Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa
File:                     34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa (raw, json)
Hash identifier:          G0Gp4CGl+8vqh1W9j/hhhmG3yFoaXUDoD4N20PueF/k=
Subject key identifier:   2D:98:CC:D6:A3:42:45:75:19:86:CD:0A:23:EA:BA:57:5B:DA:78:28
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       2E7D407680B5753B2FB49D7F2D1A03054381CB4A
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa
Signing time:             Fri 12 Jul 2024 15:01:54 +0000
ROA not before:           Fri 12 Jul 2024 14:56:54 +0000
ROA not after:            Fri 11 Jul 2025 15:01:54 +0000
asID:                     268960
IP address blocks:        45.176.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7d:40:76:80:b5:75:3b:2f:b4:9d:7f:2d:1a:03:05:43:81:cb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jul 12 14:56:54 2024 GMT
            Not After : Jul 11 15:01:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:b7:63:2e:80:14:3f:7b:1f:d2:bc:33:a7:
                    a6:71:71:a1:40:71:ce:83:24:8d:e3:39:0b:b4:01:
                    f8:d2:55:5d:18:b3:ca:bd:6e:b9:8c:f9:bc:60:f0:
                    ed:11:c8:1a:e0:57:73:ce:8c:8d:48:11:36:15:11:
                    70:73:fa:55:36:24:c5:d1:e9:00:08:8d:03:f1:36:
                    db:34:79:9a:86:c1:8c:c8:d0:c3:b4:af:1d:df:ae:
                    98:53:63:65:bb:2c:50:fe:fc:54:0b:e7:23:4b:17:
                    ce:49:00:93:42:4f:2c:b1:f5:e7:17:04:45:85:be:
                    5e:b5:44:9f:8f:5e:df:95:98:7a:b8:d1:0e:f9:31:
                    a7:28:f9:3c:fd:27:75:29:f6:72:ce:f2:86:fb:c3:
                    9a:78:8d:b9:ca:c1:59:cb:36:96:42:2a:35:8f:3c:
                    71:5a:f9:57:6b:0e:31:19:0c:da:dd:e6:d0:18:00:
                    7e:28:61:23:74:63:f3:ca:56:87:35:fd:cf:c1:bf:
                    53:ca:37:a5:19:5e:1d:36:34:c9:49:73:2e:a5:b5:
                    5c:8f:f0:40:5f:c1:59:00:1c:7e:36:26:8f:6c:94:
                    e5:1e:b6:5e:b6:ed:3a:63:52:ef:fb:3f:a6:9b:2e:
                    5e:a9:66:50:f4:c5:7c:b7:5e:9e:15:44:44:38:08:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:98:CC:D6:A3:42:45:75:19:86:CD:0A:23:EA:BA:57:5B:DA:78:28
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e4:f1:cb:dc:0e:cb:fd:7c:d1:b1:14:29:e3:69:11:95:94:
         ae:17:f8:9e:29:4a:e6:48:2c:ef:3e:94:3f:c0:f7:b9:ca:a9:
         f9:80:a8:59:a7:5f:83:d3:b8:f7:e2:51:55:37:13:79:83:87:
         59:85:d1:00:b5:99:39:65:22:c9:ed:83:0f:f8:f7:2e:7a:73:
         67:a0:58:51:9e:b3:ff:bc:73:7b:3f:eb:06:aa:bb:a8:67:4c:
         e1:d2:b5:84:3b:cd:00:9a:00:fc:8c:45:10:72:36:3e:03:d9:
         7a:82:9f:76:99:22:a1:06:71:e8:1d:d3:39:4a:d1:11:14:07:
         75:2a:94:9b:11:2e:e1:8f:96:a6:36:75:39:81:62:ee:dc:52:
         dd:43:ff:4a:31:ac:e9:7b:4d:f6:63:9e:94:3f:04:8d:d7:0c:
         10:89:02:5c:16:fd:4a:e8:98:f9:6e:e4:36:88:95:d8:52:54:
         e6:97:2b:52:33:32:b7:b9:54:20:58:f1:17:4a:f6:33:4e:01:
         df:b0:e0:de:1a:a3:fa:74:54:f0:32:28:9b:b2:ba:53:05:e5:
         79:68:08:83:21:17:38:4b:81:4f:e8:05:d4:84:06:fa:c2:d5:
         cb:83:31:41:cb:f6:09:40:8b:2b:c3:41:3d:90:e4:43:c6:aa:
         99:c7:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org