Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35322e302f32342d3234203d3e20323637353739.roa
File:                     34352e37302e35322e302f32342d3234203d3e20323637353739.roa (raw, json)
Hash identifier:          ffI6CSGQPUtHMMaLBs9FpfV4J5OtSyceei6SejpAdVk=
Subject key identifier:   22:C9:D4:96:D2:3E:95:83:0D:44:8D:D6:4C:D6:E5:93:5C:0F:7F:CD
Certificate issuer:       /CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
Certificate serial:       0AF6D502026BC3F79343EB2C849AAA8D7DB12F26
Authority key identifier: ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35322e302f32342d3234203d3e20323637353739.roa
Signing time:             Thu 04 Apr 2024 21:59:10 +0000
ROA not before:           Thu 04 Apr 2024 21:54:10 +0000
ROA not after:            Thu 03 Apr 2025 21:59:10 +0000
asID:                     267579
IP address blocks:        45.70.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.crl
                          rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f6:d5:02:02:6b:c3:f7:93:43:eb:2c:84:9a:aa:8d:7d:b1:2f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
        Validity
            Not Before: Apr  4 21:54:10 2024 GMT
            Not After : Apr  3 21:59:10 2025 GMT
        Subject: CN=22C9D496D23E95830D448DD64CD6E5935C0F7FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:33:0c:e0:0e:e6:5a:8c:49:66:4e:0b:ae:
                    6a:d3:e8:58:30:dc:06:7d:f8:bb:d2:5e:0c:41:8a:
                    72:f9:d1:72:87:8f:48:f3:78:00:93:03:98:4f:68:
                    26:9f:88:25:6e:29:9f:0d:93:af:64:f3:6b:f8:87:
                    f6:ae:ef:ed:6a:8c:83:24:4a:63:29:3f:81:8c:71:
                    60:70:f4:cc:e1:ad:dd:49:08:2a:fa:54:16:6f:8a:
                    3f:fa:f6:c3:73:1c:a9:40:f2:60:d7:2c:d9:73:49:
                    ef:5c:3d:bb:ce:35:ee:64:0e:25:7a:e1:34:50:db:
                    ee:95:03:b5:cd:33:83:63:c1:e0:2d:2e:41:b1:51:
                    b4:ff:b1:cb:74:e4:4f:72:f0:67:1a:5e:95:68:32:
                    eb:1f:b8:f6:52:86:5e:a2:32:d8:09:c2:90:96:b0:
                    ed:43:4f:58:78:48:d2:21:45:f8:69:eb:f1:cd:07:
                    ec:29:81:c4:61:35:70:31:99:26:51:49:23:38:2c:
                    ad:dd:fc:d4:de:f0:ea:4f:c8:46:56:75:65:20:e2:
                    0d:b5:0c:43:1d:a3:62:eb:89:41:ae:9d:fc:97:45:
                    7c:34:22:3c:cd:4f:bd:35:ac:33:20:ba:2a:91:23:
                    0e:e3:4d:dd:14:26:4f:2a:7c:44:a2:24:25:7c:38:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C9:D4:96:D2:3E:95:83:0D:44:8D:D6:4C:D6:E5:93:5C:0F:7F:CD
            X509v3 Authority Key Identifier:
                keyid:ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35322e302f32342d3234203d3e20323637353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:49:f7:dc:b8:e2:c3:6a:8a:f0:5f:fa:b6:bd:0d:2e:1f:26:
         3f:8b:b0:25:46:56:3a:44:da:98:09:75:55:bc:64:5c:9c:74:
         99:a7:36:81:d1:ca:af:32:f8:85:67:f8:ff:79:42:51:53:17:
         02:e2:3e:d9:3f:37:80:15:3b:76:33:e1:dd:2e:f5:c6:35:e3:
         59:57:29:c9:22:be:84:a4:d8:87:fe:37:1f:0c:81:1d:0c:c2:
         d6:d7:e6:4c:ad:2e:66:ed:a5:32:e9:a3:5d:59:e8:ef:c5:69:
         09:98:2b:16:c3:79:fc:70:fd:4a:4b:37:c5:89:7f:bd:0f:c5:
         6d:b7:82:42:c7:30:d5:b8:f1:63:f6:25:a9:de:13:d6:08:62:
         6a:33:d8:a4:26:70:c1:8e:94:67:ac:67:0b:a3:2a:fd:a9:da:
         bd:14:ef:ad:bb:48:f4:81:43:2a:eb:41:45:29:8a:5e:e0:14:
         67:b8:ca:ee:41:4b:71:85:74:94:15:95:5a:9c:7b:ad:d5:9d:
         c7:21:c1:4b:96:05:a2:e7:e9:19:c5:bc:98:36:bf:c6:7c:ca:
         98:9a:1f:25:c6:d8:17:24:93:74:a3:4d:f5:12:20:22:c3:62:
         00:db:da:f1:73:89:03:4f:6f:fe:22:c5:8e:50:9f:11:52:b5:
         1d:f4:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org