Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231362e302f32342d3234203d3e20323637353838.roa
File:                     34352e37302e3231362e302f32342d3234203d3e20323637353838.roa (raw, json)
Hash identifier:          B64vkTxVTVaVZgvTHsZ4+pWmLrvNCJH4fKqmEhG1jn4=
Subject key identifier:   C3:FC:D0:91:33:74:B0:0E:41:64:99:CF:B5:1F:55:E4:9D:FE:E5:E0
Certificate issuer:       /CN=EB27E991207232DB9C6D847F06224E25D3606469
Certificate serial:       70A908388E632B5B80A7712EA855B0F8ADBC5017
Authority key identifier: EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231362e302f32342d3234203d3e20323637353838.roa
Signing time:             Fri 12 Jul 2024 15:12:04 +0000
ROA not before:           Fri 12 Jul 2024 15:07:04 +0000
ROA not after:            Fri 11 Jul 2025 15:12:04 +0000
asID:                     267588
IP address blocks:        45.70.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl
                          rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a9:08:38:8e:63:2b:5b:80:a7:71:2e:a8:55:b0:f8:ad:bc:50:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB27E991207232DB9C6D847F06224E25D3606469
        Validity
            Not Before: Jul 12 15:07:04 2024 GMT
            Not After : Jul 11 15:12:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:b4:f8:33:18:e2:20:76:0e:33:63:c4:46:
                    8c:5d:68:e5:0d:b0:b1:d0:76:0a:99:8c:e1:3d:c5:
                    ff:e8:79:b2:fc:6a:e6:2e:b4:76:ca:8e:ce:11:c0:
                    09:0b:08:7e:cd:b4:06:02:55:c6:d9:d5:8b:d6:49:
                    6f:23:95:01:0e:27:97:1e:f1:91:32:5f:11:0c:7b:
                    4c:4a:e1:22:44:06:05:f2:c2:89:c9:62:a0:55:7c:
                    76:10:5b:52:31:93:99:37:97:36:7a:21:14:c9:71:
                    f6:25:e2:78:b1:a3:7a:14:8f:04:36:63:8a:b1:8a:
                    01:24:fa:2d:44:45:54:43:c6:41:a8:bb:a7:f4:9d:
                    f2:82:2b:e5:80:e1:b1:28:6a:3f:90:54:73:b6:b1:
                    1a:0d:b0:3a:20:48:6b:d5:1a:62:62:31:e0:92:49:
                    74:93:dd:40:ba:53:83:82:a8:f2:7b:f6:ac:d8:d5:
                    82:9e:35:0f:2d:e8:24:54:36:18:fb:e3:12:92:21:
                    8a:66:5d:ec:38:61:f7:68:06:ec:40:37:81:47:21:
                    db:47:0e:b1:85:b8:56:b7:5a:4b:c5:b2:4d:b2:49:
                    61:b8:82:26:54:46:86:da:11:cf:d5:bd:56:77:80:
                    54:41:15:01:5f:1a:c6:ab:57:9a:48:8b:ce:15:fd:
                    be:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:D0:91:33:74:B0:0E:41:64:99:CF:B5:1F:55:E4:9D:FE:E5:E0
            X509v3 Authority Key Identifier:
                keyid:EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231362e302f32342d3234203d3e20323637353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:23:94:71:e5:4f:d3:14:3e:21:51:80:b5:f6:a1:72:3d:ae:
         c4:93:71:20:8e:80:7d:cd:e5:1d:1f:04:b0:d0:3f:2e:d5:25:
         11:95:c9:93:43:98:a8:22:d7:4a:63:08:ad:ae:3a:9d:31:bd:
         99:c2:ba:44:5a:e9:56:3d:fc:89:bc:c2:0a:9b:eb:e2:ed:e8:
         62:7d:f3:9b:83:ee:00:b7:59:dd:e4:1e:2b:b9:cc:96:55:ea:
         70:74:46:88:73:b8:1c:88:e2:ff:26:f9:5c:79:eb:c8:9b:fb:
         91:0d:95:a9:a0:13:7b:b9:b1:7c:5d:80:8d:99:28:50:5c:cc:
         29:a0:c6:59:d7:56:6c:a8:00:a0:67:6a:3d:de:c9:b2:da:89:
         dd:22:b6:18:3b:bc:30:b4:4e:b2:6c:12:51:4b:c2:55:77:c5:
         89:5a:cd:29:7e:0f:7e:bb:5d:e8:50:d6:41:15:b6:4a:90:a9:
         5e:8c:8d:95:ec:1f:3e:de:6f:aa:42:7d:ae:54:7b:cf:61:5a:
         10:16:7e:fc:b6:e4:53:74:e4:16:b1:f9:74:57:26:6e:87:ac:
         23:84:71:4a:b8:a4:d1:66:37:ea:65:fb:28:cf:85:59:df:09:
         34:0c:25:ac:9f:18:94:85:cb:d1:c8:ef:19:28:0b:d5:c5:4d:
         cc:34:79:61
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUcKkIOI5jK1uAp3EuqFWw+K28UBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyN0U5OTEyMDcyMzJEQjlDNkQ4NDdGMDYyMjRFMjVE
MzYwNjQ2OTAeFw0yNDA3MTIxNTA3MDRaFw0yNTA3MTExNTEyMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJDQkI0RjgzMzE4RTIyMDc2
MEUzMzYzQzQ0NjhDNUQ2OEU1MERCMEIxRDA3NjBBOTk4Q0UxM0RDNUZGRTg3OUIy
RkM2QUU2MkVCNDc2Q0E4RUNFMTFDMDA5MEIwODdFQ0RCNDA2MDI1NUM2RDlENThC
RDY0OTZGMjM5NTAxMEUyNzk3MUVGMTkxMzI1RjExMEM3QjRDNEFFMTIyNDQwNjA1
RjJDMjg5Qzk2MkEwNTU3Qzc2MTA1QjUyMzE5Mzk5Mzc5NzM2N0EyMTE0Qzk3MUY2
MjVFMjc4QjFBMzdBMTQ4RjA0MzY2MzhBQjE4QTAxMjRGQTJENDQ0NTU0NDNDNjQx
QThCQkE3RjQ5REYyODIyQkU1ODBFMUIxMjg2QTNGOTA1NDczQjZCMTFBMERCMDNB
MjA0ODZCRDUxQTYyNjIzMUUwOTI0OTc0OTNERDQwQkE1MzgzODJBOEYyN0JGNkFD
RDhENTgyOUUzNTBGMkRFODI0NTQzNjE4RkJFMzEyOTIyMThBNjY1REVDMzg2MUY3
NjgwNkVDNDAzNzgxNDcyMURCNDcwRUIxODVCODU2Qjc1QTRCQzVCMjREQjI0OTYx
Qjg4MjI2NTQ0Njg2REExMUNGRDVCRDU2Nzc4MDU0NDExNTAxNUYxQUM2QUI1NzlB
NDg4QkNFMTVGREJFMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAssu0+DMY4iB2DjNjxEaMXWjlDbCx0HYKmYzhPcX/6Hmy/GrmLrR2
yo7OEcAJCwh+zbQGAlXG2dWL1klvI5UBDieXHvGRMl8RDHtMSuEiRAYF8sKJyWKg
VXx2EFtSMZOZN5c2eiEUyXH2JeJ4saN6FI8ENmOKsYoBJPotREVUQ8ZBqLun9J3y
givlgOGxKGo/kFRztrEaDbA6IEhr1RpiYjHgkkl0k91AulODgqjye/as2NWCnjUP
LegkVDYY++MSkiGKZl3sOGH3aAbsQDeBRyHbRw6xhbhWt1pLxbJNsklhuIImVEaG
2hHP1b1Wd4BUQRUBXxrGq1eaSIvOFf2+IQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMP80JEzdLAOQWSZz7UfVeSd/uXgMB8GA1UdIwQYMBaAFOsn6ZEgcjLbnG2EfwYi
TiXTYGRpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZEd1hWejE5bWs1WWN3
RGFpWnFRbnRpVVZtOVdnTWZhWm5Cb1l0UDZnQ21SLzAvRUIyN0U5OTEyMDcyMzJE
QjlDNkQ4NDdGMDYyMjRFMjVEMzYwNjQ2OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FQjI3RTk5MTIwNzIzMkRCOUM2RDg0N0YwNjIyNEUyNUQzNjA2
NDY5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82RHdYVnoxOW1rNVljd0RhaVpx
UW50aVVWbTlXZ01mYVpuQm9ZdFA2Z0NtUi8wLzM0MzUyZTM3MzAyZTMyMzEzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM1MzgzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1G
2DANBgkqhkiG9w0BAQsFAAOCAQEAhyOUceVP0xQ+IVGAtfahcj2uxJNxII6Afc3l
HR8EsNA/LtUlEZXJk0OYqCLXSmMIra46nTG9mcK6RFrpVj38ibzCCpvr4u3oYn3z
m4PuALdZ3eQeK7nMllXqcHRGiHO4HIji/yb5XHnryJv7kQ2VqaATe7mxfF2AjZko
UFzMKaDGWddWbKgAoGdqPd7JstqJ3SK2GDu8MLROsmwSUUvCVXfFiVrNKX4Pfrtd
6FDWQRW2SpCpXoyNlewfPt5vqkJ9rlR7z2FaEBZ+/LbkU3TkFrH5dFcmboesI4Rx
Srik0WY36mX7KM+FWd8JNAwlrJ8YlIXL0cjvGSgL1cVNzDR5YQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:54 2024 by rpki-client on console-fra.rpki-client.org