Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa
File:                     34352e37312e3132382e302f32322d3234203d3e20323637363038.roa (raw, json)
Hash identifier:          Bnua0wZXNs0bnQIpOW2beFi+5JQ3wKcaKPO2lcde4DA=
Subject key identifier:   3D:A2:11:6E:A3:36:13:DF:4D:A7:DE:CA:50:66:E3:9C:E4:5D:92:14
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       0E98CB0B5D35BB3F0C9DE56C740E653CCBC219D5
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa
Signing time:             Thu 04 Apr 2024 15:59:21 +0000
ROA not before:           Thu 04 Apr 2024 15:54:21 +0000
ROA not after:            Thu 03 Apr 2025 15:59:21 +0000
asID:                     267608
IP address blocks:        45.71.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:98:cb:0b:5d:35:bb:3f:0c:9d:e5:6c:74:0e:65:3c:cb:c2:19:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: Apr  4 15:54:21 2024 GMT
            Not After : Apr  3 15:59:21 2025 GMT
        Subject: CN=3DA2116EA33613DF4DA7DECA5066E39CE45D9214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:34:e4:cf:ba:ec:41:3a:34:1c:83:ab:a4:
                    43:45:b3:90:0f:b9:28:21:2c:04:23:67:cc:e4:32:
                    8b:3f:f0:3a:08:69:ca:83:31:b7:f0:b7:25:b7:8c:
                    9b:5e:3e:da:0b:4b:3d:84:7a:8d:dd:a0:3b:40:15:
                    a0:ab:4a:c9:50:d4:6f:a5:ca:61:6f:e1:d9:fd:30:
                    78:8f:5a:6c:b6:aa:ce:e4:95:0c:61:a6:a0:b2:62:
                    c6:8f:83:70:75:0c:a3:88:4a:a2:2f:ac:04:38:6c:
                    cd:41:a8:2d:a3:f3:6a:d6:f4:3d:62:90:5d:19:be:
                    09:81:71:23:0b:9b:97:01:41:a9:89:fa:3b:8a:83:
                    96:2d:8c:a9:74:6d:24:56:d5:12:2f:3c:96:3b:bb:
                    ea:48:51:53:47:50:25:91:34:e2:7b:84:ad:96:9c:
                    d5:38:3c:3c:21:83:c3:b6:9a:8a:d3:64:e3:2c:94:
                    7d:a3:01:eb:82:07:2d:08:bf:c3:eb:d6:37:61:aa:
                    50:9f:10:cd:4d:3d:3d:19:c6:4c:d4:7c:5f:e6:96:
                    17:af:6e:97:ae:e9:6b:f6:7b:f4:b6:64:d5:87:f9:
                    03:05:13:35:aa:aa:ec:5c:d3:21:11:16:05:98:4c:
                    4f:a9:93:e5:26:ed:3d:11:28:f3:fa:5f:7c:be:0b:
                    96:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:11:6E:A3:36:13:DF:4D:A7:DE:CA:50:66:E3:9C:E4:5D:92:14
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:ab:2e:d0:68:7e:4b:04:de:c7:5c:5a:45:70:ea:d5:da:24:
         be:a6:a8:28:3f:d5:7a:cd:0b:1e:a7:3d:0e:13:43:d4:9c:b0:
         5a:05:a6:a5:e5:7a:57:3b:86:2d:92:02:5c:05:a0:7b:4d:4e:
         c7:0a:78:7c:14:d3:8d:55:f5:31:b0:15:d4:d5:c9:3b:01:34:
         7e:73:da:57:78:b1:b1:a5:5c:67:cf:fb:8e:49:aa:52:41:70:
         7e:ef:0b:06:e0:ee:d7:37:0d:a2:cf:cf:2f:ce:27:22:e5:4e:
         82:ae:30:8a:6f:01:7c:66:76:d5:54:7a:d4:39:c6:5b:27:b9:
         8a:c0:d1:d7:0c:1a:51:a1:e3:24:8a:c2:1f:b2:d2:c3:b6:ba:
         9f:bb:1d:56:be:70:5c:c7:7a:ed:6a:4e:d3:d1:01:7f:08:f4:
         d6:69:93:9e:70:6b:a7:71:46:08:bc:5a:94:fa:ae:52:c6:10:
         5f:16:2e:f5:eb:f0:6b:6a:24:31:62:eb:c3:64:20:38:cd:fe:
         2b:18:ac:19:a0:46:64:e5:21:bc:b4:c5:33:2f:bb:4e:41:9c:
         ac:48:e2:ab:f1:c6:e9:2a:13:4e:ec:7b:0c:8f:05:c8:9c:ff:
         64:00:6f:26:75:a9:0d:95:db:ef:29:61:66:8a:ae:05:1d:7d:
         d4:3f:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org