:95:f1:1d:0b:5e:fd:66:e8:90:e0:0d:48:c6:0f:ff:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Apr  3 21:43:24 2024 GMT
            Not After : Apr  2 21:48:24 2025 GMT
        Subject: CN=080DA55CC9CED27B02F6BE6645A3E9D444658428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5c:18:ce:08:1c:c4:1c:60:be:10:33:70:20:
                    04:31:68:9a:6b:14:75:25:e8:81:1d:69:bb:b3:d7:
                    5e:7c:e1:78:33:05:27:ef:d6:28:a3:82:8a:66:c7:
                    c3:b7:ec:ab:bc:82:cf:e7:f9:4f:75:db:40:22:4f:
                    5e:cc:84:6e:6e:73:e2:8b:75:4a:71:9c:a3:54:9e:
                    05:60:dc:2a:a7:05:2b:65:1b:29:a8:27:51:f1:6e:
                    61:be:3d:9d:12:f1:26:c9:9a:d4:a5:7d:49:63:e4:
                    81:40:15:a2:d5:fa:27:9e:cf:46:b0:e9:bf:83:56:
                    52:56:1e:4e:38:20:ea:da:c2:01:52:86:31:6d:09:
                    3f:ba:8e:b5:58:eb:a6:29:0b:1e:5d:83:ea:5b:a7:
                    53:73:c4:fe:48:72:6d:7e:8e:2c:11:cf:d8:b2:c5:
                    41:cf:67:64:7e:1f:4a:b9:a4:80:4c:12:ef:38:71:
                    a9:aa:de:44:86:4b:8b:06:2f:c2:b5:2d:94:35:6b:
                    bb:02:58:c5:eb:f0:d8:87:c1:4d:4c:e2:fd:f3:39:
                    65:7e:22:07:91:f7:f7:98:48:97:6f:a3:07:69:51:
                    0f:40:a9:12:0b:3d:58:3d:03:c4:74:99:15:e6:8a:
                    5c:74:9b:bd:9e:e0:82:16:6f:7c:d5:c4:98:19:31:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0D:A5:5C:C9:CE:D2:7B:02:F6:BE:66:45:A3:E9:D4:44:65:84:28
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:fd:eb:7b:11:ce:f9:c2:37:c6:d2:9a:f2:bc:8c:f6:dd:3b:
         89:56:e6:a2:b3:43:b1:a6:af:3a:c5:4e:2c:17:e3:9d:d5:ad:
         de:a4:9c:4b:b7:40:70:65:97:4e:8f:ef:9a:8f:61:5a:eb:e8:
         c8:09:53:a8:42:9a:91:e7:60:06:5e:0b:14:f0:74:3b:93:30:
         21:24:33:02:71:cb:66:79:a2:47:cb:b8:74:a1:80:48:d9:38:
         ba:74:61:ee:f0:93:77:09:3d:2d:98:e0:b1:b8:9c:ad:93:28:
         19:e8:4f:0d:85:96:a4:68:d8:39:ec:67:01:76:da:1c:92:d9:
         9d:67:8e:82:f2:d1:45:7a:a1:94:16:8a:56:85:d6:e9:44:39:
         12:97:10:0e:95:ac:6a:c6:53:d7:fe:cb:30:b1:c5:b5:47:ed:
         d7:b0:7b:76:9b:87:8c:cd:a7:0b:c2:0f:53:52:fa:f1:54:29:
         1e:72:d6:0a:ec:fc:4b:9c:4d:73:b4:88:69:09:a0:e3:56:dc:
         38:d3:6b:12:e2:81:86:ba:50:52:10:47:4e:89:6e:34:d0:f7:
         9b:d8:cf:2e:90:a7:34:d1:df:35:48:98:5a:c3:e5:e2:03:50:
         63:03:35:dc:4f:e5:38:f9:e2:78:74:cf:05:83:4f:61:09:4e:
         ff:9f:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org