Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/34352e3138322e302e302f32322d3234203d3e20323639323139.roa
File:                     34352e3138322e302e302f32322d3234203d3e20323639323139.roa (raw, json)
Hash identifier:          2g6lQ9dVnWA432KSJEI0oqt8FSmu11uZaIMnlHHo9sk=
Subject key identifier:   33:57:E3:DD:51:9D:5C:AB:DE:30:EB:FB:0F:1F:6F:72:D8:15:98:25
Certificate issuer:       /CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Certificate serial:       045FBE55CE94DBAAA2EE696DF539B24380C90F8A
Authority key identifier: 97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/34352e3138322e302e302f32322d3234203d3e20323639323139.roa
Signing time:             Wed 03 Apr 2024 20:25:00 +0000
ROA not before:           Wed 03 Apr 2024 20:20:00 +0000
ROA not after:            Wed 02 Apr 2025 20:25:00 +0000
asID:                     269219
IP address blocks:        45.182.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl
                          rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5f:be:55:ce:94:db:aa:a2:ee:69:6d:f5:39:b2:43:80:c9:0f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
        Validity
            Not Before: Apr  3 20:20:00 2024 GMT
            Not After : Apr  2 20:25:00 2025 GMT
        Subject: CN=3357E3DD519D5CABDE30EBFB0F1F6F72D8159825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:bc:c2:ec:b4:e7:df:7b:50:1b:51:90:2b:
                    a4:b4:eb:12:4a:17:44:01:d1:52:2f:3f:b7:fb:26:
                    20:90:ea:87:bc:06:8a:49:a0:74:d1:8b:52:f7:7c:
                    28:cc:0d:ea:c7:ff:25:c6:2c:fa:9f:39:8c:79:73:
                    b3:e3:7d:ef:8d:4e:9a:a3:60:76:9b:c1:d4:9f:4f:
                    0d:7a:17:ed:7d:10:0f:71:59:39:b9:f8:25:32:41:
                    31:26:da:16:7d:85:fa:77:04:21:03:68:99:b7:e0:
                    ab:f1:e0:a3:9a:fa:17:b6:f8:6a:79:74:11:9a:85:
                    9f:c6:76:a2:ed:46:73:83:e8:23:3f:0b:89:7c:fa:
                    ac:e7:1e:16:a7:4e:45:25:3e:3d:03:a4:c5:6f:3b:
                    f7:5c:45:56:ee:cc:5c:0a:93:5b:59:85:27:fc:4a:
                    c9:1f:a9:4c:f7:f1:06:e4:2b:2f:36:39:b1:2d:ee:
                    96:a2:bc:f7:13:15:5c:56:57:9a:ce:79:a3:2d:21:
                    46:c3:e7:4d:59:b4:3f:81:14:f0:ed:d6:9f:2f:90:
                    53:f2:98:6d:b3:f8:99:a3:21:b0:a0:82:22:c1:ed:
                    2a:1f:a4:5c:09:fb:95:e5:a2:35:07:8c:50:20:2b:
                    94:5c:87:f7:46:c3:d3:6f:60:98:96:80:92:3e:95:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:E3:DD:51:9D:5C:AB:DE:30:EB:FB:0F:1F:6F:72:D8:15:98:25
            X509v3 Authority Key Identifier:
                keyid:97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/34352e3138322e302e302f32322d3234203d3e20323639323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:e9:29:bf:a5:3e:cb:b0:96:9a:a9:34:25:cf:17:7f:c6:
         6f:ea:8b:15:a4:f8:db:7c:42:4d:25:15:0c:a2:a9:2a:9e:c7:
         4b:ea:a0:36:53:7a:28:0b:2a:e7:25:b1:38:b9:2e:42:f0:26:
         3a:09:95:03:da:fd:f3:c5:9e:b4:97:99:da:ae:cc:6e:81:32:
         70:23:35:a7:fe:7d:9c:34:6e:10:31:cb:fd:6d:c9:3e:36:48:
         62:26:e9:42:86:e3:ed:40:46:ab:4c:b3:09:83:36:b7:89:d5:
         86:db:c6:8c:6b:c1:b0:74:d4:5d:b4:7c:15:88:9b:23:31:5c:
         18:78:17:ee:1b:ac:68:fd:10:24:32:4a:04:69:88:11:8e:b8:
         9f:5c:f8:64:49:0f:b1:c2:09:e3:c7:4d:cc:0c:84:02:13:81:
         c9:ba:32:db:21:49:c2:ce:73:51:70:4a:b6:ad:e9:bc:6e:1f:
         7f:16:10:d0:60:fd:8b:4d:11:43:66:27:d9:15:0f:f1:10:a9:
         e2:8b:c3:47:85:a1:ef:ae:52:be:99:6e:0c:b8:55:2b:2a:2d:
         07:ae:7c:9d:d8:2d:1a:3d:00:9a:d0:40:5b:f4:0a:61:30:a2:
         9d:53:b6:f1:41:9d:3f:8f:20:c1:68:93:f9:c6:b8:84:12:e6:
         41:02:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:50 2024 by rpki-client on console-fra.rpki-client.org