Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139392e302f32342d3234203d3e20323632363136.roa
File:                     34352e3138352e3139392e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          15KG2ALn7z6pGj9rBWwEItWBcFcbSCzvdQZmHx5cB1k=
Subject key identifier:   63:A6:83:A8:4C:8F:38:E4:2C:CC:57:7E:3F:DC:4C:5D:81:F2:D4:B2
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       25528EC7F54239A873BB2A5A1BAA3CB8820CC562
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139392e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:39 +0000
ROA not before:           Thu 04 Apr 2024 04:30:39 +0000
ROA not after:            Thu 03 Apr 2025 04:35:39 +0000
asID:                     262616
IP address blocks:        45.185.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:52:8e:c7:f5:42:39:a8:73:bb:2a:5a:1b:aa:3c:b8:82:0c:c5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:39 2024 GMT
            Not After : Apr  3 04:35:39 2025 GMT
        Subject: CN=63A683A84C8F38E42CCC577E3FDC4C5D81F2D4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:d7:21:0d:29:77:bd:6e:10:49:26:cf:3f:
                    39:e5:43:8f:4a:e3:f0:2f:15:1d:1b:a3:0b:18:6f:
                    ab:bd:36:17:a0:bf:4d:bd:5e:74:f6:55:8e:a3:e4:
                    ca:f3:f1:f2:ae:84:8b:66:a1:d1:5e:42:be:d6:ba:
                    be:6a:9e:98:f7:a1:39:c2:fa:e6:44:79:b2:2c:f4:
                    9e:2d:7d:43:ca:b2:54:f6:bf:52:7b:5c:0b:8c:68:
                    16:7f:d2:d2:40:61:d5:2d:57:5a:cc:e3:e7:34:3f:
                    52:46:d1:cc:30:ba:af:f1:07:50:80:18:88:07:c1:
                    1d:ba:0f:0d:6e:6a:6b:07:3c:9e:fe:57:24:22:aa:
                    33:24:29:0b:e6:42:4b:af:51:23:b4:65:d6:b1:db:
                    4d:2d:d9:4d:e1:29:75:06:c6:02:aa:b5:ed:60:69:
                    e2:cb:f3:59:81:23:e4:3d:b3:89:f5:c8:66:a0:65:
                    a3:44:a6:b2:7c:74:2c:68:ec:8f:0e:17:6b:e2:f2:
                    db:50:52:92:8c:20:5c:f4:d0:0d:18:08:93:36:26:
                    85:71:02:c6:78:b8:af:c1:7c:d4:8a:c2:8e:33:81:
                    ae:16:91:02:66:8c:77:ce:15:17:af:33:11:d9:f9:
                    7f:c2:ff:c5:d9:19:2a:23:5f:d2:7e:d2:3a:ae:7f:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:83:A8:4C:8F:38:E4:2C:CC:57:7E:3F:DC:4C:5D:81:F2:D4:B2
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139392e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6d:b1:d5:3c:38:0e:e0:3f:68:ad:6a:ef:f7:65:79:ff:d2:
         f0:11:04:05:5d:97:da:b0:18:39:15:5e:2a:87:57:aa:ca:73:
         90:1c:4f:44:8f:d7:c1:3a:ac:7c:e4:de:6e:56:e8:59:e3:ed:
         81:be:a2:76:29:e2:6f:16:09:81:94:a0:69:4d:fb:4f:0e:2a:
         a1:f0:c1:a5:1e:d9:f4:28:31:57:b7:2b:d6:f7:4e:aa:10:e5:
         fc:cb:69:8d:b4:c9:9d:c7:8e:70:27:88:1b:40:6b:0a:ad:c3:
         64:49:a0:a3:eb:3a:d0:26:a2:6a:e6:03:0c:31:96:88:2c:a1:
         9d:45:40:ec:0d:b6:4b:70:13:cf:00:92:8b:ab:01:de:02:87:
         0e:a5:44:40:f9:4f:7c:a9:a0:cc:a3:16:6b:6b:c9:63:0f:b8:
         5e:44:29:c8:c3:9f:3f:db:ac:c0:66:a8:25:61:9c:67:9e:46:
         92:f7:5b:eb:b8:69:0d:68:28:56:39:b9:f6:d9:01:9a:a5:75:
         f2:3a:46:06:5d:2f:b8:6d:86:22:3d:7e:26:37:77:14:8e:37:
         d7:e6:3f:de:04:de:0d:97:18:0e:d4:20:88:fe:ff:93:44:54:
         01:23:53:8a:b5:13:c3:6f:a3:47:4e:23:a5:de:70:10:8b:8b:
         e3:5f:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:30 2024 by rpki-client on console-ams.rpki-client.org