Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230362e302f32342d3234203d3e20323638393231.roa
File:                     34352e3137352e3230362e302f32342d3234203d3e20323638393231.roa (raw, json)
Hash identifier:          S9stzvMxfqT1MVs8N6PmCr9zFd0rsGbpYxxgf04W5rg=
Subject key identifier:   89:09:62:51:4A:31:D4:96:3C:D6:DE:E9:7B:EC:69:45:49:9A:08:EF
Certificate issuer:       /CN=E72BD72CA25320A444880C04AC90CC5F3D638430
Certificate serial:       13ABFB48F820BA151F8918F339F8E9A3EF21BAD2
Authority key identifier: E7:2B:D7:2C:A2:53:20:A4:44:88:0C:04:AC:90:CC:5F:3D:63:84:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230362e302f32342d3234203d3e20323638393231.roa
Signing time:             Wed 03 Apr 2024 23:37:29 +0000
ROA not before:           Wed 03 Apr 2024 23:32:29 +0000
ROA not after:            Wed 02 Apr 2025 23:37:29 +0000
asID:                     268921
IP address blocks:        45.175.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.crl
                          rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ab:fb:48:f8:20:ba:15:1f:89:18:f3:39:f8:e9:a3:ef:21:ba:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72BD72CA25320A444880C04AC90CC5F3D638430
        Validity
            Not Before: Apr  3 23:32:29 2024 GMT
            Not After : Apr  2 23:37:29 2025 GMT
        Subject: CN=890962514A31D4963CD6DEE97BEC6945499A08EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:85:48:1d:aa:eb:17:45:b9:ac:b3:af:28:
                    98:1c:0b:b9:cb:7c:f0:89:cb:cc:d3:dc:aa:1b:91:
                    d7:b7:34:17:d9:d6:79:cd:3c:e7:f4:3f:31:bb:9e:
                    ed:28:45:20:3a:80:b2:19:45:c5:a1:65:0e:d2:e8:
                    02:62:e0:6d:39:42:32:71:75:61:64:1d:52:f4:b4:
                    b9:98:35:db:5e:f1:63:7e:1c:8c:02:b1:b9:82:11:
                    4a:27:89:11:c8:82:a3:30:cd:17:ec:a9:97:48:1c:
                    72:8b:62:75:b8:17:37:03:0b:7d:bf:10:7d:89:3a:
                    40:4f:11:9b:b0:e9:3f:98:8a:7d:e7:ae:29:41:49:
                    b4:6d:c9:83:2e:b3:97:3b:00:b5:86:07:f5:67:06:
                    72:96:45:0f:cc:75:46:ce:2b:4f:76:87:28:cf:79:
                    70:27:25:a4:71:34:46:58:7c:e7:82:0f:7e:18:5e:
                    5e:96:0c:09:3b:87:bb:48:a5:b6:11:7b:9c:e9:71:
                    fa:82:c7:f0:59:09:5d:82:40:dc:94:8b:7f:ae:61:
                    1d:22:c9:2c:90:ff:50:f3:45:1d:f7:25:b3:d3:df:
                    62:50:88:c1:24:3a:11:81:e3:fc:e3:13:2f:5f:bc:
                    9e:4f:5e:df:e5:f1:25:01:eb:4f:96:3e:63:bf:f1:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:09:62:51:4A:31:D4:96:3C:D6:DE:E9:7B:EC:69:45:49:9A:08:EF
            X509v3 Authority Key Identifier:
                keyid:E7:2B:D7:2C:A2:53:20:A4:44:88:0C:04:AC:90:CC:5F:3D:63:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230362e302f32342d3234203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:7e:99:37:30:a7:3d:78:7f:20:8d:eb:2e:af:60:38:ca:
         02:4c:c0:0b:b0:a8:4a:c0:69:23:d3:18:59:c6:e1:13:b3:e2:
         bf:9e:3a:04:c1:c0:f1:0a:59:b4:e2:54:84:64:d6:80:3d:cf:
         d4:7c:df:a9:89:f6:ff:0b:40:0a:7d:49:3c:0c:b4:5e:43:f0:
         04:37:bb:52:eb:4e:49:d6:83:eb:42:1a:39:4d:7f:52:90:0d:
         eb:90:6b:6f:74:f2:35:a8:5a:91:af:53:a0:53:d3:94:89:d7:
         fe:e2:67:86:f8:95:28:2a:35:2e:89:2d:6e:0c:5b:8c:ae:ee:
         22:9b:99:c2:fe:a3:31:8f:f0:8e:94:ba:0f:5b:86:95:e3:de:
         61:a4:48:97:f3:f1:23:48:d9:2d:cd:08:2e:c3:91:c0:96:cc:
         40:f1:b9:67:99:cc:94:64:cc:2d:0e:e0:9d:2d:33:e2:c7:41:
         65:db:8e:96:af:6e:fd:57:07:f6:99:08:2d:d7:76:6e:a2:eb:
         33:73:0a:54:3a:85:84:4e:05:5c:74:e2:85:ad:62:13:59:4f:
         57:0d:08:29:f8:ad:ad:1d:5c:5c:c5:e0:75:c9:ac:d2:2e:ad:
         3c:bf:a5:35:36:ca:06:8c:02:ce:bb:0a:a2:ed:3a:d4:e0:26:
         f6:fb:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 07:37:27 2024 by rpki-client on console-fra.rpki-client.org