Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
File:                     34352e37302e32382e302f32322d3332203d3e20323637353734.roa (raw, json)
Hash identifier:          M7TY98v4yjj0bR9HrRWIH6vqkjhPJO7oXLWdMRKwm94=
Subject key identifier:   DE:FE:FE:F1:27:53:AB:A1:C6:D7:75:30:CC:B6:92:11:82:F3:E9:2A
Certificate issuer:       /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial:       6C02EA43A334A1B873BE64BAD233BFC49B0A96E8
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
Signing time:             Mon 22 Jul 2024 12:41:29 +0000
ROA not before:           Mon 22 Jul 2024 12:36:29 +0000
ROA not after:            Mon 21 Jul 2025 12:41:29 +0000
asID:                     267574
IP address blocks:        45.70.28.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
                          rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:02:ea:43:a3:34:a1:b8:73:be:64:ba:d2:33:bf:c4:9b:0a:96:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
        Validity
            Not Before: Jul 22 12:36:29 2024 GMT
            Not After : Jul 21 12:41:29 2025 GMT
        Subject: CN=DEFEFEF12753ABA1C6D77530CCB6921182F3E92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:d9:40:e1:3c:56:f1:59:57:f6:06:27:b2:
                    44:dd:8c:cb:40:d4:e2:d8:4d:08:64:74:17:55:09:
                    49:24:66:cb:7e:57:ec:ad:0a:29:b4:0f:36:d2:57:
                    5f:ef:de:e3:9a:48:8a:7e:bd:99:82:43:c6:80:70:
                    52:40:2e:40:9c:37:18:12:ba:61:3c:06:2b:18:e2:
                    0b:5c:bd:44:f6:2c:21:be:a0:2b:1c:b0:17:20:fa:
                    25:49:f9:1e:77:c3:95:d6:08:6f:ca:4e:c8:ef:2b:
                    ec:75:01:93:be:61:a1:44:e9:49:55:30:fc:d3:af:
                    ed:ec:62:ed:f7:26:8a:0c:7b:9b:b5:4b:fe:e5:74:
                    8a:27:40:f3:56:b1:05:f1:01:f5:62:46:fa:6a:a2:
                    88:e6:e5:14:c4:67:dd:26:30:eb:0f:9d:f1:2d:7c:
                    e9:4e:1c:c2:7b:da:0f:d7:e1:f4:3b:69:0c:22:ea:
                    42:eb:d9:5f:f5:5e:ba:20:14:2b:52:80:92:c9:d4:
                    5e:57:37:55:e5:bb:6f:8e:86:c2:7d:71:14:3e:2b:
                    0a:80:b2:09:d2:8d:fc:f0:d2:e7:ed:a7:f9:2c:36:
                    24:b6:c6:69:33:e6:3a:19:30:ae:28:0f:fb:7c:37:
                    64:c9:a9:77:4a:36:b9:2b:d6:df:7e:03:ae:2c:6f:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FE:FE:F1:27:53:AB:A1:C6:D7:75:30:CC:B6:92:11:82:F3:E9:2A
            X509v3 Authority Key Identifier:
                keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/34352e37302e32382e302f32322d3332203d3e20323637353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:98:4a:fa:fd:69:d3:66:e4:c2:f2:55:2b:58:66:be:1f:f8:
         4a:73:78:e2:3c:1c:00:80:6b:0b:cd:03:0f:3c:9e:b7:01:f0:
         a3:68:4c:fa:6f:4c:14:d6:94:28:fc:3e:ef:51:40:41:f3:1c:
         e3:79:3b:ed:da:94:03:d0:63:be:d7:41:65:a4:e1:d7:d7:50:
         79:69:ba:ff:f1:64:2c:f9:49:24:00:f3:cb:a0:5c:24:e7:a1:
         3e:ab:f2:75:0e:76:a7:a2:d4:9c:15:e1:8e:51:7f:b5:5e:14:
         30:e2:b9:ad:83:16:3b:1f:45:46:59:45:a6:86:c8:c3:46:8f:
         7d:05:12:72:ea:6f:be:82:5a:b1:dc:24:ff:87:c9:52:2e:6e:
         df:96:1f:ff:ff:a6:26:2f:4c:fb:95:12:a9:03:e4:37:78:e8:
         34:a8:92:08:cc:95:3e:37:ce:d4:6c:a6:0d:a4:3b:07:b2:4b:
         0b:59:96:42:6d:d3:84:b1:06:a3:95:75:1f:4a:b1:7f:5b:4c:
         d5:77:62:bb:6c:54:ec:41:cd:c0:07:86:31:1f:12:05:84:d8:
         49:b8:0f:e6:76:48:1f:7e:e6:e3:63:99:14:4b:d7:29:d9:b4:
         4b:3f:54:a7:9f:77:29:26:c5:c6:08:b5:59:d1:f3:23:3e:db:
         4f:03:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:18 2024 by rpki-client on console-fra.rpki-client.org