Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa
File:                     34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa (raw, json)
Hash identifier:          C8ereJzlau68D8eDiKMvbfweCKeXus+z0Eoax3MGKow=
Subject key identifier:   AC:FF:03:2A:13:B8:91:28:1A:B7:C0:70:BB:07:31:B0:5F:F7:ED:13
Certificate issuer:       /CN=E9559354384683BF395C07B365A088C5F97E64BB
Certificate serial:       2CC55245A9B3E40626D549ED52B60D6A2084D79B
Authority key identifier: E9:55:93:54:38:46:83:BF:39:5C:07:B3:65:A0:88:C5:F9:7E:64:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa
Signing time:             Thu 04 Apr 2024 05:20:13 +0000
ROA not before:           Thu 04 Apr 2024 05:15:13 +0000
ROA not after:            Thu 03 Apr 2025 05:20:13 +0000
asID:                     269299
IP address blocks:        45.183.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.crl
                          rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c5:52:45:a9:b3:e4:06:26:d5:49:ed:52:b6:0d:6a:20:84:d7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9559354384683BF395C07B365A088C5F97E64BB
        Validity
            Not Before: Apr  4 05:15:13 2024 GMT
            Not After : Apr  3 05:20:13 2025 GMT
        Subject: CN=ACFF032A13B891281AB7C070BB0731B05FF7ED13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:c3:a6:2b:e9:f9:5b:c1:d5:cc:a0:18:14:
                    52:30:b6:e3:4f:07:5d:cf:79:ec:14:50:df:e7:04:
                    17:62:6b:38:9d:97:41:56:cf:e3:02:c6:75:6f:1c:
                    18:89:68:dd:61:f3:7a:b5:23:89:05:e9:5b:a4:41:
                    f7:cd:04:a7:ef:6d:0a:6a:59:47:2c:01:d8:ce:0c:
                    64:cd:e0:16:5f:af:9b:91:97:37:e7:48:71:0a:f0:
                    67:99:b8:e5:b5:49:96:ae:98:f8:4c:2c:4d:e7:85:
                    7d:23:cb:11:73:34:e4:d4:71:9e:87:4a:fc:11:23:
                    0c:2c:e0:c7:d5:bd:8c:b3:2a:9c:80:8c:4a:96:62:
                    04:41:21:f2:5d:2b:58:a2:99:ea:e1:be:a8:b0:c7:
                    6b:3e:aa:aa:14:0b:c6:8d:37:58:63:26:5e:8d:dc:
                    34:3f:03:82:08:73:37:3e:45:9e:65:d9:f3:06:28:
                    6e:9f:2f:4e:3f:e3:fe:7a:e1:67:d7:a3:d6:c7:65:
                    f5:f0:0c:86:96:c5:28:56:da:8e:59:40:84:46:21:
                    52:fb:70:65:86:54:97:51:ad:fc:75:97:40:a6:2a:
                    5e:92:98:84:81:65:0e:fe:f3:7f:fd:9e:89:65:a4:
                    9d:88:f9:cb:17:47:ed:f0:e1:97:7e:60:a5:3d:62:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FF:03:2A:13:B8:91:28:1A:B7:C0:70:BB:07:31:B0:5F:F7:ED:13
            X509v3 Authority Key Identifier:
                keyid:E9:55:93:54:38:46:83:BF:39:5C:07:B3:65:A0:88:C5:F9:7E:64:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:cb:6d:c2:e0:5f:15:cb:2e:fe:77:31:cb:b2:0f:f4:e1:b7:
         79:33:a4:83:22:97:77:62:4b:43:41:0a:70:82:1b:b7:10:f5:
         9a:59:ba:12:15:bb:7d:31:82:9e:15:50:0c:12:ff:69:e3:a8:
         e2:17:68:72:f4:72:f4:8a:d0:1a:36:35:26:53:58:67:2e:b5:
         86:89:8c:4d:e3:61:a5:2a:40:db:8b:83:b6:36:de:d0:5a:39:
         86:cb:6f:e5:33:a1:1b:13:09:14:a9:12:3a:e7:5e:a1:48:8e:
         b0:5d:2b:61:ad:fc:b9:ea:1e:9d:18:47:9b:c0:c8:69:b6:10:
         e9:2d:86:66:e5:30:c5:9c:42:99:0d:be:18:02:5b:59:96:84:
         85:d2:94:c5:12:ca:5a:5a:23:c7:00:3c:45:df:f5:c3:ff:6f:
         be:2a:63:11:70:05:82:cf:51:6e:39:ef:5e:8f:9b:53:33:15:
         6b:cc:24:f6:ce:9e:4a:6a:34:b5:fa:47:87:b5:ae:a0:05:40:
         b4:36:61:1f:e4:7d:32:84:cd:a5:c3:25:8a:84:43:a1:5c:9c:
         6d:fd:0e:10:0d:ec:08:90:ff:42:6e:da:f4:2d:a1:64:61:f0:
         96:2e:c1:44:ed:0e:83:be:43:21:57:88:12:77:d3:d7:ca:1d:
         c1:0c:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:01 2024 by rpki-client on console-ams.rpki-client.org