Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37302e33322e302f32322d3234203d3e20323637353434.roa
File:                     34352e37302e33322e302f32322d3234203d3e20323637353434.roa (raw, json)
Hash identifier:          ooHAQx1Y6Qj01BImN4GlPP+ohMHi7izE1/t56QLw61o=
Subject key identifier:   88:9E:D8:21:30:7B:90:1F:24:13:E8:90:E3:FD:52:10:7A:8A:07:94
Certificate issuer:       /CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
Certificate serial:       45E1E4DB7D6EA914CF8B9383A4421F2169C43C61
Authority key identifier: 77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37302e33322e302f32322d3234203d3e20323637353434.roa
Signing time:             Wed 03 Apr 2024 18:30:05 +0000
ROA not before:           Wed 03 Apr 2024 18:25:05 +0000
ROA not after:            Wed 02 Apr 2025 18:30:05 +0000
asID:                     267544
IP address blocks:        45.70.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl
                          rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e1:e4:db:7d:6e:a9:14:cf:8b:93:83:a4:42:1f:21:69:c4:3c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
        Validity
            Not Before: Apr  3 18:25:05 2024 GMT
            Not After : Apr  2 18:30:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:27:4c:af:21:8d:07:35:64:3a:64:38:43:03:
                    3f:13:98:35:c2:a2:b6:f2:8d:45:1d:7b:a2:21:02:
                    0f:a6:b3:36:b0:e2:24:5b:dd:ee:b6:10:be:ae:91:
                    34:00:39:1a:fe:9d:6b:c4:9a:48:5f:f9:c8:3e:f9:
                    df:5b:f6:b4:60:7d:b0:0a:6e:33:10:f6:e5:61:7e:
                    29:5d:ea:be:37:a6:a8:41:49:96:34:4c:f2:d9:7f:
                    7c:08:aa:01:df:43:14:c7:af:50:91:23:63:78:79:
                    a2:10:70:e1:23:9a:d6:c9:8e:ae:24:ac:f0:0c:e3:
                    51:93:55:00:a7:da:5a:49:61:f0:88:66:71:9b:c7:
                    66:74:2b:06:a9:e2:82:7a:b0:dd:13:bd:21:91:6e:
                    bb:15:15:19:7b:ea:8d:02:f5:11:db:ae:ee:43:f2:
                    97:e0:a3:6d:54:70:f7:80:5c:c9:32:a4:29:55:9c:
                    04:44:74:30:ae:9a:c0:82:74:0c:e2:e8:ba:0a:14:
                    5c:44:1b:50:d8:f4:68:f6:2a:b3:50:e1:6e:4e:07:
                    58:ec:b7:dd:a9:d1:ee:9b:af:e7:c5:aa:ea:46:01:
                    aa:b0:a3:d9:0d:ac:7e:0b:34:ad:34:d7:cb:7e:67:
                    8a:7d:37:04:79:37:6a:11:2c:7f:f1:99:f2:c2:f0:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9E:D8:21:30:7B:90:1F:24:13:E8:90:E3:FD:52:10:7A:8A:07:94
            X509v3 Authority Key Identifier:
                keyid:77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37302e33322e302f32322d3234203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:bf:dd:78:28:a5:3e:57:86:45:16:2d:00:6b:a4:76:6d:73:
         3e:99:f5:1c:65:64:d3:82:26:e9:00:fe:de:59:22:77:7a:d0:
         41:14:11:89:c7:56:c0:19:0c:a3:70:4b:24:e7:6c:75:78:27:
         fa:6c:01:c0:eb:01:e7:2e:c4:c9:dc:83:67:8b:64:fb:e5:4a:
         5f:79:38:14:62:d1:1c:35:d0:85:65:b7:30:f9:7a:74:26:40:
         c8:55:2b:be:36:51:9c:8b:b7:35:4d:95:91:11:32:31:01:f4:
         31:c0:41:aa:bd:89:65:90:a4:85:5e:cf:0d:02:ee:8e:37:0c:
         92:16:a6:ec:5e:c4:42:66:47:13:d6:d5:e0:d1:a4:4a:a2:ef:
         93:7f:1d:22:6a:e6:3a:2c:6f:61:80:95:cf:b7:b9:0d:0a:48:
         e2:9c:87:5e:49:c2:5b:ec:24:63:fd:1a:36:e4:02:84:c9:6a:
         ae:91:2b:64:03:fb:2e:f5:18:42:f3:74:8c:ff:76:7e:69:99:
         4e:99:ec:7e:97:6f:d2:ec:a2:1d:d4:35:e3:0f:60:64:c2:d8:
         cd:36:1c:10:62:6e:16:58:b0:8c:6d:82:07:89:80:f1:ac:e0:
         0c:c7:3f:98:6f:da:fb:fe:2c:21:e5:80:1a:7f:fd:6c:4e:c5:
         95:84:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:49 2024 by rpki-client on console-fra.rpki-client.org