Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e34392e302f32342d3234203d3e20323637353531.roa
File:                     34352e37302e34392e302f32342d3234203d3e20323637353531.roa (raw, json)
Hash identifier:          K87H4R2RIE3aXV8mFTGUkd1T9fFR93AJF7z8iI7XS0A=
Subject key identifier:   2B:19:99:47:7B:CA:29:E5:2F:F9:AA:B5:60:DD:F6:29:37:32:3C:81
Certificate issuer:       /CN=315119F0C7108A60EB3B6173D16C7114048C8D54
Certificate serial:       7867D3734088F345F68E0BA03EB0B43FA7C6DAA5
Authority key identifier: 31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e34392e302f32342d3234203d3e20323637353531.roa
Signing time:             Wed 25 Sep 2024 17:49:16 +0000
ROA not before:           Wed 25 Sep 2024 17:44:16 +0000
ROA not after:            Wed 24 Sep 2025 17:49:16 +0000
asID:                     267551
IP address blocks:        45.70.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.crl
                          rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:67:d3:73:40:88:f3:45:f6:8e:0b:a0:3e:b0:b4:3f:a7:c6:da:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315119F0C7108A60EB3B6173D16C7114048C8D54
        Validity
            Not Before: Sep 25 17:44:16 2024 GMT
            Not After : Sep 24 17:49:16 2025 GMT
        Subject: CN=2B1999477BCA29E52FF9AAB560DDF62937323C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:f9:67:c9:2b:22:6b:6c:c1:08:f3:ab:0d:
                    7c:02:23:fe:82:4e:0c:99:54:77:5b:e8:4e:b0:c1:
                    ee:24:9a:3f:02:32:30:de:ab:6a:9d:ab:99:b0:73:
                    52:0b:7b:0e:b8:73:b5:1e:6b:59:bd:91:8b:81:ff:
                    cb:a6:73:fd:c4:a6:a7:8f:43:69:42:71:ee:a4:5c:
                    0d:36:35:a1:f3:3e:62:74:9d:b8:22:c7:e7:da:21:
                    7c:9b:ae:8e:00:b6:7a:b1:11:1a:14:a7:3f:1e:63:
                    fa:f7:2d:ea:17:0c:a0:d8:cb:7e:04:3d:11:06:d3:
                    d1:a8:fc:db:de:48:88:99:c5:6e:98:aa:be:6b:ca:
                    04:2b:73:a8:a5:64:21:b2:5b:03:86:8a:65:cb:08:
                    69:67:3a:04:8a:7d:bd:4c:03:cd:92:d8:37:69:bb:
                    f4:18:16:2d:d0:a8:e5:1d:d2:36:50:8b:1d:0a:13:
                    94:f6:be:c6:a8:91:8e:e4:df:23:25:a5:f0:0e:12:
                    de:ab:70:f4:7a:f7:19:84:99:23:cd:29:13:a9:ab:
                    fd:b5:77:3c:05:b1:29:47:da:13:40:34:9f:82:15:
                    6d:32:c2:91:0c:d0:41:86:87:0e:fc:80:bc:df:cd:
                    4e:14:87:d0:51:9a:63:29:62:d5:6f:b6:fc:7b:6e:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:19:99:47:7B:CA:29:E5:2F:F9:AA:B5:60:DD:F6:29:37:32:3C:81
            X509v3 Authority Key Identifier:
                keyid:31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e34392e302f32342d3234203d3e20323637353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:d7:9c:1c:f3:6a:48:b1:f8:0d:14:e3:94:09:98:4f:a9:
         1c:c2:62:3d:c3:cb:55:16:dc:ab:7c:bf:9b:e1:4c:d3:2c:93:
         8a:2e:cb:bd:2e:6f:16:ce:65:02:ac:cb:95:a2:1e:6e:1d:f9:
         63:b3:83:ab:d6:fb:93:ff:7e:a7:c9:7c:82:64:63:1f:76:10:
         81:fc:e5:7c:76:96:d9:c6:3a:1c:99:c2:99:4f:37:83:85:6a:
         6c:4a:df:cd:e9:5d:ba:c2:39:80:31:84:fb:bf:a9:63:ec:3a:
         4d:a4:20:27:3f:48:0d:57:1e:df:01:be:93:42:a5:54:1d:44:
         73:21:f0:bc:b8:6c:2f:3b:3b:9a:96:05:4a:d4:e4:a3:4b:49:
         81:0e:8c:e0:7c:cd:e1:de:95:4c:0f:ea:aa:e9:01:f7:e4:15:
         aa:cf:51:92:a2:8b:e5:b7:52:8f:1c:45:ef:b1:76:2f:f6:41:
         25:0e:be:1f:bf:6b:11:2b:5c:d1:fd:2b:35:70:7d:45:5a:29:
         60:98:2b:c3:1c:4e:47:56:ae:63:22:f8:bb:b7:03:8f:82:ac:
         8b:ed:83:92:e5:b0:58:ab:f7:7c:25:f9:2c:4c:c0:9d:b8:cd:
         ab:f4:2c:27:4c:bf:21:27:7b:3d:6c:cf:bd:21:5e:14:53:1e:
         cb:32:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:35 2024 by rpki-client on console-ams.rpki-client.org