Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/34352e3138392e38382e302f32322d3234203d3e20323639353734.roa
File:                     34352e3138392e38382e302f32322d3234203d3e20323639353734.roa (raw, json)
Hash identifier:          33TNkzwUe2BOXyYjKREgWrxBSAkrfAlNWU7pDt1veOM=
Subject key identifier:   03:CA:CB:59:47:A5:34:47:BA:DD:7A:0D:C1:8E:CF:CA:26:5A:83:88
Certificate issuer:       /CN=4FCC7017425B1CB23CD1BE04EE4FFAD00F434520
Certificate serial:       506AA65C21FBEF44C60EA8B3075AC10D749A6619
Authority key identifier: 4F:CC:70:17:42:5B:1C:B2:3C:D1:BE:04:EE:4F:FA:D0:0F:43:45:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/34352e3138392e38382e302f32322d3234203d3e20323639353734.roa
Signing time:             Thu 04 Apr 2024 08:16:23 +0000
ROA not before:           Thu 04 Apr 2024 08:11:23 +0000
ROA not after:            Thu 03 Apr 2025 08:16:23 +0000
asID:                     269574
IP address blocks:        45.189.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6a:a6:5c:21:fb:ef:44:c6:0e:a8:b3:07:5a:c1:0d:74:9a:66:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FCC7017425B1CB23CD1BE04EE4FFAD00F434520
        Validity
            Not Before: Apr  4 08:11:23 2024 GMT
            Not After : Apr  3 08:16:23 2025 GMT
        Subject: CN=03CACB5947A53447BADD7A0DC18ECFCA265A8388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:73:f0:c0:09:4f:13:ae:54:7a:7e:d6:f9:
                    1a:9a:44:ca:1f:4c:2a:81:ba:f6:cb:dc:15:58:44:
                    57:2b:ba:81:c4:5f:bf:85:2f:22:d5:1f:b0:43:47:
                    e2:7d:47:43:1d:44:6c:7f:dc:87:4e:dc:bd:3f:68:
                    6f:0c:eb:46:f6:3f:e1:30:dc:a8:37:5d:af:e8:ef:
                    f2:00:e3:6c:b7:32:f9:84:b0:41:65:75:20:23:54:
                    d4:e5:f9:3d:e7:dd:24:4b:c7:be:0c:03:ee:d0:e9:
                    e1:be:7e:f5:b2:8a:4b:e3:e5:70:7e:ce:da:54:20:
                    74:a5:41:35:be:04:d7:35:e5:b7:08:9c:45:20:2f:
                    81:a8:01:c0:66:06:a0:21:87:23:1d:58:dc:0c:c6:
                    6c:48:41:2f:bf:33:c3:3c:f7:01:cc:7d:95:fb:f8:
                    ef:8b:2d:4e:fc:38:59:32:6c:65:c5:4f:b3:98:42:
                    2e:01:95:e1:87:28:d7:f9:64:e9:07:9d:0f:71:35:
                    30:4a:b2:a4:b9:4f:be:f9:85:9a:2c:69:42:59:48:
                    91:2e:3c:29:71:e0:3f:e0:43:df:07:6e:da:07:4a:
                    4a:b4:95:c3:fa:92:26:e0:f7:d3:46:5d:32:80:26:
                    47:56:8b:b5:3d:cc:09:2a:7f:17:09:d8:7a:cd:34:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CA:CB:59:47:A5:34:47:BA:DD:7A:0D:C1:8E:CF:CA:26:5A:83:88
            X509v3 Authority Key Identifier:
                keyid:4F:CC:70:17:42:5B:1C:B2:3C:D1:BE:04:EE:4F:FA:D0:0F:43:45:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/34352e3138392e38382e302f32322d3234203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:87:39:1a:6e:72:9f:55:e9:f6:13:cd:11:5f:39:0c:a4:19:
         a0:11:6d:12:35:e5:bc:be:b0:dc:ae:3f:77:3c:40:9c:39:9b:
         a5:4a:0b:5f:0b:b8:c9:c8:49:1c:0f:eb:86:f5:93:ff:80:5e:
         e5:6e:3f:4c:db:39:67:c4:dc:d0:98:c6:30:98:e1:50:20:25:
         95:22:92:30:a3:9f:d2:53:03:5a:46:cd:5a:86:4f:c8:16:57:
         26:c1:ee:41:c6:d6:90:f1:5f:4f:90:0c:e1:67:4e:12:a5:82:
         19:af:01:d3:bc:c1:5b:61:72:8a:67:7a:f9:cb:e2:23:86:76:
         b3:93:c4:5c:dc:97:a6:e8:84:fd:33:e4:28:08:6c:d2:2f:f4:
         da:42:39:de:e3:1a:77:97:a6:0d:70:72:d6:ea:22:93:2d:73:
         22:f4:8d:55:91:44:20:be:0c:3e:07:55:07:4a:ec:27:3a:1b:
         12:8f:46:6a:0f:27:38:64:c4:2d:af:07:ed:73:2c:07:36:9e:
         bc:f2:19:fb:f5:47:5c:c7:2a:cc:01:10:33:72:16:f9:21:9d:
         c0:8e:66:ae:45:a1:97:14:a7:23:ee:43:a2:b8:08:d2:66:ab:
         1e:6f:bf:d4:3e:da:1b:1a:3a:61:8e:64:7b:a6:ee:57:a4:26:
         dd:13:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org