Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa (raw, json)
Hash identifier:          3OLYFiH6JawipHHanWJqSpZd3Kzx0i64nLnRy1BkCq0=
Subject key identifier:   3B:81:75:33:4E:7E:F0:34:8D:FE:05:24:F4:27:F9:48:B3:37:31:E5
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       3493E8D78C8742F5532C694D22340DEAA9C750A5
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa
Signing time:             Fri 12 Jul 2024 15:01:49 +0000
ROA not before:           Fri 12 Jul 2024 14:56:49 +0000
ROA not after:            Fri 11 Jul 2025 15:01:49 +0000
asID:                     268960
IP address blocks:        45.176.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:93:e8:d7:8c:87:42:f5:53:2c:69:4d:22:34:0d:ea:a9:c7:50:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jul 12 14:56:49 2024 GMT
            Not After : Jul 11 15:01:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:9e:f8:5b:73:db:09:2e:4d:a4:bb:44:c8:
                    e9:38:04:b1:ee:71:51:8b:19:01:35:a0:ae:c3:7e:
                    9a:50:35:00:db:51:89:a1:41:36:4f:84:91:d0:c3:
                    79:d8:c5:5c:41:93:91:95:49:e8:96:ec:29:41:32:
                    b9:eb:5a:27:81:e0:23:92:4d:9f:91:55:4f:d0:7d:
                    95:0d:58:43:13:e8:08:61:51:f7:a4:51:d6:e0:b2:
                    18:94:c3:a4:41:25:a6:d8:10:be:e7:35:44:6f:f9:
                    6b:42:14:49:18:73:b4:0c:55:e0:58:49:9d:69:5b:
                    e3:ee:e4:7d:80:67:5a:eb:7b:dd:ba:ff:ce:20:80:
                    e1:16:8d:2d:a9:ce:65:88:9f:e6:52:86:fd:9a:39:
                    c4:13:af:77:7b:20:25:13:f2:12:4a:db:04:74:22:
                    87:b7:90:d5:65:1f:c6:3c:06:8b:70:aa:27:72:30:
                    dc:df:d0:39:94:c6:78:1d:fb:eb:59:9b:78:44:54:
                    b2:f2:7c:31:f2:cb:3e:85:7b:28:52:12:8a:84:74:
                    d5:53:b1:07:fb:c6:c2:b0:64:e9:7f:f7:e2:b5:09:
                    85:6b:8e:02:0f:84:ea:2c:d6:7a:85:fd:b4:4a:72:
                    96:0c:ef:02:fe:c4:d4:cd:e3:3d:04:f8:97:cc:da:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:81:75:33:4E:7E:F0:34:8D:FE:05:24:F4:27:F9:48:B3:37:31:E5
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:c3:69:2d:56:58:79:0f:68:04:bf:b5:d4:9a:b0:1e:9f:25:
         dd:23:fe:97:e7:9b:3d:a1:5e:ae:68:08:59:04:82:dc:cd:05:
         91:8e:37:12:56:45:17:9e:f6:39:9a:48:47:d1:60:bd:9c:30:
         86:b8:94:45:db:29:2d:f1:c3:b7:40:ec:c5:3b:ca:50:30:c4:
         b1:01:f8:69:75:27:57:2d:d2:9e:20:22:5d:db:80:5d:ae:e5:
         0f:02:3b:a9:8c:e4:ac:c7:52:ae:81:9f:40:db:89:6a:18:8f:
         90:22:cf:97:75:81:38:2b:6e:58:a6:22:3c:57:fa:e1:12:98:
         1f:8d:6f:45:6d:67:28:35:16:08:75:52:27:e3:b2:d0:f3:73:
         a1:e0:72:be:ca:fb:64:f1:e4:c9:07:06:bb:d6:40:4c:d5:ff:
         6d:3d:56:03:d3:dc:2f:50:1d:c0:89:3a:1f:06:ce:97:f5:4d:
         91:51:62:7c:aa:87:55:21:e4:b6:0c:af:0e:47:76:dd:a5:1e:
         8c:c7:aa:04:fb:36:77:5f:3a:5f:d2:e8:06:8c:95:39:e9:50:
         1d:54:7a:41:41:4d:d3:5f:34:29:cf:2b:31:48:4f:ae:14:4f:
         03:f4:9e:c9:b5:fc:27:57:ca:f7:70:f4:b2:1d:1e:d1:f8:02:
         6c:c8:77:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org