Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e34382e302f32322d3232203d3e20323637353531.roa
File:                     34352e37302e34382e302f32322d3232203d3e20323637353531.roa (raw, json)
Hash identifier:          FmmZrbwM99c6rY8ErgzVhtaO7jFYZPzSgE328iSSfq0=
Subject key identifier:   26:79:4E:6C:D4:D7:B1:7A:5D:CA:C0:81:28:EC:90:5C:4F:5F:76:3B
Certificate issuer:       /CN=315119F0C7108A60EB3B6173D16C7114048C8D54
Certificate serial:       18055EF1B022DC526AC78739C584C53E111A03A6
Authority key identifier: 31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e34382e302f32322d3232203d3e20323637353531.roa
Signing time:             Wed 25 Sep 2024 17:49:17 +0000
ROA not before:           Wed 25 Sep 2024 17:44:17 +0000
ROA not after:            Wed 24 Sep 2025 17:49:17 +0000
asID:                     267551
IP address blocks:        45.70.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.crl
                          rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:05:5e:f1:b0:22:dc:52:6a:c7:87:39:c5:84:c5:3e:11:1a:03:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315119F0C7108A60EB3B6173D16C7114048C8D54
        Validity
            Not Before: Sep 25 17:44:17 2024 GMT
            Not After : Sep 24 17:49:17 2025 GMT
        Subject: CN=26794E6CD4D7B17A5DCAC08128EC905C4F5F763B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:20:15:8b:29:e4:71:3a:97:49:0e:c8:bf:
                    9e:73:6c:eb:50:ca:a1:32:b8:1b:8c:2c:c5:9d:97:
                    1b:d3:b5:a7:f1:22:d7:a1:ae:93:56:bb:ad:0d:0a:
                    89:88:30:7c:f8:ac:d9:37:42:b9:c3:61:77:b0:64:
                    47:ea:f5:f8:35:71:fb:fb:85:cb:8a:10:99:06:f4:
                    5b:ff:96:92:34:15:eb:6c:eb:7f:04:63:b6:22:52:
                    2f:77:16:30:20:de:36:0b:e4:42:21:2a:de:32:33:
                    62:91:fe:6c:36:f2:66:34:0d:8f:73:95:a0:bf:62:
                    32:35:86:b5:0b:7a:67:d7:3a:44:17:a6:29:18:81:
                    68:3a:2a:f4:8a:1e:8d:33:18:52:90:b2:88:eb:c8:
                    d0:2b:4b:50:81:9a:36:e7:41:fb:a8:a0:81:fd:94:
                    63:f7:d6:2b:f5:a3:72:73:2d:57:1f:28:50:e3:5d:
                    a8:e2:05:93:eb:84:e4:aa:bb:28:83:36:8f:1e:1d:
                    52:ee:cc:92:b8:7f:1c:68:f3:80:8e:74:09:34:d3:
                    1a:87:53:93:46:4a:e4:2d:d0:a2:02:72:96:3f:1a:
                    f4:01:43:57:56:14:01:cf:b4:9f:df:95:00:5e:71:
                    21:7a:c5:1d:2e:76:89:cf:95:91:36:11:db:fd:22:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:79:4E:6C:D4:D7:B1:7A:5D:CA:C0:81:28:EC:90:5C:4F:5F:76:3B
            X509v3 Authority Key Identifier:
                keyid:31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e34382e302f32322d3232203d3e20323637353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:21:4f:fd:2e:b5:0c:34:1f:03:7e:a8:c5:29:a6:27:08:79:
         35:3a:8b:6d:3b:7a:bc:b4:19:9d:38:76:c2:f0:39:f7:21:53:
         5b:7f:31:12:c1:a8:70:e6:d6:2d:96:81:a0:76:7f:16:3c:5c:
         c7:f9:19:0a:d5:95:8d:1d:1e:b7:01:b7:43:33:5d:ba:83:11:
         cf:47:9a:87:63:1d:12:e4:ac:2f:00:1a:5d:91:e4:a5:aa:aa:
         da:63:fc:59:b7:25:8b:1f:1e:a6:21:0e:6b:72:99:23:36:40:
         b6:4f:64:83:8c:9a:f5:cf:15:c1:61:27:58:38:41:97:18:00:
         f5:74:1c:57:2b:ab:10:ac:4d:2a:6b:a4:cd:06:af:c0:bf:cf:
         e3:c0:d8:94:4b:06:92:95:5c:4d:f5:d2:3f:2c:c7:22:cf:f7:
         b8:8f:d4:db:be:d7:04:34:14:0b:de:66:0a:db:7b:56:fd:10:
         e7:49:8c:6b:e9:29:05:89:40:b4:a9:b7:cc:c0:44:ca:09:5a:
         76:8a:5d:87:90:97:d9:a7:49:73:a0:2f:d9:aa:dd:d3:a6:30:
         b8:61:da:5f:8a:d9:1b:5c:1f:ca:00:73:3f:0a:ee:c1:88:4a:
         4b:fb:d3:61:e0:b7:c6:c1:a4:95:57:29:a8:de:ff:48:31:df:
         b7:26:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:35 2024 by rpki-client on console-ams.rpki-client.org