Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/34352e37302e3134382e302f32332d3233203d3e20323637353839.roa
File:                     34352e37302e3134382e302f32332d3233203d3e20323637353839.roa (raw, json)
Hash identifier:          f7u9u2vW49b3G38ModFZxPafvgyzvv1xcdB2JGr7qUw=
Subject key identifier:   A0:64:0E:BA:9F:2A:DB:B5:E8:80:DE:2F:93:00:26:99:DB:9C:89:94
Certificate issuer:       /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Certificate serial:       17C7A022B4E4E181CC2A4011763BAF0B6C56893B
Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/34352e37302e3134382e302f32332d3233203d3e20323637353839.roa
Signing time:             Mon 15 Jul 2024 13:24:36 +0000
ROA not before:           Mon 15 Jul 2024 13:19:36 +0000
ROA not after:            Mon 14 Jul 2025 13:24:36 +0000
asID:                     267589
IP address blocks:        45.70.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl
                          rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c7:a0:22:b4:e4:e1:81:cc:2a:40:11:76:3b:af:0b:6c:56:89:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
        Validity
            Not Before: Jul 15 13:19:36 2024 GMT
            Not After : Jul 14 13:24:36 2025 GMT
        Subject: CN=A0640EBA9F2ADBB5E880DE2F93002699DB9C8994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:28:4d:94:a6:8a:76:a5:df:bf:db:75:c5:
                    af:d6:41:2b:87:d4:f9:1b:25:6a:20:1b:07:ee:f3:
                    19:00:c2:11:51:09:50:ab:fb:7c:5f:10:e6:d7:55:
                    ae:47:28:f5:48:32:0e:c5:3e:a6:32:f5:6c:11:24:
                    bb:4e:b2:8d:58:9b:19:0e:d4:56:cc:fb:e5:a2:5d:
                    39:11:bd:61:0a:78:35:3b:f2:f3:9b:dd:1f:f0:a1:
                    9d:5f:c0:a5:f3:ab:43:44:47:0b:ea:60:e9:90:23:
                    03:0d:41:63:75:f3:f2:62:28:9b:c9:dc:5c:07:74:
                    89:23:7d:46:e4:ff:8d:b0:df:28:b7:f0:d4:5e:e2:
                    86:49:3d:31:59:d6:81:95:bd:8b:b4:af:48:e1:b4:
                    89:4e:63:77:41:9e:0c:7b:3e:4e:a4:06:81:1e:42:
                    11:00:aa:dc:50:fb:11:6e:06:5f:f7:8d:68:92:87:
                    53:92:16:ca:47:43:93:2c:5e:b6:2c:13:51:77:e3:
                    f6:38:31:92:c4:a3:e6:64:bf:2f:be:5d:91:0d:fa:
                    bd:8e:a1:3b:c1:aa:55:98:5b:bb:72:aa:a5:30:07:
                    49:e2:1f:2c:73:43:0e:4f:71:21:37:09:e0:8f:9b:
                    12:1f:62:14:55:bc:30:9e:aa:36:23:c6:83:2b:e5:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:64:0E:BA:9F:2A:DB:B5:E8:80:DE:2F:93:00:26:99:DB:9C:89:94
            X509v3 Authority Key Identifier:
                keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/34352e37302e3134382e302f32332d3233203d3e20323637353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:47:bc:ca:4f:d5:46:b7:c7:9e:96:e3:a5:43:24:82:2a:75:
         41:49:c0:58:3d:3f:02:1e:dc:b5:b7:74:5c:73:a1:90:0d:da:
         7e:6a:01:45:0c:5b:07:f4:2b:a0:11:7b:63:98:2d:dd:4c:53:
         7c:47:6f:d1:10:6e:96:b7:99:2c:50:64:eb:b9:41:65:ed:18:
         2e:77:d8:f0:0a:73:4f:f8:4c:20:80:75:52:88:15:48:87:f8:
         6e:b9:fe:93:f9:a5:43:1e:0f:ac:8a:95:d7:3d:94:94:b8:6b:
         c8:d4:cd:ca:a5:ba:84:25:68:2c:1d:fa:f1:6c:b9:80:dc:7d:
         0f:1b:5c:8c:1c:5e:d3:f7:8e:35:43:25:0a:dd:01:16:66:80:
         05:7a:8b:60:18:5f:2b:c6:52:f4:5c:22:c6:86:02:07:75:d4:
         7e:ef:96:af:67:53:4f:1c:c2:91:ff:c3:09:71:72:5a:a7:5e:
         43:be:51:da:e8:8c:fd:db:4c:86:8c:c0:6f:06:6e:55:c3:a5:
         6e:d2:ca:18:85:51:cf:18:54:a9:11:5c:a3:8f:9e:e9:ca:56:
         5a:c3:c5:ff:22:e5:fb:93:2b:38:53:c7:b4:0e:3f:e9:5a:70:
         e1:60:a8:67:9b:b8:ef:ed:5d:d0:d0:1c:67:b8:4c:6c:ce:26:
         df:c9:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:20 2024 by rpki-client on console-ams.rpki-client.org