Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230362e302f32332d3233203d3e20323638393231.roa
File:                     34352e3137352e3230362e302f32332d3233203d3e20323638393231.roa (raw, json)
Hash identifier:          e+UQJn+31kCB6ospVJncqT/njaIamYVFdSB5ufyKaiY=
Subject key identifier:   0B:F0:47:2B:12:EF:A7:5E:00:86:4D:CC:86:04:39:42:96:95:59:E5
Certificate issuer:       /CN=E72BD72CA25320A444880C04AC90CC5F3D638430
Certificate serial:       4A1A9140E2F135CCCAFD8F03CF6E0B824813739D
Authority key identifier: E7:2B:D7:2C:A2:53:20:A4:44:88:0C:04:AC:90:CC:5F:3D:63:84:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230362e302f32332d3233203d3e20323638393231.roa
Signing time:             Wed 03 Apr 2024 23:37:29 +0000
ROA not before:           Wed 03 Apr 2024 23:32:29 +0000
ROA not after:            Wed 02 Apr 2025 23:37:29 +0000
asID:                     268921
IP address blocks:        45.175.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.crl
                          rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1a:91:40:e2:f1:35:cc:ca:fd:8f:03:cf:6e:0b:82:48:13:73:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72BD72CA25320A444880C04AC90CC5F3D638430
        Validity
            Not Before: Apr  3 23:32:29 2024 GMT
            Not After : Apr  2 23:37:29 2025 GMT
        Subject: CN=0BF0472B12EFA75E00864DCC86043942969559E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:07:f3:b3:87:42:99:82:af:ba:3c:32:d5:
                    2c:3b:08:58:32:f6:cb:b3:a6:f9:a1:1f:b6:6f:91:
                    05:1c:7c:94:40:0e:dc:b3:95:9c:04:1a:b6:9e:25:
                    35:0b:f1:37:a1:b8:f3:a4:cb:a9:cc:10:1f:b7:97:
                    d4:30:f0:da:0f:17:55:d0:cd:56:08:28:63:93:12:
                    3c:0f:67:c7:ce:7d:e5:59:74:fb:4e:0c:b5:21:5c:
                    7d:84:e7:67:54:46:61:69:53:9f:cc:cb:96:5a:95:
                    2c:48:3e:5e:81:7e:0c:2b:dd:dd:3e:bc:83:d2:7e:
                    7c:00:03:3a:be:c9:ec:92:e4:1b:a4:69:aa:86:2a:
                    b6:42:7c:c5:24:5c:84:9b:17:bf:c6:64:41:70:64:
                    dc:6c:47:4a:54:c0:67:de:4c:c0:d3:0f:a0:1b:cf:
                    b1:7b:19:63:f9:61:72:35:21:c0:48:9c:23:81:a7:
                    84:23:f3:49:28:e5:34:cf:a7:1b:eb:d0:cf:6d:dc:
                    1c:a6:61:6f:f8:bc:75:f6:a5:a8:d8:cc:7d:07:a8:
                    86:d3:ea:25:bb:b8:b1:79:54:b0:7b:1a:de:f9:09:
                    ef:da:c6:bb:9b:fb:3e:bf:46:7b:79:85:4e:d6:15:
                    4e:d5:16:86:95:ec:1a:4d:8a:97:2f:74:aa:aa:dc:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F0:47:2B:12:EF:A7:5E:00:86:4D:CC:86:04:39:42:96:95:59:E5
            X509v3 Authority Key Identifier:
                keyid:E7:2B:D7:2C:A2:53:20:A4:44:88:0C:04:AC:90:CC:5F:3D:63:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230362e302f32332d3233203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:5f:83:fb:77:c7:f2:e6:34:d9:39:2c:a3:0e:5f:8e:d0:
         e1:98:9f:1a:c3:7e:0b:63:87:d9:04:0e:d6:26:56:b1:ec:4e:
         d2:22:ba:01:f8:73:ad:39:99:f5:5a:b9:fb:d6:57:43:3a:0d:
         7c:8f:1f:fc:4d:7e:97:ca:e2:90:7d:1e:cc:5a:3f:6d:56:0f:
         ce:cf:22:d4:1b:f6:9f:ba:99:0b:13:78:a8:c4:8b:34:d9:76:
         e2:20:6b:cb:39:af:1f:fd:d6:00:33:d1:ca:46:f0:a3:2a:bf:
         2a:ca:1c:86:ce:d9:74:61:cf:e3:7d:1c:c7:2d:e4:74:8a:5f:
         03:38:44:ee:85:52:a0:ea:87:80:50:17:30:0e:54:d9:5d:5b:
         3c:44:40:f4:a3:0b:39:c2:d7:7f:4a:17:0c:49:b6:76:dc:cb:
         77:2d:a1:29:8b:3d:ec:dd:1b:cb:3c:ad:36:e7:ea:12:d0:e2:
         e1:8e:fc:b1:8b:9b:5c:62:9d:f0:06:73:67:81:27:9f:42:81:
         e8:69:9d:c5:b3:b3:aa:fa:d7:d9:a6:b4:55:b6:9b:a3:c8:87:
         81:f7:84:9b:fa:6c:2a:6d:ca:78:62:e6:c3:ca:d4:07:3f:92:
         0d:69:91:04:ff:14:02:2a:63:80:55:0f:6d:91:de:46:a8:ec:
         bb:8f:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:25:06 2024 by rpki-client on console-ams.rpki-client.org