Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32332d3233203d3e20323637333633.roa
File:                     34352e3233342e37302e302f32332d3233203d3e20323637333633.roa (raw, json)
Hash identifier:          JFkFSq3MhX6S25npsCLK4NhBlME6wkdBcrVVaAZDBh8=
Subject key identifier:   AD:54:16:93:71:0F:2D:55:94:5D:59:13:49:5F:8B:F4:48:CC:3C:BF
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       53633893FE94E63CF2489F31307A3CC990E962A9
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32332d3233203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:51 +0000
ROA not before:           Thu 04 Apr 2024 13:48:51 +0000
ROA not after:            Thu 03 Apr 2025 13:53:51 +0000
asID:                     267363
IP address blocks:        45.234.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:38:93:fe:94:e6:3c:f2:48:9f:31:30:7a:3c:c9:90:e9:62:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:51 2024 GMT
            Not After : Apr  3 13:53:51 2025 GMT
        Subject: CN=AD541693710F2D55945D5913495F8BF448CC3CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:31:b2:69:c3:20:78:f0:27:ce:2f:4b:b2:
                    da:95:00:d5:12:ab:8a:6d:62:ce:c1:16:6d:a9:e0:
                    00:1d:37:59:28:b8:d9:4f:6c:38:ed:82:03:5c:60:
                    65:43:59:aa:0c:ff:a5:c8:9c:e7:ed:ab:d6:5e:f8:
                    7d:a2:72:15:8c:66:fe:1f:6c:bb:99:4a:75:a0:05:
                    43:d4:11:fd:9c:a0:08:8e:f2:64:c4:06:3a:cd:5b:
                    cb:56:a7:0c:5a:1e:77:0f:79:ef:90:e0:51:36:17:
                    70:b2:7d:4e:46:00:9d:8c:ac:c1:93:d5:36:d6:68:
                    c9:f9:f6:64:7c:be:b8:0a:e3:ac:91:f9:6c:4e:70:
                    bc:25:c5:03:50:30:2b:45:d3:f6:cb:32:96:21:29:
                    25:02:f0:16:46:95:ae:ce:34:4a:86:e8:0e:ab:61:
                    1f:f0:83:7d:dc:8f:85:6d:71:3f:1f:f5:96:b0:80:
                    bc:6c:9e:53:79:e1:c2:99:1d:ec:c3:29:78:16:21:
                    e5:43:f8:d4:bd:ed:ad:a8:f7:65:f9:7f:ab:c7:c6:
                    47:d8:be:41:f7:6a:be:68:7b:d1:5c:aa:65:5e:d8:
                    7b:33:85:f0:93:06:78:da:d9:cf:b8:9a:d2:83:2f:
                    1c:ab:51:ae:ac:9e:95:fb:c2:3d:19:e3:07:c4:f9:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:54:16:93:71:0F:2D:55:94:5D:59:13:49:5F:8B:F4:48:CC:3C:BF
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32332d3233203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:1c:fc:fc:66:e1:1e:f0:7e:45:50:ef:88:a7:b3:5f:96:
         89:45:ca:d0:c4:f2:a3:d0:a2:3e:dd:5d:ae:27:8a:e7:eb:cc:
         e1:a2:72:3b:91:1e:e2:7c:45:d4:c7:5b:99:fa:39:b9:26:70:
         69:9a:b2:39:c5:c7:60:ae:15:90:5e:9b:a9:95:6f:d8:90:f4:
         76:18:8d:c0:6a:96:f3:77:6f:97:63:20:73:3e:39:13:52:41:
         d7:cf:97:aa:cc:5b:99:17:75:0f:db:8c:d4:28:d1:04:ee:0e:
         40:56:27:10:18:87:0e:fc:a2:cc:0a:97:e8:a7:4b:f4:7c:bd:
         22:db:ac:a9:57:11:c0:7f:19:1e:ab:49:0c:d5:a0:5c:9f:a2:
         17:63:05:c8:74:c8:9d:ac:80:4b:eb:80:6d:e7:c2:6b:73:82:
         7a:4d:70:0a:c2:b2:7f:92:be:65:d3:6c:b9:fb:ef:03:cf:b5:
         54:c3:ff:d9:c8:41:78:f6:2b:e2:90:a0:93:0e:65:64:9d:2f:
         2f:9c:68:b0:f9:31:b4:b8:77:6e:09:52:a2:c0:9e:b9:78:37:
         8a:13:79:5c:f0:31:c1:c8:dc:f0:3c:6e:b4:94:f0:e0:4b:bb:
         90:92:9c:6c:24:f2:6e:57:58:3d:a5:21:2f:c9:f1:3e:2f:b3:
         a9:66:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:31 2024 by rpki-client on console-ams.rpki-client.org