Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa
File:                     34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa (raw, json)
Hash identifier:          kfuOqHQSGboetjZfH7o/VqTfXuAOH36KIeZBZnJf+ko=
Subject key identifier:   35:FC:35:C5:79:36:D9:78:F6:41:25:20:83:F1:F9:40:51:B3:36:2B
Certificate issuer:       /CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
Certificate serial:       782B3C9800811723C9E06238886FF80E1345B45D
Authority key identifier: 37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa
Signing time:             Wed 05 Jun 2024 18:53:03 +0000
ROA not before:           Wed 05 Jun 2024 18:48:03 +0000
ROA not after:            Wed 04 Jun 2025 18:53:03 +0000
asID:                     269115
IP address blocks:        45.178.240.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2b:3c:98:00:81:17:23:c9:e0:62:38:88:6f:f8:0e:13:45:b4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
        Validity
            Not Before: Jun  5 18:48:03 2024 GMT
            Not After : Jun  4 18:53:03 2025 GMT
        Subject: CN=35FC35C57936D978F641252083F1F94051B3362B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:23:fc:29:a1:2a:0c:69:8d:1a:60:91:10:
                    0b:08:16:fc:8c:7f:20:84:bf:5f:36:e8:64:24:56:
                    92:3a:af:59:65:8b:7d:88:ce:26:90:77:86:6e:ea:
                    f0:f5:7b:54:4b:81:b8:42:1c:dd:94:24:7b:5e:02:
                    9e:6d:6a:9d:41:ec:0c:f1:00:17:68:75:72:d9:72:
                    72:3c:ba:0b:10:ed:16:42:c1:57:30:5d:95:91:b2:
                    7d:1f:dd:d4:a0:51:85:28:fd:cd:ca:42:17:06:f5:
                    14:f5:f7:53:26:35:e3:60:fc:28:0f:96:c4:88:9c:
                    82:60:f1:55:f8:45:3a:c4:34:d4:f7:0d:89:70:6a:
                    a6:e9:f3:48:cd:23:7f:20:21:c2:06:38:48:36:4a:
                    74:81:6c:3d:41:a9:6f:28:ac:8c:af:e8:b3:47:63:
                    61:67:ac:5a:07:e9:2b:57:93:1a:06:c9:45:23:83:
                    65:a8:a4:d0:8d:c4:72:bf:a7:8b:8a:ac:8f:ff:03:
                    1b:89:2e:2d:d8:d7:32:68:3f:4d:b7:e7:9a:33:fb:
                    12:a8:51:a0:e0:88:02:29:b4:8d:a1:d2:a1:7a:42:
                    1b:c6:a5:af:03:04:54:6e:2e:7f:d9:9b:20:2f:cf:
                    e3:24:25:37:a5:51:bb:81:0f:32:ba:48:fc:1c:48:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:35:C5:79:36:D9:78:F6:41:25:20:83:F1:F9:40:51:B3:36:2B
            X509v3 Authority Key Identifier:
                keyid:37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:0e:9b:be:43:dc:35:72:8f:92:5e:1b:e2:77:0a:f0:64:
         35:f5:c1:d4:7e:65:6b:92:18:21:40:7b:95:ad:5f:3d:56:72:
         71:a9:ba:51:3a:5f:31:74:f8:3b:49:6d:30:3b:29:39:d8:42:
         55:31:97:f0:03:6e:6d:07:49:30:f8:47:a0:79:fb:90:20:d7:
         23:01:35:96:11:dd:38:1d:66:25:60:30:c5:f2:11:fa:73:bd:
         9f:34:13:60:9b:c3:fc:09:c1:70:f2:15:f8:6d:08:36:ac:99:
         34:f9:0d:ff:26:ff:df:55:b7:6a:5d:a9:ca:90:78:da:bd:cf:
         3d:25:97:a0:f0:65:1d:a5:cf:97:ea:17:25:35:c4:c5:c1:82:
         63:aa:32:52:ce:91:90:ff:2e:4e:de:a8:d1:98:b0:83:e0:14:
         56:3d:58:62:1f:1d:3d:65:0c:34:04:40:da:b9:2e:ce:cb:7b:
         a0:55:c3:4d:f4:c9:bf:8c:6a:f1:14:93:b6:db:be:f4:ac:50:
         41:a0:81:26:a6:5c:48:2c:93:3b:81:bb:4e:31:9c:bd:4a:04:
         fc:fb:59:3c:4a:82:84:c2:f8:43:6c:88:2b:35:7f:bf:35:11:
         ff:af:3e:13:0a:ba:c5:ac:3a:1d:91:4d:de:3e:f6:65:35:eb:
         28:04:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org