Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa (raw, json)
Hash identifier:          Nj/ll+WRpFTC9PXCwQx7fiKQZJiPzuRKIwa0uvGwNzE=
Subject key identifier:   93:22:3E:97:33:B7:53:0F:74:E7:21:98:94:1F:72:58:B1:DC:B6:24
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       65EF29D425E0C9643647B43113ABE8D2DFF93038
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa
Signing time:             Fri 12 Jul 2024 15:01:49 +0000
ROA not before:           Fri 12 Jul 2024 14:56:49 +0000
ROA not after:            Fri 11 Jul 2025 15:01:49 +0000
asID:                     268960
IP address blocks:        45.176.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ef:29:d4:25:e0:c9:64:36:47:b4:31:13:ab:e8:d2:df:f9:30:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jul 12 14:56:49 2024 GMT
            Not After : Jul 11 15:01:49 2025 GMT
        Subject: CN=3082010A028201010098A97E7A953CDB00F8F807DEB0E924DB99F632A2608BC46D3407603436EC23FF6DDE6C0568182D8BBADC0AD3BF60705D1BB41B7BD3E2184C5CA64FB86086C84FA64B2E633C8CB4005422689D33FA525B9D79D50A72B185DFD297630C002B0FADC668CCE503EB24D335AC7F0221CEA25B891A479C34E007643C7FF362CF6DCA360F864017654AF91A55DA4D0973C4F5CDF2A2FB6AADE846710709A3D2CA347F36639B5C4022A1FEB6564B3D92224AD81E9995BF6BB0D4BD85146B650D6A8F57882E66FCC1B56A6113E5F70F440EC2B783E6B26F63AEBEF606CC9C39D5540A33F03C09DD7BE29E568DB6D91CDA0B2FB03F2CAF13B21BFDE7C54EB32B82F1C1F0DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:7e:7a:95:3c:db:00:f8:f8:07:de:b0:e9:
                    24:db:99:f6:32:a2:60:8b:c4:6d:34:07:60:34:36:
                    ec:23:ff:6d:de:6c:05:68:18:2d:8b:ba:dc:0a:d3:
                    bf:60:70:5d:1b:b4:1b:7b:d3:e2:18:4c:5c:a6:4f:
                    b8:60:86:c8:4f:a6:4b:2e:63:3c:8c:b4:00:54:22:
                    68:9d:33:fa:52:5b:9d:79:d5:0a:72:b1:85:df:d2:
                    97:63:0c:00:2b:0f:ad:c6:68:cc:e5:03:eb:24:d3:
                    35:ac:7f:02:21:ce:a2:5b:89:1a:47:9c:34:e0:07:
                    64:3c:7f:f3:62:cf:6d:ca:36:0f:86:40:17:65:4a:
                    f9:1a:55:da:4d:09:73:c4:f5:cd:f2:a2:fb:6a:ad:
                    e8:46:71:07:09:a3:d2:ca:34:7f:36:63:9b:5c:40:
                    22:a1:fe:b6:56:4b:3d:92:22:4a:d8:1e:99:95:bf:
                    6b:b0:d4:bd:85:14:6b:65:0d:6a:8f:57:88:2e:66:
                    fc:c1:b5:6a:61:13:e5:f7:0f:44:0e:c2:b7:83:e6:
                    b2:6f:63:ae:be:f6:06:cc:9c:39:d5:54:0a:33:f0:
                    3c:09:dd:7b:e2:9e:56:8d:b6:d9:1c:da:0b:2f:b0:
                    3f:2c:af:13:b2:1b:fd:e7:c5:4e:b3:2b:82:f1:c1:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:3E:97:33:B7:53:0F:74:E7:21:98:94:1F:72:58:B1:DC:B6:24
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:41:3c:8c:42:4a:72:90:de:77:f7:fc:37:eb:c0:e3:70:90:
         a7:7d:08:b0:5a:9e:cf:33:58:3b:06:cb:63:93:6a:58:36:e5:
         32:0d:fe:75:89:ba:40:c4:65:60:93:91:9f:40:0b:d8:79:81:
         a3:14:2e:e6:e2:a9:5a:59:8f:c0:55:cb:15:b9:53:88:01:f9:
         5f:cd:b6:36:81:d8:46:b2:78:59:5a:c4:42:54:4d:71:5d:7c:
         69:2f:c6:3c:95:ad:e0:02:4f:b3:86:4a:5a:12:f0:21:9e:a0:
         34:6c:bb:5d:45:d7:e2:91:51:87:7b:7d:74:d4:a6:8b:32:d0:
         8a:bb:f4:7d:9f:a6:18:0b:5b:79:36:e6:cc:ea:1b:75:72:c7:
         d5:39:83:bc:bd:eb:43:ab:75:c2:b8:93:21:c7:06:3d:02:53:
         01:4b:59:01:fc:41:9d:79:37:9c:64:f6:6f:85:80:da:d5:d3:
         77:c8:2d:e6:b5:0d:e7:d4:54:ac:4e:fb:ae:47:f4:8e:77:46:
         2a:6c:e7:58:a2:c2:9b:68:0a:8b:29:c6:e8:98:f1:67:ac:40:
         cf:f1:f6:94:3c:11:4b:40:60:98:89:8a:96:cc:39:3c:b7:20:
         2e:5a:ab:84:55:0f:bb:4f:0e:48:11:0a:22:42:81:db:f5:b8:
         3f:03:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org