Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231392e302f32342d3234203d3e20323637353838.roa
File:                     34352e37302e3231392e302f32342d3234203d3e20323637353838.roa (raw, json)
Hash identifier:          WL3dtEIb3IsqVVP1rrkiZ6HGQKOPm3j1A1BEWy+lLxY=
Subject key identifier:   85:81:09:11:A2:AA:88:90:6F:34:FF:ED:6E:46:F1:F8:F6:C4:2F:BD
Certificate issuer:       /CN=EB27E991207232DB9C6D847F06224E25D3606469
Certificate serial:       11885AFB0D44C780B5DFEFAF0766D5BBED93923F
Authority key identifier: EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231392e302f32342d3234203d3e20323637353838.roa
Signing time:             Fri 12 Jul 2024 15:13:21 +0000
ROA not before:           Fri 12 Jul 2024 15:08:21 +0000
ROA not after:            Fri 11 Jul 2025 15:13:21 +0000
asID:                     267588
IP address blocks:        45.70.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl
                          rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:88:5a:fb:0d:44:c7:80:b5:df:ef:af:07:66:d5:bb:ed:93:92:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB27E991207232DB9C6D847F06224E25D3606469
        Validity
            Not Before: Jul 12 15:08:21 2024 GMT
            Not After : Jul 11 15:13:21 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:05:f8:79:b4:df:40:f1:1c:d4:a8:fa:ea:
                    af:99:85:c7:8e:5e:38:51:27:db:36:ab:c8:60:cd:
                    fb:43:e4:e0:d9:d1:f9:dd:03:4a:b4:82:73:af:b7:
                    61:cb:80:66:6b:01:f7:39:4d:ba:16:80:40:05:55:
                    7d:31:d9:fb:bc:ee:31:41:ee:39:f4:14:82:ce:e9:
                    59:3e:c3:41:2f:cd:09:1b:56:a2:61:91:99:ab:fb:
                    6e:4d:69:b7:7d:70:db:43:76:30:27:56:30:23:e3:
                    5d:67:21:75:55:2e:d0:05:b4:02:c9:3f:e4:f5:a0:
                    76:31:9f:ec:2b:36:f0:67:df:fc:d7:c9:e9:18:f1:
                    e7:13:66:de:d6:df:2b:ac:33:29:7c:04:90:10:d7:
                    ee:ef:45:80:0e:ef:fb:41:03:f4:16:1c:01:c7:66:
                    cf:52:89:b3:7b:f2:29:91:f3:77:a8:06:32:5f:80:
                    f6:39:99:4e:32:f1:e0:ad:ae:c2:f9:16:63:7e:d7:
                    5b:59:1c:c5:22:95:4d:35:f5:bb:24:74:29:39:dc:
                    41:52:2f:bc:25:ff:28:da:41:47:47:bf:be:77:35:
                    7e:d6:d6:3c:58:bd:b1:dc:17:0a:d2:ad:1a:7c:4b:
                    ec:51:6a:a3:b4:5e:07:9c:c6:85:90:de:0a:36:3a:
                    48:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:81:09:11:A2:AA:88:90:6F:34:FF:ED:6E:46:F1:F8:F6:C4:2F:BD
            X509v3 Authority Key Identifier:
                keyid:EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231392e302f32342d3234203d3e20323637353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:20:fc:3c:88:f7:ad:82:47:64:34:a0:e2:b5:13:ad:2a:b5:
         d4:6c:22:18:3e:e1:d2:7e:51:0b:2d:bc:03:3c:78:73:32:45:
         7f:b3:a1:43:f4:4a:2d:cf:c5:39:d9:cf:09:ea:cf:9c:c6:8e:
         9a:c1:03:fc:66:20:a0:e5:f7:b7:6b:35:a4:ab:b0:22:3e:eb:
         ec:08:90:b0:16:5f:2d:83:83:89:e6:d2:c8:e5:9b:03:d6:1f:
         ca:fc:d1:d1:df:5b:16:3f:09:2b:b0:1b:0a:30:7d:2d:64:c8:
         7f:92:5e:79:d6:5d:30:a2:14:f0:65:3b:ca:3b:58:d1:f8:2c:
         2f:17:9b:b9:8c:05:42:fe:0b:47:73:8b:40:0d:b0:62:a1:4b:
         68:86:9e:8f:9f:72:aa:74:e1:98:15:fe:70:e6:a8:8c:21:ab:
         fc:6a:6a:07:5b:01:08:b2:a4:bc:72:62:6e:71:fb:55:3e:f5:
         05:d2:0e:43:41:2a:66:94:c9:f3:80:0d:10:37:a7:f2:1a:5e:
         d7:98:7a:c4:83:82:61:68:5e:43:cb:e3:c4:c7:34:3e:16:67:
         26:43:62:b3:ce:6b:fe:6a:9f:75:f7:22:5a:25:f5:01:5f:8e:
         2d:2a:ad:b7:07:25:25:96:13:d2:d1:32:50:06:4b:c6:01:93:
         a5:73:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:34 2024 by rpki-client on console-ams.rpki-client.org