Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/34352e3139312e3130362e302f32342d3234203d3e20323639373034.roa
File:                     34352e3139312e3130362e302f32342d3234203d3e20323639373034.roa (raw, json)
Hash identifier:          09KMR0Sl5HO486pCrNhqhOPySksqgzroEHUfCpHUBYg=
Subject key identifier:   29:15:38:02:30:E2:EF:67:35:1E:0E:5C:41:1D:5F:BD:C6:D8:85:DE
Certificate issuer:       /CN=707F93FC5C8253F97490325853386E77E8E1009F
Certificate serial:       345E48FA4054480CB0CDF6E1B7C92340E41636D4
Authority key identifier: 70:7F:93:FC:5C:82:53:F9:74:90:32:58:53:38:6E:77:E8:E1:00:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/707F93FC5C8253F97490325853386E77E8E1009F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/34352e3139312e3130362e302f32342d3234203d3e20323639373034.roa
Signing time:             Thu 04 Apr 2024 18:10:40 +0000
ROA not before:           Thu 04 Apr 2024 18:05:40 +0000
ROA not after:            Thu 03 Apr 2025 18:10:40 +0000
asID:                     269704
IP address blocks:        45.191.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/707F93FC5C8253F97490325853386E77E8E1009F.crl
                          rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/707F93FC5C8253F97490325853386E77E8E1009F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/707F93FC5C8253F97490325853386E77E8E1009F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5e:48:fa:40:54:48:0c:b0:cd:f6:e1:b7:c9:23:40:e4:16:36:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707F93FC5C8253F97490325853386E77E8E1009F
        Validity
            Not Before: Apr  4 18:05:40 2024 GMT
            Not After : Apr  3 18:10:40 2025 GMT
        Subject: CN=2915380230E2EF67351E0E5C411D5FBDC6D885DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:9c:b0:99:78:20:84:ab:1c:8f:77:ce:97:
                    e8:bb:54:b4:67:92:92:1e:c0:64:bb:72:eb:32:d7:
                    47:cf:54:70:19:ea:ff:fa:1b:fb:8a:5b:f8:c6:67:
                    97:63:b9:93:4c:f4:f8:b8:7b:c4:e0:f7:10:af:61:
                    42:c0:38:79:ba:2b:54:19:af:aa:a4:4a:6d:98:91:
                    8d:57:9a:af:9c:f3:b5:65:12:2d:2d:e1:a7:e4:f9:
                    cf:0b:a1:fd:ca:f0:e4:38:2d:e7:f3:76:2a:f8:97:
                    df:c4:e1:e3:e9:a0:9d:c8:49:d0:6b:73:32:a8:dc:
                    08:dd:78:c1:6c:fe:f7:38:23:3f:14:82:77:b8:cc:
                    3d:d5:67:13:11:82:1d:1c:d6:75:7b:c5:73:b9:5f:
                    f4:53:52:a9:f8:ce:08:34:09:53:cc:41:ac:9b:c8:
                    35:32:10:de:94:c9:3c:05:98:5c:25:3c:9e:be:b6:
                    8e:37:34:54:aa:ae:6b:55:a4:91:09:31:41:84:02:
                    03:90:6b:88:8a:b9:a4:69:fe:b4:a9:d8:ba:d8:43:
                    b4:3d:f8:7d:ec:d2:a2:f9:2a:4c:d3:1e:d7:d9:7b:
                    b9:6e:93:35:81:17:26:ca:58:1b:39:c8:76:e1:c5:
                    50:17:f8:e1:ab:1c:3c:ca:f3:d6:cb:68:99:e4:d6:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:15:38:02:30:E2:EF:67:35:1E:0E:5C:41:1D:5F:BD:C6:D8:85:DE
            X509v3 Authority Key Identifier:
                keyid:70:7F:93:FC:5C:82:53:F9:74:90:32:58:53:38:6E:77:E8:E1:00:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/707F93FC5C8253F97490325853386E77E8E1009F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/707F93FC5C8253F97490325853386E77E8E1009F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/34352e3139312e3130362e302f32342d3234203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0d:e7:63:4c:7a:3f:87:e5:90:2a:da:fe:4d:ff:ce:c2:bf:
         f2:23:e0:e5:23:ec:68:75:c0:88:1b:bf:7b:cb:08:04:74:5c:
         99:c0:c5:7a:91:09:b0:d5:8f:6c:4d:5f:d1:fa:4c:93:6f:ae:
         93:6a:1e:13:76:ed:1b:ec:85:e1:a9:22:e1:0f:c1:4c:fc:8f:
         e8:2a:a7:86:bc:cd:bd:73:ea:03:64:8e:de:2a:7a:b4:d6:7a:
         55:fb:c7:0f:90:5e:c8:95:d3:30:8a:e9:39:c5:cc:5c:eb:7a:
         aa:5b:fe:67:30:97:43:fb:c1:e6:6c:e5:49:d1:ee:c0:ca:09:
         c4:29:69:1f:f9:9b:57:12:1b:8b:84:a1:a0:07:12:18:e0:83:
         5b:13:c2:28:3f:50:f1:fa:2d:49:d6:40:b4:32:e7:8e:f9:c2:
         97:21:52:d1:b0:49:bb:92:c6:69:07:27:7f:2d:32:21:e0:1f:
         8f:03:85:ed:0a:45:0b:48:8a:0b:f5:32:ca:60:e9:b7:85:4b:
         bc:86:e4:9d:68:71:b3:21:af:15:10:ae:88:55:4e:ff:56:df:
         37:97:b9:60:5a:75:da:e1:e1:61:76:b6:6d:88:ab:95:1b:4f:
         da:7a:25:5f:28:a2:97:40:24:f8:73:20:71:58:7c:fa:94:95:
         0b:26:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org