Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa
File:                     34352e37302e3135362e302f32322d3234203d3e20323637363534.roa (raw, json)
Hash identifier:          iGxtWaSYCam9FwWI7i3f5gcVwU8RoZ0UlGAqZr5heKM=
Subject key identifier:   CE:5E:70:13:72:19:AE:06:86:66:B4:E4:2E:AE:5B:D0:E5:8C:54:EC
Certificate issuer:       /CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
Certificate serial:       179726AC8BDD0750A4E98A747B0303B4DE5929CC
Authority key identifier: 1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa
Signing time:             Sat 27 Apr 2024 03:44:57 +0000
ROA not before:           Sat 27 Apr 2024 03:39:57 +0000
ROA not after:            Sat 26 Apr 2025 03:44:57 +0000
asID:                     267654
IP address blocks:        45.70.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl
                          rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:97:26:ac:8b:dd:07:50:a4:e9:8a:74:7b:03:03:b4:de:59:29:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
        Validity
            Not Before: Apr 27 03:39:57 2024 GMT
            Not After : Apr 26 03:44:57 2025 GMT
        Subject: CN=CE5E70137219AE068666B4E42EAE5BD0E58C54EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:e0:3f:10:a3:46:89:fb:f4:7c:bf:e7:ae:
                    09:cc:56:70:01:40:37:4e:ac:20:38:59:6d:7a:67:
                    49:1c:07:0a:03:44:b6:1b:c1:14:71:c0:c6:f0:60:
                    01:60:a9:95:99:5f:da:43:a5:d4:0e:b4:cb:ff:8a:
                    0d:83:61:8d:c5:23:74:a1:e7:cf:c8:7b:59:8a:c3:
                    68:db:43:d0:dc:38:a4:78:4d:dd:35:5d:c1:7d:a9:
                    0a:25:83:43:ca:63:4b:d3:c5:28:f3:f9:db:b0:a2:
                    8f:0a:25:c2:4f:48:c7:1e:4d:8d:4c:03:79:69:fc:
                    b0:9a:57:1e:9c:e5:51:a7:66:7e:09:c6:3a:79:fe:
                    2b:f6:bc:ea:4f:5f:55:ef:16:55:a4:3d:33:8b:6e:
                    90:3a:e3:b5:de:a0:90:13:1d:45:e6:c3:8d:f6:29:
                    74:18:7f:ed:0b:f9:49:26:0b:a9:86:59:8a:6c:17:
                    52:1e:f5:a8:ad:77:39:1f:6a:9e:81:ee:cc:d4:78:
                    84:7a:6c:4f:de:9f:e6:ed:b5:2c:a9:4e:f2:39:df:
                    ee:b7:75:d2:c2:cf:59:7f:6b:fa:de:8d:5e:30:f1:
                    3f:7e:31:58:47:a1:c6:28:93:39:95:e9:ab:a7:a5:
                    b0:05:95:37:4d:b2:4a:ef:fd:57:f3:8d:40:89:58:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5E:70:13:72:19:AE:06:86:66:B4:E4:2E:AE:5B:D0:E5:8C:54:EC
            X509v3 Authority Key Identifier:
                keyid:1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:04:16:3b:7a:51:93:bd:a5:1d:51:53:ec:44:8e:f2:29:
         1a:95:13:ae:18:dd:4f:65:a2:40:83:44:71:9d:9f:bb:34:a6:
         06:a5:f0:98:77:27:eb:df:c3:c0:5d:a0:6d:21:f4:53:40:c6:
         4a:4c:7e:2e:97:08:24:2a:70:2b:7b:1a:9c:cd:9a:44:b8:8a:
         2b:74:7b:7a:23:4e:ab:89:7a:0d:5d:6a:35:23:c3:d6:50:53:
         1b:fe:32:72:96:52:55:c7:1b:7c:73:cb:89:18:a4:f3:53:12:
         16:06:7b:88:06:08:5c:d5:c9:16:b4:fc:0f:7a:1b:4f:ce:25:
         ea:14:6e:a2:bd:af:d1:0d:e5:2c:ed:0c:52:b4:06:11:05:f2:
         45:7c:30:97:37:c3:27:f5:64:36:d5:8b:ae:6f:93:db:fd:5e:
         7e:4d:cf:65:1f:f5:88:30:84:6c:71:26:93:de:f8:b3:96:d6:
         67:4c:d5:48:b0:23:ab:84:a0:d6:38:af:33:79:d8:dc:26:39:
         37:c8:d6:5e:ec:4d:02:a8:51:a5:8b:dc:9d:22:b3:13:27:e7:
         b4:a5:1e:62:f1:b7:f7:c8:ef:11:13:07:7b:97:f1:e0:0d:24:
         d3:b5:3d:3e:93:e9:89:98:f4:1e:83:85:53:66:e8:8e:e1:9d:
         b9:94:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:49 2024 by rpki-client on console-fra.rpki-client.org