Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa
File:                     34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa (raw, json)
Hash identifier:          B3WZJUuGuRR21EOcpoxzz1kGi7AvjeCT6o2YsLAY/QU=
Subject key identifier:   DE:E2:55:5D:B9:47:66:32:6F:B0:14:BE:C5:E9:11:7D:48:3E:2E:1B
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       1F5020B4F1449A5FF6443E96E4A51B9D0E2940D0
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa
Signing time:             Fri 12 Jul 2024 15:01:49 +0000
ROA not before:           Fri 12 Jul 2024 14:56:49 +0000
ROA not after:            Fri 11 Jul 2025 15:01:49 +0000
asID:                     268960
IP address blocks:        45.176.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:50:20:b4:f1:44:9a:5f:f6:44:3e:96:e4:a5:1b:9d:0e:29:40:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jul 12 14:56:49 2024 GMT
            Not After : Jul 11 15:01:49 2025 GMT
        Subject: CN=3082010A0282010100B397ED62B0E25471D3572F5459181E6C4CC6B31D4E8BC9FCF9960B6D590D0AE2F29AE5ED518201802E33C319F05CC55832C64E8ADE6B8CE3AB0F5640E9CA51139237D39C3512128475211750EC61F8D129BA94D376FDE3D8BE5ACDB3C7B9248A4B492454CB576F54CCB5CA3B645B14FD810437D11B26F701D73B59AAA87259DB312B55DFAB54E46163620FB2C5D210659DA002BD80D4CACD3A29093DCBAE6615A5D2BAB2093A6EDAAA37E13BD9C65713A06B8818AF920693DA1134954A36EC7803E20AC32AA942A2CC2667C2995317897B579C3C2B5DB198F3DB999820D06FCC8FE6827812FBBC954364DF1353309A3F00C8248F00BF4D1D60703F846126C4CB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:ed:62:b0:e2:54:71:d3:57:2f:54:59:18:
                    1e:6c:4c:c6:b3:1d:4e:8b:c9:fc:f9:96:0b:6d:59:
                    0d:0a:e2:f2:9a:e5:ed:51:82:01:80:2e:33:c3:19:
                    f0:5c:c5:58:32:c6:4e:8a:de:6b:8c:e3:ab:0f:56:
                    40:e9:ca:51:13:92:37:d3:9c:35:12:12:84:75:21:
                    17:50:ec:61:f8:d1:29:ba:94:d3:76:fd:e3:d8:be:
                    5a:cd:b3:c7:b9:24:8a:4b:49:24:54:cb:57:6f:54:
                    cc:b5:ca:3b:64:5b:14:fd:81:04:37:d1:1b:26:f7:
                    01:d7:3b:59:aa:a8:72:59:db:31:2b:55:df:ab:54:
                    e4:61:63:62:0f:b2:c5:d2:10:65:9d:a0:02:bd:80:
                    d4:ca:cd:3a:29:09:3d:cb:ae:66:15:a5:d2:ba:b2:
                    09:3a:6e:da:aa:37:e1:3b:d9:c6:57:13:a0:6b:88:
                    18:af:92:06:93:da:11:34:95:4a:36:ec:78:03:e2:
                    0a:c3:2a:a9:42:a2:cc:26:67:c2:99:53:17:89:7b:
                    57:9c:3c:2b:5d:b1:98:f3:db:99:98:20:d0:6f:cc:
                    8f:e6:82:78:12:fb:bc:95:43:64:df:13:53:30:9a:
                    3f:00:c8:24:8f:00:bf:4d:1d:60:70:3f:84:61:26:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:55:5D:B9:47:66:32:6F:B0:14:BE:C5:E9:11:7D:48:3E:2E:1B
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:7d:4b:85:d6:ab:84:8f:21:18:f2:9c:9e:b3:1b:ef:c8:
         e8:49:5d:03:7a:0b:67:d9:99:ee:73:e5:eb:3d:01:4e:1f:e2:
         5b:7f:b1:1a:d5:e4:18:4a:c2:33:fa:0a:cc:4b:43:d4:10:29:
         d9:ff:f1:93:e6:9a:e2:59:87:df:ba:92:44:b0:cf:b4:47:c0:
         ee:c4:0c:1a:53:8b:5c:0f:bb:b9:e8:22:f5:46:6d:a6:7b:97:
         96:4e:c7:05:e1:fc:54:e8:9f:7e:8d:50:ce:6b:4a:0f:9e:c9:
         8f:d4:99:41:df:93:a2:38:a1:b9:59:7c:35:ac:d7:a0:56:fa:
         d2:77:bd:de:3a:3f:ba:f7:20:e3:29:79:62:44:59:26:06:d4:
         bd:62:11:15:04:eb:7c:40:71:47:9b:1d:db:27:96:f9:7f:c3:
         a4:61:43:b2:7f:d5:92:9a:af:d2:63:50:ff:77:0a:58:b2:93:
         fb:7e:87:58:b5:b8:7e:56:42:c6:42:f7:32:26:10:fc:39:31:
         f6:5c:f7:b9:c7:d0:ce:c2:b4:c4:9c:d2:54:84:c1:62:3c:45:
         f1:56:f7:53:cb:49:b9:e4:ef:0e:c7:13:45:93:64:40:2b:ee:
         b0:3f:a0:6d:6a:bb:11:dd:21:87:62:e4:1f:d9:2e:8d:57:a7:
         1b:70:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org