Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa (raw, json)
Hash identifier:          NPj7ZiTqPdIl1PYViN+5q8MsVZG53hyMZBumSGEIuQo=
Subject key identifier:   F8:59:94:9E:B8:99:59:D8:1C:51:4C:8F:57:15:1A:A0:76:6B:86:62
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       089084EF75E78EE924325823EB729A7B5A9BD982
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa
Signing time:             Fri 12 Jul 2024 15:01:49 +0000
ROA not before:           Fri 12 Jul 2024 14:56:49 +0000
ROA not after:            Fri 11 Jul 2025 15:01:49 +0000
asID:                     268960
IP address blocks:        45.176.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:90:84:ef:75:e7:8e:e9:24:32:58:23:eb:72:9a:7b:5a:9b:d9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jul 12 14:56:49 2024 GMT
            Not After : Jul 11 15:01:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:5a:54:c5:e0:4b:2c:f3:b0:67:00:30:a2:
                    f1:f7:67:26:81:93:dc:78:26:db:8c:f3:16:af:29:
                    60:94:c5:7e:18:88:b9:83:16:b7:b8:34:ea:b9:2c:
                    9a:2d:75:e8:8a:f2:14:d2:93:44:0b:db:17:75:be:
                    62:66:c2:34:04:c5:56:53:7a:85:f5:62:41:25:06:
                    f0:be:0f:bc:43:d9:df:62:82:03:e6:59:5e:72:b8:
                    98:0a:01:f0:7c:c3:6b:8e:bd:77:14:ef:f8:ab:b0:
                    98:9e:9f:2b:7d:bc:49:98:d8:2d:68:38:73:fa:f3:
                    23:ef:d1:90:8e:83:a9:3e:04:ae:a1:96:d7:86:2f:
                    4f:47:92:4a:55:11:91:ee:25:ac:56:80:07:0d:2e:
                    ce:94:30:c1:9a:02:32:1b:d2:01:e0:5f:dc:bc:0c:
                    12:b8:4d:e6:ea:0e:df:0b:72:29:1e:c8:69:51:2c:
                    df:98:00:ca:09:b9:11:7b:b0:ba:92:2c:d8:66:a0:
                    97:4f:ea:cb:b8:42:52:e9:0b:0e:d0:97:ca:b7:fc:
                    f3:2f:e2:2f:61:64:d5:db:c9:a7:e8:f8:84:6a:41:
                    b4:75:92:6f:b0:c0:b4:8b:87:e6:5f:af:c0:82:d5:
                    d3:17:09:ba:cd:96:bc:f6:a5:de:8a:16:e3:65:e0:
                    e1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:59:94:9E:B8:99:59:D8:1C:51:4C:8F:57:15:1A:A0:76:6B:86:62
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:0d:93:8a:13:79:2c:56:eb:c9:b2:f3:6c:e4:ff:35:e5:e3:
         81:04:01:78:c3:c3:0a:b1:65:01:b7:8f:8f:64:cc:6b:64:23:
         ea:db:e3:0c:00:3d:29:bd:f2:3d:f5:dd:c2:fc:11:c0:a2:46:
         97:ad:df:a9:0e:da:d6:d9:4a:f3:07:44:47:47:e2:1f:53:cb:
         e1:c5:d8:c1:ac:0b:1b:56:23:d5:50:1c:51:cd:81:54:52:72:
         21:d0:e8:ec:5e:41:71:e2:e3:fd:a4:cd:b9:f0:70:bb:cc:d3:
         f3:75:e5:43:a7:be:6d:3d:ea:c4:d7:24:39:c6:53:05:51:cb:
         f7:61:8b:d3:d5:a5:09:7f:86:47:36:e0:1d:af:c9:d8:d4:9a:
         57:4a:30:57:26:56:38:24:46:d6:b5:dc:ae:6e:d2:d1:9c:e6:
         05:c2:9d:3c:2a:69:27:3a:4b:7c:04:83:2a:55:19:b3:9a:ea:
         ad:ad:58:10:32:66:d6:a2:27:9a:51:65:45:b8:64:d9:f9:5f:
         18:ee:15:e0:e2:94:5e:bb:6c:50:d9:89:ff:e4:12:59:7a:32:
         ea:01:0d:75:52:a4:1f:a1:72:4f:b0:8c:0f:c4:e2:eb:82:9b:
         15:0e:73:f5:3b:85:50:6c:a9:e8:88:75:34:84:de:c9:dc:ab:
         bd:9b:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org