Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132372e302f32342d3234203d3e20323636313334.roa
File:                     34352e362e3132372e302f32342d3234203d3e20323636313334.roa (raw, json)
Hash identifier:          boiVtnDHWCaVGLm3hDEyNgfMW2xGCKRH6lgrGAOs3HM=
Subject key identifier:   65:5C:45:8B:54:A5:85:72:98:04:A6:41:FA:3A:E9:75:08:B5:D0:E5
Certificate issuer:       /CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
Certificate serial:       36951BE855EE37D578F1C3672240F789FC8BCFFC
Authority key identifier: 70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132372e302f32342d3234203d3e20323636313334.roa
Signing time:             Thu 04 Apr 2024 16:50:47 +0000
ROA not before:           Thu 04 Apr 2024 16:45:47 +0000
ROA not after:            Thu 03 Apr 2025 16:50:47 +0000
asID:                     266134
IP address blocks:        45.6.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.crl
                          rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:95:1b:e8:55:ee:37:d5:78:f1:c3:67:22:40:f7:89:fc:8b:cf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
        Validity
            Not Before: Apr  4 16:45:47 2024 GMT
            Not After : Apr  3 16:50:47 2025 GMT
        Subject: CN=655C458B54A585729804A641FA3AE97508B5D0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:1c:bb:6d:d6:f8:e6:70:44:33:7f:23:6e:
                    0d:a8:00:a6:60:21:d6:05:33:af:28:f8:31:20:02:
                    c1:50:f3:ac:84:10:f1:3c:19:a0:ff:10:be:b8:09:
                    e9:4b:a9:d3:a2:03:79:2e:34:58:e1:fa:22:04:3a:
                    e0:0a:78:9c:08:58:23:05:95:c0:28:4d:29:17:4a:
                    a7:42:b3:8f:36:e5:32:41:36:60:f9:09:58:1e:24:
                    3b:68:d0:49:a3:fa:51:95:44:2b:53:6a:54:ca:79:
                    5c:e3:2b:39:43:33:66:7e:71:da:15:67:da:e0:ac:
                    30:a3:56:4a:f1:ad:f3:6f:61:28:65:e5:7f:30:de:
                    c8:c6:ff:8f:3a:9c:66:aa:f8:a8:e6:03:ca:31:5c:
                    5e:3e:7c:e9:50:96:7d:49:97:21:ff:7d:75:4c:46:
                    32:d2:c8:a2:b9:44:e5:75:ed:19:ff:db:f1:96:59:
                    8a:bf:22:fc:dd:d4:ae:20:07:b9:cb:aa:ba:70:eb:
                    62:12:07:06:83:c3:96:2e:c2:36:19:c8:fc:ca:76:
                    e6:4c:84:b8:51:c8:a4:57:81:90:c6:0d:ed:9a:40:
                    b3:7c:63:51:e3:84:72:f0:d9:80:87:b6:77:45:fa:
                    aa:c7:6b:1d:77:cb:7c:b8:be:af:47:11:7f:01:a0:
                    13:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:45:8B:54:A5:85:72:98:04:A6:41:FA:3A:E9:75:08:B5:D0:E5
            X509v3 Authority Key Identifier:
                keyid:70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132372e302f32342d3234203d3e20323636313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:f2:05:8e:6b:d8:a5:31:52:b8:97:67:c3:e5:f7:a6:d4:
         5b:c2:ba:a8:dd:1a:ec:61:72:19:dd:58:f6:ff:f5:b7:39:62:
         a1:fe:90:7f:fb:4c:d3:ff:62:9c:bc:fb:90:74:88:59:ce:60:
         d0:d3:55:d9:91:72:61:e8:3f:a0:ee:59:6e:d8:ec:c6:1a:4d:
         d0:71:47:04:5e:6b:0e:31:fd:94:9f:72:61:bc:e1:93:f2:24:
         90:50:9c:6a:fa:9f:d5:49:9b:a3:90:44:71:22:f7:d2:4c:1f:
         06:3e:e1:f5:38:db:56:4f:11:3c:64:a2:9e:20:ce:25:a7:17:
         44:d3:ea:6a:41:af:c5:76:47:63:66:08:9a:77:d5:78:3d:94:
         ee:76:94:24:0f:f7:c5:3c:31:ff:48:7c:c3:c6:95:c4:ed:c4:
         49:22:f1:fe:84:45:ab:a7:f7:7e:f7:c0:e3:81:ff:2d:19:a5:
         c7:ce:6e:17:e4:7e:2c:dc:30:5f:53:76:eb:7d:50:f8:6d:cc:
         ab:9f:2b:07:83:22:bb:1c:21:e6:40:de:98:de:08:85:6d:31:
         9f:09:d1:0a:bb:c8:e8:71:00:61:e3:e5:38:5f:75:c8:ea:3a:
         fc:41:aa:a5:ad:30:5f:e4:d1:35:3e:72:85:61:79:8f:c4:22:
         89:9c:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org