Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa
File:                     34352e3136382e31322e302f32342d3234203d3e20323638303335.roa (raw, json)
Hash identifier:          7Acb0Z34OAgkvn85QTmbtoZJDuwbO1Uw3XhG5Eb0+no=
Subject key identifier:   A6:84:E0:4E:8E:21:06:63:F8:32:D1:0D:96:CD:76:B6:30:1D:CB:59
Certificate issuer:       /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial:       3C2EC27D229D964BF9DA74EBA7226553FE62564B
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa
Signing time:             Thu 04 Apr 2024 09:24:29 +0000
ROA not before:           Thu 04 Apr 2024 09:19:29 +0000
ROA not after:            Thu 03 Apr 2025 09:24:29 +0000
asID:                     268035
IP address blocks:        45.168.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2e:c2:7d:22:9d:96:4b:f9:da:74:eb:a7:22:65:53:fe:62:56:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
        Validity
            Not Before: Apr  4 09:19:29 2024 GMT
            Not After : Apr  3 09:24:29 2025 GMT
        Subject: CN=A684E04E8E210663F832D10D96CD76B6301DCB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:79:a2:40:88:12:f5:71:75:76:f9:14:a4:
                    9d:b1:a1:57:70:f0:7f:d4:71:79:bb:59:a2:2b:93:
                    c0:f3:33:65:66:b6:14:93:97:0a:3e:79:d0:ce:0f:
                    83:0b:79:56:58:33:f8:39:3d:78:86:77:bb:08:36:
                    49:54:cf:5d:7e:12:03:94:9a:36:23:56:48:84:75:
                    01:c7:56:ca:f9:49:6b:58:f4:0d:a4:78:d2:31:7f:
                    8b:56:a7:7f:f6:f1:60:9a:7c:0d:e8:d5:b1:76:f7:
                    55:56:71:b7:d9:f2:62:8d:7b:ee:81:37:65:c5:96:
                    fd:a4:55:ce:ab:46:dd:b6:3d:19:30:9b:38:e6:7d:
                    db:ac:ca:14:12:84:cd:a8:91:7d:d0:85:b3:02:88:
                    fa:33:47:02:e0:7f:41:c7:e4:78:e2:b5:94:2b:2e:
                    ec:01:94:2b:9e:2c:82:a9:c6:cc:8a:74:7b:d3:4f:
                    dc:30:bc:6a:ee:d6:35:17:97:7c:3f:e7:2e:1b:0f:
                    40:8d:a5:d6:35:c6:d0:7b:2c:44:dd:62:23:c7:41:
                    23:0e:5e:99:49:ac:2e:9b:1b:ec:86:3d:41:72:ec:
                    20:ae:e7:fb:53:60:96:e4:05:ce:00:d3:a8:1f:84:
                    17:86:6a:7c:1f:05:d6:01:9d:96:ea:0b:d4:21:56:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:84:E0:4E:8E:21:06:63:F8:32:D1:0D:96:CD:76:B6:30:1D:CB:59
            X509v3 Authority Key Identifier:
                keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e0:64:d0:da:a9:ce:95:a9:a6:fc:59:f5:d6:61:af:ae:45:
         9c:bf:6c:48:55:60:06:fb:9e:d8:b7:3d:41:57:99:1d:aa:fa:
         fa:e9:c6:5f:3f:b0:6f:db:1c:ba:86:48:4e:50:5d:0a:4f:50:
         77:92:98:93:3f:9d:5b:80:ec:80:3b:db:b2:c6:5b:56:40:1b:
         7f:3a:b8:2e:48:39:ee:80:d8:a3:35:39:79:6e:92:cf:d4:33:
         73:80:99:60:45:7d:0e:35:d3:07:1e:c8:f7:06:34:af:32:f2:
         9d:73:40:c5:d1:e5:cc:0e:a0:58:9c:fa:c5:95:d0:89:1b:84:
         b0:43:aa:ab:11:a4:42:74:da:0f:64:95:7c:d6:21:e8:9a:8c:
         51:43:49:9e:f4:96:1e:49:49:f5:b6:df:c7:2b:de:5d:b6:e4:
         ab:b3:1c:da:03:76:81:0a:ca:29:22:60:1e:94:91:3c:5f:fb:
         1f:58:2b:eb:84:b2:3c:fc:31:c6:99:af:3e:33:f8:3a:22:2c:
         04:90:cc:7d:cc:13:22:8f:7b:4e:27:28:69:94:bc:b2:75:a0:
         5c:65:1a:a7:1e:b1:ef:6b:ee:16:bd:b9:a4:6b:a0:4e:43:fe:
         40:fe:d8:5e:02:53:37:db:10:0d:8d:68:7d:3a:6d:c4:59:d8:
         c0:37:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org