Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3136392e302f32342d3234203d3e20323637363232.roa
File:                     34352e37312e3136392e302f32342d3234203d3e20323637363232.roa (raw, json)
Hash identifier:          trwP/tnE1DEHM0f+GJA/ylYhI5nu2KLRmjyK/gjQIb4=
Subject key identifier:   F4:41:21:25:0F:E2:04:0D:73:CA:C7:C2:AD:81:3B:9D:F8:05:CD:16
Certificate issuer:       /CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
Certificate serial:       2C6412E36F43BD2996744B449F131459687D1127
Authority key identifier: D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3136392e302f32342d3234203d3e20323637363232.roa
Signing time:             Thu 13 Jun 2024 01:33:11 +0000
ROA not before:           Thu 13 Jun 2024 01:28:11 +0000
ROA not after:            Thu 12 Jun 2025 01:33:11 +0000
asID:                     267622
IP address blocks:        45.71.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.crl
                          rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:64:12:e3:6f:43:bd:29:96:74:4b:44:9f:13:14:59:68:7d:11:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
        Validity
            Not Before: Jun 13 01:28:11 2024 GMT
            Not After : Jun 12 01:33:11 2025 GMT
        Subject: CN=F44121250FE2040D73CAC7C2AD813B9DF805CD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:bb:7c:3a:11:69:3c:5e:d0:1e:6b:9f:9a:
                    79:7e:d5:87:ef:d8:a3:b6:fb:8f:80:b5:b6:98:a2:
                    f7:3d:ad:2d:44:46:68:1b:58:47:8d:55:d5:37:d3:
                    50:c0:1a:16:93:46:41:96:db:be:74:80:f2:af:27:
                    0d:78:77:4e:55:e9:37:29:a5:62:68:79:55:24:7a:
                    55:95:68:e7:a4:3b:79:1d:6d:8d:b1:07:f6:d6:d0:
                    9d:b9:70:3f:45:a3:93:2c:c0:8d:04:d7:0a:4b:9c:
                    f9:fd:7c:00:75:ec:ae:81:c8:93:03:2b:e9:86:51:
                    65:71:06:30:fd:8e:3b:ce:85:28:91:3e:ed:9f:ad:
                    01:ca:91:96:99:e9:ba:43:d6:d8:f4:eb:2a:57:0e:
                    ed:1f:18:68:eb:47:1e:10:4b:5e:c9:9b:5f:22:0b:
                    bb:93:52:d6:73:86:b2:4a:09:17:c0:10:f6:47:a1:
                    d8:9c:a5:11:73:fc:fb:f3:e5:3b:96:6d:94:8b:90:
                    c0:3e:ba:b1:10:02:2f:e0:c9:ba:26:c6:c3:aa:76:
                    1e:cd:15:f9:f5:00:14:b7:42:e0:98:0d:ee:8d:8b:
                    d9:62:ac:30:1d:29:ac:51:41:85:a6:36:ee:00:d3:
                    f5:b3:cc:62:4a:a0:4b:f0:b9:87:29:0b:5b:41:6c:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:41:21:25:0F:E2:04:0D:73:CA:C7:C2:AD:81:3B:9D:F8:05:CD:16
            X509v3 Authority Key Identifier:
                keyid:D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3136392e302f32342d3234203d3e20323637363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:1c:d2:09:99:77:fa:52:48:26:68:a8:36:74:bb:eb:c7:
         94:c4:13:51:be:dc:94:b6:94:16:2a:a6:ae:67:2b:c7:fe:92:
         a5:ee:e1:e5:a1:17:86:7a:04:e6:77:3a:df:3e:66:91:99:5e:
         d0:bd:99:d5:44:63:07:d5:eb:e2:f0:c7:87:0a:ab:39:41:69:
         04:9d:f4:4b:d2:72:e3:94:47:8e:2f:59:c7:6e:ae:a5:91:b9:
         62:fa:08:6e:4e:76:d9:e2:9e:1a:a8:7d:f0:fd:e6:3f:49:b4:
         bc:90:e5:a5:e0:45:a2:80:e0:d2:e2:c6:68:d4:a6:2b:ce:5d:
         a0:57:58:b4:2d:ed:e0:1e:fc:2d:99:1f:89:2e:2e:4e:99:f4:
         6b:6a:1e:ad:18:f3:45:e7:f7:f5:3e:6e:48:f0:a2:aa:be:a8:
         7c:c3:28:e7:59:75:3b:b9:47:4f:a2:06:fd:ae:a6:8d:44:11:
         ea:61:1f:6a:92:ee:a7:50:1d:e1:bf:15:06:64:31:bf:cb:ac:
         75:fa:9f:e7:0e:52:a5:8f:4d:61:e8:41:e0:aa:b8:c1:1c:01:
         46:c0:da:fe:3a:f1:0e:48:07:da:23:8b:92:29:f4:dc:e4:96:
         17:d1:92:c7:33:70:0f:d7:20:df:ba:c2:72:5f:1d:bb:f6:41:
         75:99:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org