Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32332d3233203d3e2031.roa
File:                     34352e3136362e35322e302f32332d3233203d3e2031.roa (raw, json)
Hash identifier:          2GIHg8GcnWBpXW7aF98DxkdV5D4ZC+ywpiJhh83565Q=
Subject key identifier:   50:AE:8E:86:28:7E:58:12:9D:F4:F3:9E:6F:2D:5F:02:67:82:BB:87
Certificate issuer:       /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial:       567ED3F0DEBD2BC4CB2EEEE84F649BE4671BE628
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32332d3233203d3e2031.roa
Signing time:             Thu 04 Apr 2024 09:33:01 +0000
ROA not before:           Thu 04 Apr 2024 09:28:01 +0000
ROA not after:            Thu 03 Apr 2025 09:33:01 +0000
asID:                     1
IP address blocks:        45.166.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl
                          rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 May 2024 13:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7e:d3:f0:de:bd:2b:c4:cb:2e:ee:e8:4f:64:9b:e4:67:1b:e6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
        Validity
            Not Before: Apr  4 09:28:01 2024 GMT
            Not After : Apr  3 09:33:01 2025 GMT
        Subject: CN=50AE8E86287E58129DF4F39E6F2D5F026782BB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:d1:55:5b:58:42:c4:4e:c1:69:7f:b0:5d:
                    39:92:ec:28:1e:84:d1:1a:1f:2d:79:2d:65:1e:42:
                    97:c4:b7:99:47:20:79:19:38:e1:b6:e4:22:fd:54:
                    82:9b:14:d5:7c:76:f4:7c:1e:73:5a:39:91:70:c2:
                    1f:8e:f5:37:ec:80:e0:cf:ec:4c:c4:2f:f5:13:25:
                    c1:66:57:a1:e3:a1:78:1c:b6:f8:49:2a:d8:43:bb:
                    e7:aa:60:44:43:13:66:86:ee:07:bc:80:29:f4:9c:
                    82:30:84:b9:63:7b:ad:ad:89:47:51:ab:4a:29:ed:
                    ac:d3:dd:ff:6b:a0:2a:6e:7a:ca:c5:d6:ad:28:b6:
                    55:13:31:f4:c1:46:bb:26:3f:1e:c2:18:de:9a:04:
                    e6:b0:83:3e:66:12:38:23:37:bb:2e:75:96:bf:20:
                    c0:83:b7:7e:fa:5b:96:9e:56:9b:c3:76:ea:a3:09:
                    b7:76:34:97:fc:06:7c:5e:3e:bc:05:3f:fd:e4:f8:
                    66:cc:c5:91:22:3b:93:73:59:48:ce:45:3e:c4:31:
                    54:86:7e:15:54:33:5a:37:4e:b0:c3:be:49:e1:03:
                    2f:a3:f1:64:55:3d:45:6f:ef:75:0a:be:c2:33:e1:
                    03:0a:35:5b:fd:fb:9b:4e:00:da:2f:60:12:cd:0f:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:8E:86:28:7E:58:12:9D:F4:F3:9E:6F:2D:5F:02:67:82:BB:87
            X509v3 Authority Key Identifier:
                keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32332d3233203d3e2031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:19:8d:e9:80:f2:39:63:31:6b:66:db:8d:22:c7:45:10:99:
         13:37:78:4b:a4:6e:f4:8c:ac:1c:35:09:21:67:b4:24:99:b9:
         8b:62:e2:44:e7:15:44:b0:51:63:5c:c8:ef:99:df:78:b0:0a:
         8d:0a:42:53:36:4b:e2:90:de:96:e9:2d:23:0c:58:8f:92:d5:
         2a:2a:a2:49:b7:65:70:c7:cc:32:02:7c:9a:8f:01:7b:8d:73:
         05:57:a3:28:2d:f1:e9:56:81:52:2c:72:42:5b:77:4f:fe:86:
         a1:8d:88:bf:70:d5:ec:59:39:cf:c7:29:09:0a:0a:89:47:a3:
         ed:9d:8e:50:7d:2b:06:69:c3:d1:c9:51:e0:05:0d:81:7e:70:
         21:dd:19:10:4c:5e:14:e4:dd:7b:47:50:42:8e:07:50:13:84:
         17:51:68:29:29:d5:c9:48:0c:a0:68:8f:76:e3:d3:15:38:a9:
         c8:6d:92:8f:3e:20:45:d3:ea:41:91:cb:16:e0:1d:8d:3a:86:
         bd:00:47:cc:88:39:d2:72:b1:f0:27:e1:6e:08:f3:d8:74:d0:
         87:c5:56:6c:51:62:7f:45:cb:cc:20:7d:f3:d6:13:7c:79:a5:
         41:9e:9c:6f:2d:06:fb:e6:0a:4d:e7:cb:9e:e3:57:ec:7b:e4:
         61:a2:12:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 18 13:39:24 2024 by rpki-client on console-ams.rpki-client.org