Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132362e302f32342d3234203d3e20323636313334.roa
File:                     34352e362e3132362e302f32342d3234203d3e20323636313334.roa (raw, json)
Hash identifier:          0x/MOJI0f2VXyUaLpJZCCkokibinfyf+WKg9frABsIk=
Subject key identifier:   36:2F:62:DC:69:DC:C1:77:71:71:F6:4A:DF:95:3A:8E:16:02:85:AB
Certificate issuer:       /CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
Certificate serial:       1CA0A5E7AA82597852B40B070C12C333CA31E387
Authority key identifier: 70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132362e302f32342d3234203d3e20323636313334.roa
Signing time:             Thu 04 Apr 2024 16:50:48 +0000
ROA not before:           Thu 04 Apr 2024 16:45:48 +0000
ROA not after:            Thu 03 Apr 2025 16:50:48 +0000
asID:                     266134
IP address blocks:        45.6.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.crl
                          rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:a5:e7:aa:82:59:78:52:b4:0b:07:0c:12:c3:33:ca:31:e3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
        Validity
            Not Before: Apr  4 16:45:48 2024 GMT
            Not After : Apr  3 16:50:48 2025 GMT
        Subject: CN=362F62DC69DCC1777171F64ADF953A8E160285AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:15:63:8b:a7:ee:05:e9:0f:ce:47:f0:78:e5:
                    f8:2a:18:ae:04:0c:06:68:53:01:84:bd:d3:ab:02:
                    c2:21:e2:4c:f4:5f:b0:93:54:fe:26:ce:8c:a8:f6:
                    a5:2a:39:b8:0c:03:dc:37:01:9d:9b:f1:47:29:e5:
                    20:6d:ba:18:4d:8f:e4:7c:9c:d2:c5:c8:25:30:f1:
                    ae:cc:c5:f7:20:52:0e:16:3c:a4:fb:5c:96:a5:1f:
                    22:8c:23:c1:58:df:e6:c1:cc:c6:70:52:4c:a0:6b:
                    4c:81:8c:e7:73:c8:cb:6b:0f:c6:77:db:85:34:1e:
                    60:00:7a:29:00:4a:7a:4e:27:0b:db:d5:ae:04:64:
                    ad:ea:7c:6d:98:6a:2a:51:cd:b7:cf:b1:88:1a:ef:
                    4e:97:03:2b:6c:a3:e4:8a:50:d8:a4:23:23:c0:2d:
                    8f:df:d2:3e:90:1a:65:12:d2:1e:51:49:f1:5d:ed:
                    d7:2d:56:c1:0c:b7:54:40:6a:e8:fb:4f:73:02:a8:
                    70:55:bd:a8:77:c3:eb:77:cc:a6:9f:fc:3f:90:45:
                    fd:8a:3a:14:36:04:74:7c:e7:b3:9b:ac:8d:f3:d2:
                    b5:6a:f9:e2:e1:fe:6b:3a:21:36:ea:6d:8a:81:c6:
                    50:d1:3c:dc:05:0d:43:60:e8:34:2e:b6:b8:86:a2:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:62:DC:69:DC:C1:77:71:71:F6:4A:DF:95:3A:8E:16:02:85:AB
            X509v3 Authority Key Identifier:
                keyid:70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132362e302f32342d3234203d3e20323636313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:3a:70:82:bc:8b:8b:07:9a:0b:7b:4a:bb:0d:d3:00:f3:
         f4:df:78:fa:11:e1:5a:19:4b:cb:99:da:d0:e4:d9:67:09:af:
         1e:11:3e:11:65:a6:16:e2:ad:2d:5b:87:a4:3b:49:09:f0:26:
         8e:ff:ab:7e:2c:42:f1:46:21:f7:82:ce:61:98:ab:e4:b5:05:
         25:e2:37:cd:46:e5:04:22:54:ee:60:d3:11:c6:23:2a:d5:9b:
         af:3f:c5:72:ec:4e:a7:13:7a:9e:eb:e8:36:30:25:ad:53:2b:
         8d:62:fa:f6:5c:fd:70:07:fb:b3:d1:9a:ff:a0:ff:ce:c0:76:
         57:c7:8a:84:48:b1:3f:93:6e:04:92:bf:d9:9a:90:02:5b:b7:
         95:a0:9b:f4:c1:b6:32:f1:ac:a6:b7:2f:8a:f6:7d:09:37:67:
         09:81:58:4f:10:b5:6d:2d:8d:bb:33:ba:0a:67:ab:de:7d:e9:
         72:34:d4:a6:4b:39:fb:29:4a:df:89:cf:70:d6:05:06:c6:f9:
         73:08:7e:d5:76:49:ba:10:39:d0:18:0e:8f:b9:e8:ff:92:1d:
         0f:71:c7:7e:fc:43:89:7a:11:49:98:96:a7:38:89:09:a8:54:
         a8:8a:c4:10:d1:e4:17:f3:83:c4:1d:f8:7b:ef:6d:94:d2:e6:
         b2:b9:8c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 16:38:44 2024 by rpki-client on console-ams.rpki-client.org