Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3234382e302f32322d3232203d3e20323637363130.roa
File:                     34352e37302e3234382e302f32322d3232203d3e20323637363130.roa (raw, json)
Hash identifier:          JhJ4GVbDsxWzk3ZMezurKmkQd5d69ZIJn7yx3FTKqS4=
Subject key identifier:   1D:3B:7E:8A:7D:64:82:36:06:1C:78:B9:73:1D:C1:F7:5B:31:46:39
Certificate issuer:       /CN=202EC960E4D30720082CD719E1E72E6A76C5343A
Certificate serial:       15F4188FB18D05ECE1245F7403CE6285AA90707F
Authority key identifier: 20:2E:C9:60:E4:D3:07:20:08:2C:D7:19:E1:E7:2E:6A:76:C5:34:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202EC960E4D30720082CD719E1E72E6A76C5343A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3234382e302f32322d3232203d3e20323637363130.roa
Signing time:             Thu 17 Oct 2024 15:31:17 +0000
ROA not before:           Thu 17 Oct 2024 15:26:17 +0000
ROA not after:            Thu 16 Oct 2025 15:31:17 +0000
asID:                     267610
IP address blocks:        45.70.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/202EC960E4D30720082CD719E1E72E6A76C5343A.crl
                          rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/202EC960E4D30720082CD719E1E72E6A76C5343A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202EC960E4D30720082CD719E1E72E6A76C5343A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f4:18:8f:b1:8d:05:ec:e1:24:5f:74:03:ce:62:85:aa:90:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202EC960E4D30720082CD719E1E72E6A76C5343A
        Validity
            Not Before: Oct 17 15:26:17 2024 GMT
            Not After : Oct 16 15:31:17 2025 GMT
        Subject: CN=1D3B7E8A7D648236061C78B9731DC1F75B314639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:72:fa:26:12:56:df:8c:c2:0e:1d:1b:a1:
                    56:d3:a9:9a:78:57:73:0a:88:40:21:c3:d0:6c:08:
                    27:99:27:6a:2b:10:fc:57:5a:2e:c0:ab:e6:b7:5c:
                    64:5d:b2:df:73:49:38:ab:e9:3d:35:74:f4:bd:8a:
                    59:1c:a0:82:b8:9c:e9:ae:a9:16:f4:cf:21:d1:59:
                    b7:87:37:5a:85:87:3a:2b:d9:09:2f:9c:27:4f:c0:
                    93:6c:3a:a6:c6:12:fa:71:e0:7d:cb:06:37:2a:05:
                    2c:90:91:9b:d2:21:c0:be:58:f7:5b:b6:41:2c:b4:
                    2b:d4:95:75:fa:46:06:e6:70:4c:7b:df:b2:e9:8d:
                    49:94:13:cb:b0:f4:32:d3:cc:59:1e:82:97:93:b7:
                    2c:c4:e5:cd:a2:49:5c:e3:0e:f9:ea:41:0e:c0:d6:
                    36:06:fa:e0:e3:99:24:af:e9:b5:1b:19:89:bd:b9:
                    c7:b0:b9:82:19:3c:f6:16:5d:52:a7:cb:22:6c:e9:
                    bb:d9:04:af:43:fd:f7:58:58:46:38:05:a0:2d:d5:
                    6f:4f:8f:33:fc:16:71:c2:8d:bf:54:a3:05:0e:59:
                    a5:ce:ce:e5:71:9d:37:10:76:b3:d4:34:d7:28:a4:
                    f8:40:92:d5:05:3a:73:b9:a5:bc:6d:f2:5b:b0:dc:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3B:7E:8A:7D:64:82:36:06:1C:78:B9:73:1D:C1:F7:5B:31:46:39
            X509v3 Authority Key Identifier:
                keyid:20:2E:C9:60:E4:D3:07:20:08:2C:D7:19:E1:E7:2E:6A:76:C5:34:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/202EC960E4D30720082CD719E1E72E6A76C5343A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202EC960E4D30720082CD719E1E72E6A76C5343A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3234382e302f32322d3232203d3e20323637363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:c5:32:46:b2:76:eb:23:ef:4d:9d:5d:61:f1:7d:af:b9:a3:
         f9:89:41:a5:e4:23:71:dc:6c:25:0c:de:8a:01:c5:c1:54:19:
         8b:90:16:63:1b:34:40:6b:e4:e7:97:63:8f:34:1e:6d:95:8f:
         c7:39:43:35:2e:ae:36:36:2b:91:1e:11:00:c2:2b:d9:56:e8:
         97:27:3f:b8:0e:4b:d7:e8:3f:e7:73:71:f7:a3:44:f6:a7:bb:
         eb:bb:3b:98:04:86:b2:fe:bf:91:80:6e:07:b3:55:d3:24:65:
         a4:61:e5:43:16:2b:f2:8e:81:39:cd:3d:2b:0a:8e:48:04:4e:
         a8:ae:01:c3:60:ad:7f:dc:52:09:71:2a:fa:39:ab:45:6f:81:
         02:2b:6c:a3:c6:3b:c8:1b:c5:62:09:c2:31:4a:d7:dd:9f:76:
         6c:f2:6b:f5:88:9d:8e:01:40:bb:cd:38:c7:7e:d0:cf:ab:7d:
         77:67:4a:b4:36:1e:0f:09:0b:29:b0:ea:b7:56:a0:e2:cf:8f:
         8b:e7:e1:64:23:28:ce:6a:39:68:60:ab:fe:4e:f0:4e:1b:94:
         96:88:f4:95:e6:dd:ee:7f:f8:d0:5f:44:98:df:b8:18:aa:82:
         ae:3c:5a:78:0b:69:d7:e5:72:97:7f:6d:c3:22:88:92:ea:0e:
         6a:4a:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:33 2024 by rpki-client on console-fra.rpki-client.org