Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38312e302f32342d3234203d3e20323634353235.roa
File:                     34352e37312e38312e302f32342d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          KXLQ7kSQT6WcfkMiUqcO8lAC8ONYxlrvnsMbByuW/lw=
Subject key identifier:   70:6A:C5:19:85:7A:37:43:C2:6B:E1:BF:4E:B1:8B:69:8C:A8:A0:BC
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       29B167903E561EDD176C68293D6F31505EB4976B
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38312e302f32342d3234203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 20:57:23 +0000
ROA not before:           Tue 30 Apr 2024 20:52:23 +0000
ROA not after:            Tue 29 Apr 2025 20:57:23 +0000
asID:                     264525
IP address blocks:        45.71.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b1:67:90:3e:56:1e:dd:17:6c:68:29:3d:6f:31:50:5e:b4:97:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 20:52:23 2024 GMT
            Not After : Apr 29 20:57:23 2025 GMT
        Subject: CN=706AC519857A3743C26BE1BF4EB18B698CA8A0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:aa:f5:cc:de:e2:f8:69:3c:a4:33:23:0f:17:
                    8c:67:76:06:f7:8c:ed:ab:c7:c2:a2:d6:41:63:72:
                    06:e9:82:05:25:ca:93:65:6e:9d:a6:01:14:20:c5:
                    cb:10:c6:f6:81:6c:6a:46:7f:5d:5d:cd:07:87:07:
                    8a:69:a6:61:94:6c:4b:84:1f:b6:43:b4:91:29:ec:
                    b0:76:7d:28:bc:6b:e9:49:be:ef:44:0c:63:0b:47:
                    0a:52:4c:ab:45:98:ec:fd:33:33:2d:fe:09:5b:2b:
                    66:65:c7:11:1d:b3:2c:5a:d5:0d:e6:7d:fe:ec:e5:
                    ee:b5:ab:e6:c4:e1:45:ca:77:a7:1f:b9:c5:ee:e6:
                    5f:5e:a3:8d:af:3d:68:d1:e2:8b:3b:12:6b:61:c2:
                    56:dd:79:c2:71:8a:c2:ba:a2:17:d4:72:bc:a7:a0:
                    84:03:dc:df:7f:a9:cc:ca:25:a0:56:57:5c:83:95:
                    f5:c0:9f:d4:ab:89:70:bc:50:c4:cd:84:ef:01:63:
                    4e:36:8c:9b:fd:b5:49:25:f4:1c:5b:d6:da:0f:27:
                    d9:6b:c4:47:87:c7:1c:c9:0d:bc:fc:b7:be:66:ba:
                    cf:05:d4:a7:08:6c:3c:d4:5f:52:d9:3e:84:30:67:
                    9e:dc:4d:13:28:94:21:06:ab:2f:01:f9:a0:b4:86:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6A:C5:19:85:7A:37:43:C2:6B:E1:BF:4E:B1:8B:69:8C:A8:A0:BC
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38312e302f32342d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:86:d0:c5:80:0a:c0:65:6f:8c:09:b1:eb:b0:17:2e:a1:
         e1:48:58:18:1c:e1:ae:1a:5f:a4:f9:cb:9a:62:5c:a8:16:21:
         65:19:5e:22:e7:4a:ec:20:f6:eb:82:15:48:bc:2f:b5:49:f8:
         39:18:9d:06:e3:02:26:ed:d7:eb:c5:41:4b:10:88:34:16:56:
         57:a9:2d:06:95:a1:43:c8:12:1f:9e:6a:0c:cd:d3:72:cd:82:
         de:83:67:85:91:dc:8b:32:3e:76:d4:45:90:1a:18:d9:c3:5e:
         54:57:cc:9b:31:31:8c:09:e2:b3:02:d2:82:2d:bc:90:aa:cf:
         b6:28:4f:f3:6d:d9:37:29:78:21:44:a4:7e:00:ae:bf:e4:d2:
         41:b0:17:71:73:75:71:6c:ad:a1:35:68:5e:06:80:a9:15:c5:
         ea:99:fb:20:7f:c7:74:ee:64:06:0e:6e:10:fb:e2:51:f2:69:
         e4:d2:fd:49:80:a9:20:dd:5d:38:fa:d7:c2:e9:7c:be:96:a4:
         38:db:be:d0:7a:ed:ca:fc:fc:ac:81:37:86:ba:18:b7:96:ac:
         1d:cd:f6:cd:67:2f:a0:55:b3:37:2b:0d:a9:f0:c4:6a:37:02:
         5a:6f:e9:f2:c7:05:c1:91:02:78:a4:2a:9c:3c:46:77:ef:27:
         e3:3e:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org