Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32322d3232203d3e20323632363136.roa
File:                     34352e3138352e3139362e302f32322d3232203d3e20323632363136.roa (raw, json)
Hash identifier:          5HZ38L3oEgzmWLinoO1ygA2NDTo+PYaHj5lmPSCoKhY=
Subject key identifier:   1F:C2:81:06:A9:6D:D3:C9:B4:A4:EB:7E:54:77:BB:31:6A:5F:24:5A
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       5556746255C9DF6BE6D5EED47EF0FB5C58DA4696
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32322d3232203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:39 +0000
ROA not before:           Thu 04 Apr 2024 04:30:39 +0000
ROA not after:            Thu 03 Apr 2025 04:35:39 +0000
asID:                     262616
IP address blocks:        45.185.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:56:74:62:55:c9:df:6b:e6:d5:ee:d4:7e:f0:fb:5c:58:da:46:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:39 2024 GMT
            Not After : Apr  3 04:35:39 2025 GMT
        Subject: CN=1FC28106A96DD3C9B4A4EB7E5477BB316A5F245A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:57:3f:c8:82:15:68:2a:be:79:fe:43:b3:
                    95:3c:5f:11:6e:69:a7:25:cf:63:7d:01:4c:84:3b:
                    e4:b9:63:23:71:eb:ba:a3:77:02:6c:13:72:0b:63:
                    5d:ae:0c:1a:1c:68:79:3e:c9:64:e0:b6:4b:5c:29:
                    07:1b:c1:60:3a:d9:30:33:8d:96:be:d3:85:79:65:
                    2a:d7:83:29:78:ea:59:74:9d:7f:ed:7b:9f:11:1e:
                    4c:56:a3:e2:3f:fe:e2:dc:2d:fe:3d:e8:97:4c:69:
                    1f:52:5c:78:7b:0c:21:1f:94:e2:a9:06:3d:53:98:
                    c3:39:5a:7c:8f:17:c7:7f:e4:6e:bd:44:dc:4b:f3:
                    9a:9f:7d:0f:72:76:a3:51:9a:8b:8a:c4:5c:af:8a:
                    81:5e:a3:7c:4a:10:1a:1a:7a:ad:52:80:22:d5:93:
                    25:55:25:04:11:38:d8:1f:12:d1:19:00:f1:12:97:
                    0e:b7:2c:f5:12:93:06:96:d9:96:e7:22:71:19:9d:
                    88:70:c7:ed:5d:5a:ba:f3:d3:0f:50:a9:9f:90:ad:
                    9c:32:65:c6:22:ec:9c:50:44:1d:b8:eb:2f:af:e9:
                    0b:0a:1b:02:98:dd:17:8d:08:b1:9f:7f:b1:63:c4:
                    15:b4:a7:fa:b0:96:73:87:87:57:43:62:bb:23:94:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C2:81:06:A9:6D:D3:C9:B4:A4:EB:7E:54:77:BB:31:6A:5F:24:5A
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32322d3232203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:16:48:e7:1d:2a:08:39:3b:4f:d4:c7:d6:d4:53:22:bc:
         58:21:81:7b:39:44:f8:3f:0b:d1:e0:fd:9b:61:90:a0:bb:cc:
         be:8f:1e:c0:31:f0:50:af:69:58:de:35:2a:b9:3e:88:4f:25:
         34:4b:ac:8e:c6:7f:85:01:4b:ab:cd:45:7b:66:68:37:3d:7f:
         e3:2c:86:88:5a:57:a6:59:89:43:c3:13:ef:3f:74:34:38:47:
         6e:f8:18:90:90:51:c8:a2:1f:fd:94:68:1a:c9:7a:d3:63:b8:
         2f:ca:5d:c9:d4:f2:a2:4e:54:72:1d:a5:11:8b:bc:cf:ca:7a:
         d7:34:9f:55:5c:6c:2b:52:40:35:14:21:14:8b:b1:4b:26:04:
         a8:27:06:cf:9d:53:6a:1c:7b:e7:df:02:71:04:81:1c:bf:8f:
         ce:f2:ee:cd:33:b5:6d:70:1b:0b:c1:9a:ca:15:f5:ed:7e:19:
         1f:a2:e3:67:13:0c:cf:05:02:7f:c9:39:2e:68:62:c2:62:fa:
         af:f2:e5:dd:43:a7:71:fc:60:50:f4:23:a6:61:bd:46:11:67:
         e4:cc:f2:b1:9e:60:e8:4b:f0:d3:d3:53:83:c5:b7:6c:26:4f:
         7f:21:26:21:a0:d8:96:14:c6:6a:32:4c:2a:a9:5c:9a:1f:f3:
         5f:15:04:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org