Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32332d3233203d3e20323632363136.roa
File:                     34352e3138352e3139362e302f32332d3233203d3e20323632363136.roa (raw, json)
Hash identifier:          YvJfY60KpjC23ntKPnorxCEZj6eTP/meT3w+46vP7aw=
Subject key identifier:   05:C4:BB:7E:7B:57:1F:CD:1D:AC:85:19:36:1B:5E:B5:6C:BA:8F:D6
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       2348D086B8B3B76CBF4EF9157C55FCCCDF68FE93
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32332d3233203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:37 +0000
ROA not before:           Thu 04 Apr 2024 04:30:37 +0000
ROA not after:            Thu 03 Apr 2025 04:35:37 +0000
asID:                     262616
IP address blocks:        45.185.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:48:d0:86:b8:b3:b7:6c:bf:4e:f9:15:7c:55:fc:cc:df:68:fe:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:37 2024 GMT
            Not After : Apr  3 04:35:37 2025 GMT
        Subject: CN=05C4BB7E7B571FCD1DAC8519361B5EB56CBA8FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:70:a3:7c:de:70:e9:d0:c1:99:bc:62:65:
                    56:1c:64:ce:fc:ac:a0:20:24:72:5a:d0:2e:55:13:
                    af:33:f2:e4:8b:6a:9d:e4:6b:a0:ec:0a:fb:fc:7c:
                    b8:2f:f2:c1:40:ba:1f:58:4f:45:b7:a8:83:4a:7a:
                    b8:15:b4:8b:e0:00:8b:00:42:70:0e:36:50:5b:1f:
                    90:bb:b6:7c:2d:66:62:2f:e1:a2:00:64:b8:82:9e:
                    4e:2b:88:04:71:7c:68:b8:0d:23:63:6b:58:9a:7c:
                    35:bc:4f:0c:75:55:9e:06:1e:66:52:64:39:28:1e:
                    75:bd:b3:91:a4:ef:7c:51:d9:dc:4f:7a:06:21:62:
                    6c:27:e4:cd:6e:92:7a:74:7d:9d:f7:9f:59:52:de:
                    a0:d4:04:36:fb:77:bc:cf:50:92:ce:e8:3e:cd:3d:
                    8a:8c:d2:91:7e:ff:00:11:00:82:d9:73:5e:c0:14:
                    74:15:be:ce:a2:25:51:ca:63:e1:40:1e:18:f9:01:
                    cb:b0:3a:61:39:3b:1a:91:8a:85:da:c8:ee:2d:f0:
                    54:bf:a3:55:ec:d9:c7:f6:5b:85:04:16:18:1b:df:
                    59:67:6a:2a:3f:40:a5:0d:0a:0e:64:db:19:60:c8:
                    a9:1e:67:32:73:4c:b6:ac:f1:7b:85:ea:3d:2a:55:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C4:BB:7E:7B:57:1F:CD:1D:AC:85:19:36:1B:5E:B5:6C:BA:8F:D6
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32332d3233203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:fb:7d:88:e7:04:f1:86:fb:5b:c0:1a:19:8f:96:a1:96:
         b7:51:36:c5:19:c3:ee:15:80:c6:57:8f:8a:f7:ce:6e:d0:53:
         0c:55:3d:79:55:40:92:75:93:f6:07:1d:b0:4f:42:ec:b5:96:
         0c:43:67:ad:e5:43:fb:78:24:ce:ef:ab:8b:3f:89:53:5c:55:
         00:ba:bc:b6:d9:c0:c7:71:d9:0b:f7:bc:b4:59:70:07:32:2a:
         2f:68:26:d7:55:4e:d6:2d:b8:07:6b:c8:bc:81:ff:4b:71:0b:
         59:27:9f:8d:24:d0:14:22:b8:63:a8:e4:78:0f:bb:9c:8c:18:
         77:e9:3b:f9:6a:85:49:57:a5:4d:13:78:77:38:2b:9d:5c:d7:
         fd:f7:8c:79:9c:4b:68:c1:a4:25:0e:30:94:37:15:8d:48:33:
         a8:0c:83:a5:74:02:d0:f7:fe:c4:6f:ae:a2:68:ee:44:d4:a1:
         11:14:90:c4:d4:8d:c0:2b:48:ca:5c:14:98:f0:e9:b5:fe:43:
         98:79:5d:6a:0d:79:fb:7c:18:57:61:ef:e9:2a:75:5e:81:5e:
         29:56:4a:6e:80:0f:88:9d:72:c9:f8:92:8b:4b:b3:8b:90:a2:
         90:9a:31:11:de:2c:60:b2:2e:8c:28:14:33:b6:45:c4:66:fe:
         0d:b6:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org