Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/34352e37302e3135302e302f32342d3234203d3e20323637353839.roa
File:                     34352e37302e3135302e302f32342d3234203d3e20323637353839.roa (raw, json)
Hash identifier:          YQIIdQ0wt92WuuYiB3ZYDcW551J5fpxE+8kz4LdGWFg=
Subject key identifier:   95:7F:7F:5A:7C:76:BB:F4:A8:48:47:FB:5D:AA:EE:FE:EE:14:C5:34
Certificate issuer:       /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Certificate serial:       6BBD51F3E71C0ADCF7FFF5155804D47695C743E8
Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/34352e37302e3135302e302f32342d3234203d3e20323637353839.roa
Signing time:             Mon 15 Jul 2024 13:24:37 +0000
ROA not before:           Mon 15 Jul 2024 13:19:37 +0000
ROA not after:            Mon 14 Jul 2025 13:24:37 +0000
asID:                     267589
IP address blocks:        45.70.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl
                          rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 23:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bd:51:f3:e7:1c:0a:dc:f7:ff:f5:15:58:04:d4:76:95:c7:43:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
        Validity
            Not Before: Jul 15 13:19:37 2024 GMT
            Not After : Jul 14 13:24:37 2025 GMT
        Subject: CN=957F7F5A7C76BBF4A84847FB5DAAEEFEEE14C534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:78:57:93:59:58:89:75:76:e1:b1:17:af:
                    01:9b:00:68:22:73:43:77:53:11:0e:cf:87:20:87:
                    74:8a:ce:fb:a9:0b:2b:2d:d5:5c:a2:68:bb:76:4f:
                    e7:1b:d5:8f:62:77:61:99:15:a2:ea:8d:41:c8:3c:
                    aa:b0:24:50:4f:df:75:c8:4d:81:12:87:a9:93:a4:
                    31:31:90:7e:99:33:b4:d8:78:66:e3:10:22:bf:65:
                    9d:e2:28:2b:51:d3:c1:55:91:d6:55:a5:29:01:3c:
                    43:11:64:84:14:12:ca:7a:66:30:b0:4c:59:62:a3:
                    65:cb:1d:d9:8f:24:10:1b:db:35:e5:c6:66:fc:9d:
                    e0:9d:8e:b8:71:75:c4:32:0e:24:93:47:3a:8e:de:
                    23:e1:ac:e9:55:ff:5c:55:f5:10:b4:a7:40:93:f8:
                    75:d8:5a:f1:56:52:95:3c:41:13:59:ea:73:30:d1:
                    22:12:05:ae:ee:5a:8e:ad:c8:de:d7:3d:60:3d:43:
                    9d:a4:51:3a:79:bf:e7:e1:b5:69:39:cd:25:38:4c:
                    d3:82:6e:f4:ba:2d:0b:7d:ed:46:8e:eb:6b:63:e4:
                    93:5e:24:27:7e:9c:c0:fb:0a:df:57:36:1d:52:a6:
                    b8:3a:95:bd:39:27:ac:7a:41:79:4d:8f:e5:2d:50:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7F:7F:5A:7C:76:BB:F4:A8:48:47:FB:5D:AA:EE:FE:EE:14:C5:34
            X509v3 Authority Key Identifier:
                keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/34352e37302e3135302e302f32342d3234203d3e20323637353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:6c:2c:6b:e4:db:b5:89:fa:14:b3:12:66:73:12:fa:12:dc:
         22:08:be:ae:38:af:24:cb:da:11:e3:50:a8:fe:b4:88:80:69:
         d6:04:73:ca:99:53:5b:67:25:14:f8:22:1d:bf:4c:bd:ea:1d:
         05:b5:ab:0e:59:e7:ed:71:65:63:60:c5:48:39:ed:c3:8e:e9:
         39:08:3c:ad:fd:b5:b6:6c:d6:53:ef:e5:68:c7:6f:eb:03:f1:
         99:14:92:b8:3c:43:56:cb:77:3f:39:ae:e2:ef:22:e2:4a:71:
         7f:08:b5:26:85:2c:e1:81:22:91:b9:3d:13:87:dd:45:b5:45:
         88:6d:16:e5:66:80:a3:02:8a:99:d9:17:ce:64:ea:ab:6c:41:
         38:4f:a6:be:a8:eb:05:1a:f9:79:12:1c:21:00:8e:a3:d2:3a:
         2d:3f:29:2c:9e:78:05:4a:1e:ae:d8:98:5f:f8:57:20:f1:6c:
         56:9b:2f:17:0c:c1:f3:7e:f7:0e:8b:cb:fa:b6:59:f4:18:60:
         31:e5:7b:6f:08:9f:d0:30:6f:89:cb:fe:cf:c8:60:23:80:30:
         f8:3a:8a:d0:af:6d:d1:0c:03:f5:ae:38:73:c5:46:3b:a4:bb:
         d0:4a:0b:df:4b:fe:bc:81:42:7a:7f:14:db:d1:de:28:52:df:
         ec:f6:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:34 2024 by rpki-client on console-ams.rpki-client.org