Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e35302e302f32342d3234203d3e20323637353531.roa
File:                     34352e37302e35302e302f32342d3234203d3e20323637353531.roa (raw, json)
Hash identifier:          hF5ooiWMABSgIv8ZNzWwN63+qaTMdHDT41kjDBhj/5M=
Subject key identifier:   85:56:95:A1:17:14:66:1F:CD:92:C6:A4:CC:76:67:58:BF:9B:82:49
Certificate issuer:       /CN=315119F0C7108A60EB3B6173D16C7114048C8D54
Certificate serial:       278EBB85E3BDBD6401D9A8099B94B14BD8093EE3
Authority key identifier: 31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e35302e302f32342d3234203d3e20323637353531.roa
Signing time:             Wed 25 Sep 2024 17:49:16 +0000
ROA not before:           Wed 25 Sep 2024 17:44:16 +0000
ROA not after:            Wed 24 Sep 2025 17:49:16 +0000
asID:                     267551
IP address blocks:        45.70.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.crl
                          rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8e:bb:85:e3:bd:bd:64:01:d9:a8:09:9b:94:b1:4b:d8:09:3e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315119F0C7108A60EB3B6173D16C7114048C8D54
        Validity
            Not Before: Sep 25 17:44:16 2024 GMT
            Not After : Sep 24 17:49:16 2025 GMT
        Subject: CN=855695A11714661FCD92C6A4CC766758BF9B8249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:38:ee:03:a2:cf:86:95:3d:b8:aa:49:88:
                    fc:0a:cb:aa:88:40:ec:a6:28:84:3c:21:8d:dd:58:
                    94:1e:d8:2a:95:d7:ce:0a:09:41:a3:b6:3c:b6:cc:
                    18:b7:a5:80:32:bc:da:f9:b7:2f:89:57:e6:79:30:
                    94:90:82:9d:a4:0c:3a:08:eb:5f:c7:08:35:e6:ae:
                    02:d6:49:17:5a:92:c9:af:e4:c3:a6:70:c7:b0:5c:
                    e7:04:b4:e3:ee:05:e5:b3:21:28:04:1c:a8:6e:76:
                    9d:e4:f8:12:2d:6b:b9:64:d0:c2:65:35:30:f5:14:
                    8e:c5:a4:0e:41:ad:20:b2:ec:49:6a:14:cc:70:88:
                    56:40:87:23:6b:39:43:10:53:93:70:fc:5d:40:73:
                    e5:18:79:78:95:74:5a:35:54:4c:06:0a:bc:b0:0e:
                    d2:8b:67:1c:d5:99:84:98:38:c2:67:7c:cc:7a:be:
                    6b:b3:ae:45:79:2f:e1:27:59:c9:6c:86:e9:e7:54:
                    4d:58:c1:58:54:fd:9e:56:86:f1:79:94:ae:36:4f:
                    94:92:a4:85:a4:70:84:a7:bb:d0:09:fd:c2:c7:bd:
                    5b:9f:1b:42:03:55:87:10:00:ec:1c:41:49:c8:f9:
                    04:d1:f0:48:d6:fa:f6:ac:88:48:21:f5:21:7f:85:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:56:95:A1:17:14:66:1F:CD:92:C6:A4:CC:76:67:58:BF:9B:82:49
            X509v3 Authority Key Identifier:
                keyid:31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/34352e37302e35302e302f32342d3234203d3e20323637353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:5a:54:b4:e3:60:3f:02:bc:71:bc:f1:5a:a9:ec:37:d9:
         d3:c9:77:2c:7f:c0:5b:38:10:3c:e1:7f:6b:5c:68:ec:c5:2b:
         9b:69:da:f1:96:35:c7:4b:86:f2:10:21:6f:66:93:7f:c6:e7:
         09:f9:b9:c1:d8:6e:ec:12:9e:47:a5:4c:4a:d4:4d:69:29:cc:
         5f:b7:d0:9f:1f:d1:0d:06:ca:62:c9:6f:0c:94:51:54:ad:c9:
         ff:c3:24:9b:2b:9d:08:6f:57:42:cf:b4:1e:9f:b1:b7:c6:fa:
         5b:dc:5a:bb:25:d0:78:c6:df:8d:fc:da:48:a9:e4:3a:91:33:
         e3:27:8b:e6:82:96:38:3b:af:d0:be:b7:a1:7e:e8:41:33:ec:
         65:53:14:98:c5:c9:8c:98:8f:8b:85:3f:cc:bc:90:da:16:c1:
         10:86:de:92:97:44:c7:9b:4c:40:72:b2:c5:7d:a4:34:ba:f1:
         f6:fa:f6:bb:7d:15:b6:e1:eb:3c:a5:5c:9d:b2:db:df:a6:66:
         98:cd:d9:5f:f9:a7:6a:ba:d3:e7:b1:21:bd:b5:3c:3b:8b:af:
         11:2a:cf:a1:91:48:f0:b4:bd:3e:86:80:f7:a5:9d:65:7d:d0:
         78:3a:2a:58:27:74:f1:a9:71:8e:14:f2:0d:4d:c3:5b:69:71:
         54:09:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:55 2024 by rpki-client on console-fra.rpki-client.org