Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/34352e3233382e3132382e302f32322d3234203d3e203533323330.roa
File:                     34352e3233382e3132382e302f32322d3234203d3e203533323330.roa (raw, json)
Hash identifier:          lHTujdOZd7UdkB25lHhACc9JP17b9G/SPzK7jvSg5QM=
Subject key identifier:   A5:36:27:27:A4:AA:0B:36:16:91:5B:2B:93:4D:A8:67:DE:B6:A9:52
Certificate issuer:       /CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
Certificate serial:       53C315D96031302A28130CF7300986C7A9B480F2
Authority key identifier: 98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/34352e3233382e3132382e302f32322d3234203d3e203533323330.roa
Signing time:             Thu 04 Apr 2024 07:22:24 +0000
ROA not before:           Thu 04 Apr 2024 07:17:24 +0000
ROA not after:            Thu 03 Apr 2025 07:22:24 +0000
asID:                     53230
IP address blocks:        45.238.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl
                          rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c3:15:d9:60:31:30:2a:28:13:0c:f7:30:09:86:c7:a9:b4:80:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
        Validity
            Not Before: Apr  4 07:17:24 2024 GMT
            Not After : Apr  3 07:22:24 2025 GMT
        Subject: CN=A5362727A4AA0B3616915B2B934DA867DEB6A952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:b6:08:55:b0:2d:a5:19:07:db:4b:90:46:
                    13:0b:b2:83:1c:f3:f4:da:1e:6c:61:8d:e6:92:fd:
                    8e:9d:66:d6:a1:eb:19:cf:5a:84:60:b8:95:99:ec:
                    84:cd:33:96:a6:2d:e7:70:f4:01:cc:8f:84:7a:21:
                    19:00:94:24:0e:5f:2e:e7:2d:85:6a:ee:84:d3:99:
                    15:2f:36:8c:d0:f4:97:e0:b2:ff:b6:dd:08:db:5a:
                    ce:80:47:a5:a6:c1:ed:c6:b5:b2:5e:bf:35:79:40:
                    f5:48:de:4d:1e:62:86:30:b1:9f:01:d4:f9:57:6f:
                    71:f0:82:14:2f:1d:3e:4a:1e:cf:bb:e4:44:e1:58:
                    7f:68:e1:b1:77:27:dc:8e:7a:86:1a:56:b6:b2:91:
                    b5:1e:0f:61:e9:e2:09:d6:5a:f6:02:6c:7f:68:82:
                    a2:ff:f0:fc:fb:4f:e7:c5:ff:87:2c:11:1e:94:19:
                    9c:e0:f6:64:24:4f:fb:66:aa:a1:25:42:9f:86:ad:
                    46:4d:5a:ea:a5:0f:7c:48:2c:6c:31:9e:47:50:28:
                    c4:ae:70:c2:b2:7a:73:be:2d:b8:46:c3:63:56:1c:
                    0b:68:db:9d:59:de:ca:b5:70:e9:61:16:66:cc:f7:
                    aa:aa:ff:06:fa:75:1a:dc:9a:3e:45:81:3e:e6:b5:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:36:27:27:A4:AA:0B:36:16:91:5B:2B:93:4D:A8:67:DE:B6:A9:52
            X509v3 Authority Key Identifier:
                keyid:98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/34352e3233382e3132382e302f32322d3234203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:56:54:d7:69:1d:61:d9:13:43:ac:6f:52:9c:82:0f:44:
         5b:19:b3:fc:59:b5:0a:fd:1e:bc:23:82:a3:78:b8:b9:41:07:
         4b:9e:1e:85:9a:3a:56:c5:bd:10:90:53:d9:08:d5:4c:f6:c6:
         96:c4:53:26:63:d3:0a:17:61:06:ad:56:57:17:af:34:45:63:
         76:ba:c0:f4:fb:ce:1b:99:31:69:75:5c:8a:75:48:98:cf:74:
         85:c4:4d:51:83:c6:e3:df:09:d9:62:d6:2a:bf:fa:f9:e8:42:
         cd:d0:e9:b9:ab:cb:b3:c9:fe:f1:9a:77:71:02:f7:d1:0b:3b:
         52:ad:02:08:1e:8c:43:a9:16:9d:d5:a1:0c:bd:34:11:4a:b9:
         85:fc:cd:e6:30:e4:04:2f:7a:e3:6b:b5:0b:95:3c:f5:e2:b1:
         79:94:f1:b7:fd:b4:0d:dd:42:21:10:03:bd:a9:89:ca:02:43:
         a4:b1:d4:49:a4:f8:76:d2:eb:b0:69:8e:12:63:1e:c5:ae:d6:
         ff:03:8c:31:97:3a:0e:c4:1a:d1:12:e2:fd:ff:ff:c1:5b:4a:
         9a:fe:99:7e:23:9f:c6:11:55:a1:01:44:95:dc:84:ad:3f:9b:
         1d:0e:0e:a1:bf:68:78:9f:04:0f:36:ff:ca:3e:db:32:ae:ca:
         41:b7:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org