Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32332d3233203d3e20323632363136.roa
File:                     34352e3138352e3139382e302f32332d3233203d3e20323632363136.roa (raw, json)
Hash identifier:          cUNoCKzlumLArM18t7CDAni7YaNRY+Pv2saUMTS5MAw=
Subject key identifier:   77:86:1E:4E:0D:30:30:19:60:A5:C2:22:0C:BF:59:55:33:C3:09:89
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       0FA4D472F743EFBA32CB74706EC813B40D02E8D8
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32332d3233203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:40 +0000
ROA not before:           Thu 04 Apr 2024 04:30:40 +0000
ROA not after:            Thu 03 Apr 2025 04:35:40 +0000
asID:                     262616
IP address blocks:        45.185.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a4:d4:72:f7:43:ef:ba:32:cb:74:70:6e:c8:13:b4:0d:02:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:40 2024 GMT
            Not After : Apr  3 04:35:40 2025 GMT
        Subject: CN=77861E4E0D30301960A5C2220CBF595533C30989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:e4:25:82:00:ee:a4:c5:67:02:88:d3:34:
                    98:83:31:ed:e7:16:95:b3:3e:3a:75:66:55:61:c6:
                    16:ca:f7:8c:3a:9e:32:53:62:27:10:e2:71:81:7c:
                    67:ad:fd:1c:56:9a:31:0b:ab:71:63:c0:78:06:e8:
                    65:fc:9e:18:cf:f3:41:04:55:af:03:42:b2:9c:9b:
                    f7:31:32:dc:41:25:38:08:79:ec:9f:6a:63:11:4f:
                    ef:fb:40:22:64:0f:14:bd:ac:88:54:52:99:8e:00:
                    1a:be:fc:d5:64:1d:21:a1:b9:f3:8c:89:22:91:9b:
                    03:79:00:b4:e9:0e:a8:b8:7d:31:74:da:48:44:de:
                    a8:73:5d:f0:1c:ab:6f:bb:34:a7:26:45:dc:bd:a0:
                    ba:ff:fb:bf:70:fc:16:36:19:c7:60:b0:7b:01:16:
                    d9:a8:a8:b8:82:35:83:bb:0a:90:cd:6c:f3:8d:1a:
                    95:f2:a5:9d:62:46:b8:59:7b:8a:73:97:09:34:71:
                    9b:60:c1:68:5f:9f:0d:9c:34:d4:60:93:46:26:cf:
                    1f:14:a3:ee:8a:76:04:e2:85:42:45:97:c8:b9:d0:
                    fe:4a:c0:58:5b:71:ab:42:22:95:bd:67:2a:ec:96:
                    77:f2:6f:08:94:54:d2:0c:27:3a:ac:57:89:99:88:
                    de:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:1E:4E:0D:30:30:19:60:A5:C2:22:0C:BF:59:55:33:C3:09:89
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32332d3233203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:ad:94:be:d5:01:bb:8f:5c:fa:8b:26:d7:84:c5:82:7d:eb:
         7b:5e:61:df:82:0c:1c:a5:f2:8c:f1:85:be:6e:60:d5:da:26:
         44:4f:34:65:f3:12:da:52:e1:a9:d1:00:25:15:11:aa:93:c4:
         b6:86:36:87:a2:6d:0e:cf:d7:ee:6d:6e:c3:76:96:14:2c:11:
         16:53:41:f4:3f:13:a2:a9:52:f6:a3:d1:c4:68:3f:a8:39:f0:
         0b:75:c6:5d:5e:aa:ea:e4:ba:a0:72:be:de:78:5d:37:20:40:
         fa:3a:52:37:75:e7:2f:d8:f6:cd:92:c8:0b:5d:4a:bf:8b:fe:
         fd:70:2b:aa:c9:4f:eb:08:ab:1c:c8:eb:4c:d5:00:14:ed:cd:
         55:f6:8b:73:32:9a:48:65:23:e6:fc:11:cb:b3:30:e9:3f:af:
         9c:b2:41:51:e0:4f:d7:e3:6f:82:c4:b2:77:5e:73:ba:19:b8:
         d8:c0:0e:74:45:1e:dc:a5:8f:36:2d:20:1e:78:e0:e9:79:b5:
         43:01:84:bf:8c:ea:8b:10:ae:56:86:a4:17:58:21:c5:55:9d:
         26:ce:c0:12:d0:76:2c:68:63:18:47:18:6c:bd:dd:d2:1a:f6:
         cb:1b:56:6d:a4:13:27:96:20:0e:7e:cf:55:68:0f:77:3a:25:
         df:bb:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org