Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa
File:                     34352e3137302e37332e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier:          GQjkVta7tsDOETTFzyKCq/JP7vj40SbQFf345/WfV8g=
Subject key identifier:   A8:F3:2B:FC:93:A9:86:A7:78:AE:DF:A0:8C:94:1D:77:97:C8:27:EB
Certificate issuer:       /CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
Certificate serial:       53D7954604DB1BA7C53B0B28E9EE13DFCB8D2E06
Authority key identifier: 6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa
Signing time:             Thu 04 Apr 2024 00:54:55 +0000
ROA not before:           Thu 04 Apr 2024 00:49:55 +0000
ROA not after:            Thu 03 Apr 2025 00:54:55 +0000
asID:                     268153
IP address blocks:        45.170.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d7:95:46:04:db:1b:a7:c5:3b:0b:28:e9:ee:13:df:cb:8d:2e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
        Validity
            Not Before: Apr  4 00:49:55 2024 GMT
            Not After : Apr  3 00:54:55 2025 GMT
        Subject: CN=A8F32BFC93A986A778AEDFA08C941D7797C827EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:8e:07:b7:8a:6a:5b:68:70:eb:31:a2:df:
                    ec:c6:f5:d2:07:2d:11:c9:41:eb:0f:38:7e:e4:ff:
                    ac:b3:43:3c:97:6d:cf:44:8d:89:5b:75:b5:96:4e:
                    c9:7f:5f:70:76:42:cd:a1:0f:47:80:e0:8f:23:77:
                    e5:c7:62:e1:cc:cb:af:73:e2:80:31:33:1b:5f:2d:
                    cc:97:fd:32:0f:47:1a:5a:82:a9:fd:c7:32:3d:c7:
                    5a:06:ff:f4:c2:9e:78:af:6e:e3:3a:60:32:b0:58:
                    c3:17:30:19:a8:67:c6:a0:cf:f8:87:15:b5:ac:1a:
                    b2:8d:ec:aa:1e:0d:dd:d0:f0:27:12:d5:d7:a4:b2:
                    0c:9d:d6:e6:c2:cc:4a:ca:49:dd:ee:9f:9c:2f:87:
                    d3:62:d1:1e:19:b6:81:6a:0e:13:9c:bc:41:05:d0:
                    be:ce:7c:4e:f8:8b:fd:02:9a:29:13:70:ca:e1:14:
                    a3:78:49:85:36:4c:d8:30:25:09:e9:ee:af:ea:77:
                    d7:2e:8e:03:9d:c7:b9:27:06:de:f7:09:e7:92:df:
                    c4:8a:76:95:76:d4:46:e1:7b:0c:f5:c8:94:e5:0d:
                    9c:b9:16:59:23:62:d9:ba:b4:a0:3e:ce:a7:fc:2a:
                    e9:7b:fc:2d:31:50:33:c3:49:45:49:0a:cb:4d:75:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:2B:FC:93:A9:86:A7:78:AE:DF:A0:8C:94:1D:77:97:C8:27:EB
            X509v3 Authority Key Identifier:
                keyid:6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c3:f5:d7:25:a4:9f:c1:69:8b:4d:f1:0f:f4:95:b9:43:65:
         aa:d8:a0:63:42:06:ee:57:36:4c:3a:93:a5:12:e8:0c:7d:9c:
         71:45:d5:3a:8e:36:01:7c:44:46:78:53:cc:7b:4c:38:16:96:
         61:db:14:0c:48:bc:21:19:04:2d:67:46:fa:f6:6b:7d:00:34:
         15:ee:c9:36:f5:73:12:1f:27:87:f5:fb:c8:17:d9:26:3a:73:
         cd:df:c1:b6:d8:c3:d2:9e:c5:14:a0:ab:2d:a1:d1:e9:fd:54:
         41:d1:64:5c:6c:a7:49:92:1a:42:0a:e0:5d:ec:e3:be:b1:19:
         59:0c:58:db:af:9a:75:ca:29:ee:c6:0d:d2:5e:88:6f:6b:63:
         b0:03:d5:94:9f:08:d9:e2:52:08:1e:da:8d:88:db:dc:05:61:
         36:fa:8b:0b:11:e4:9f:8b:0f:8b:07:dd:94:00:df:9f:c7:1d:
         a6:bc:2a:a2:40:ed:cb:44:fd:93:bb:e2:38:70:c6:ce:3b:8a:
         8b:8b:ee:a1:65:47:90:f9:be:bc:16:cb:47:75:f1:ed:20:d4:
         6b:c8:8c:95:4b:cc:05:29:6a:69:38:f6:37:88:f4:4c:2b:c3:
         cd:4f:4b:58:01:c5:9f:e2:74:bc:40:a9:d6:81:88:53:d6:17:
         e0:a8:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org