Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa
File:                     34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa (raw, json)
Hash identifier:          PsgThCLroLywOCmAZGMu60/OQDUDMO0uP5mQIiFY8n0=
Subject key identifier:   37:3A:6B:F6:E0:DE:B9:19:00:77:54:91:70:70:CF:EF:A2:64:F4:29
Certificate issuer:       /CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
Certificate serial:       18EB76CEEA64500829BE1BF0C417C9CAEEACFAA4
Authority key identifier: 98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa
Signing time:             Sun 03 Nov 2024 19:07:46 +0000
ROA not before:           Sun 03 Nov 2024 19:02:46 +0000
ROA not after:            Sun 02 Nov 2025 19:07:46 +0000
asID:                     268773
IP address blocks:        45.172.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl
                          rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:eb:76:ce:ea:64:50:08:29:be:1b:f0:c4:17:c9:ca:ee:ac:fa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
        Validity
            Not Before: Nov  3 19:02:46 2024 GMT
            Not After : Nov  2 19:07:46 2025 GMT
        Subject: CN=373A6BF6E0DEB919007754917070CFEFA264F429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:53:d6:0f:0b:34:60:0e:59:67:a9:f7:9b:
                    ea:25:a3:69:22:cb:19:7b:ef:2d:7b:1d:6a:2a:8c:
                    fc:c3:02:ec:f0:c3:1e:9a:7f:13:70:ea:6c:aa:11:
                    d7:d1:0a:43:ec:6d:cb:07:c3:c0:2f:32:58:2f:ed:
                    c0:67:98:b5:a2:07:4c:f7:56:29:b0:dc:50:82:bf:
                    03:69:25:e1:97:49:5f:d1:87:f3:ed:a8:87:8b:f8:
                    86:5f:7b:75:03:c3:38:51:85:7a:14:00:5f:1a:fd:
                    a5:9f:17:46:db:15:49:a6:b0:e2:cc:f4:e1:68:4e:
                    57:97:ff:7a:95:35:74:86:11:b2:b9:e9:1e:eb:50:
                    73:78:3d:40:9f:17:0b:84:a0:66:e4:60:af:88:e5:
                    b3:35:0c:ce:0d:8b:fe:62:59:bb:7c:31:66:3b:22:
                    c7:67:55:b4:71:18:10:ab:71:56:1b:66:c1:02:6a:
                    ea:99:2e:37:d0:31:e0:d4:37:6e:17:a5:68:7e:09:
                    74:c5:be:0f:18:3d:f1:8d:5f:fb:8c:44:36:31:a0:
                    14:b6:42:f3:93:41:6b:4a:70:d9:1a:9a:72:ff:06:
                    68:99:57:92:bf:30:1b:46:fb:4c:d6:a8:71:53:16:
                    c6:d5:14:7f:1b:fb:9c:14:e5:a4:a8:b0:eb:05:ce:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3A:6B:F6:E0:DE:B9:19:00:77:54:91:70:70:CF:EF:A2:64:F4:29
            X509v3 Authority Key Identifier:
                keyid:98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:6c:fd:5d:e5:64:7e:4c:4b:6b:c1:ea:55:b7:6e:29:12:7c:
         83:e5:3e:7f:c1:e4:1b:d5:c7:92:0d:95:f6:75:48:b2:17:92:
         41:1d:f9:19:6b:23:db:db:8a:41:6d:bc:6a:df:ac:b9:41:04:
         82:4e:d3:38:e5:b9:70:b4:32:59:e3:86:a2:bf:0a:08:de:38:
         ac:72:cd:06:e8:26:d6:4b:2d:e7:46:55:15:37:9f:72:d9:99:
         9f:25:b9:ed:c5:c2:cd:c3:45:4a:d0:28:e5:c4:ea:b6:47:8c:
         0f:65:f3:eb:6f:ef:e5:c7:7c:bc:1a:fc:f2:c8:15:ce:d2:c7:
         6b:eb:2b:94:ac:59:d1:e0:21:b0:dc:49:11:40:54:52:d2:8e:
         61:b4:ee:2b:8f:cd:eb:95:64:c7:09:63:7c:2f:d8:1b:ab:cd:
         1d:6f:64:06:17:15:6a:5d:6d:43:09:5b:95:e8:ea:a9:8a:7f:
         86:9c:eb:d3:86:00:80:37:e0:ae:94:2f:44:8c:71:19:55:17:
         b2:80:d9:99:b1:80:9e:b1:3c:60:ab:13:7a:b2:04:dd:a2:d0:
         7b:a8:df:ad:ff:44:86:41:91:b0:bd:e8:03:f9:9b:72:e6:15:
         36:d7:2f:70:08:3f:f2:35:d8:a3:15:55:2b:e8:f3:2b:77:7e:
         b5:dc:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org