Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37312e37362e302f32322d3234203d3e20323637353434.roa
File:                     34352e37312e37362e302f32322d3234203d3e20323637353434.roa (raw, json)
Hash identifier:          Fk3H4W9M9jdFirjkwXJ0GySWNaxhwjYAdiCrrco/zAs=
Subject key identifier:   6C:E7:EC:A6:BD:C3:67:2F:89:1C:15:22:E3:BC:2D:11:00:4E:75:60
Certificate issuer:       /CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
Certificate serial:       3D85D0272FD5C5BB06E5214C312D267BE8DA9953
Authority key identifier: 77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37312e37362e302f32322d3234203d3e20323637353434.roa
Signing time:             Wed 03 Apr 2024 18:30:05 +0000
ROA not before:           Wed 03 Apr 2024 18:25:05 +0000
ROA not after:            Wed 02 Apr 2025 18:30:05 +0000
asID:                     267544
IP address blocks:        45.71.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl
                          rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:85:d0:27:2f:d5:c5:bb:06:e5:21:4c:31:2d:26:7b:e8:da:99:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
        Validity
            Not Before: Apr  3 18:25:05 2024 GMT
            Not After : Apr  2 18:30:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7f:9b:b0:c3:20:3f:7d:25:2d:b0:7a:8b:3c:
                    49:2b:d1:23:11:74:59:34:ab:1e:32:60:88:c8:07:
                    54:fc:dd:90:20:a5:5b:d8:18:27:8b:c4:83:56:e3:
                    37:25:39:f1:61:9e:66:92:c3:6a:92:85:a1:05:d5:
                    de:b0:b5:2f:75:a7:11:ef:b0:76:f7:7b:02:40:e3:
                    6b:02:bb:ba:ea:ff:c8:3d:2b:77:e5:b1:27:c8:88:
                    36:b6:08:b6:d8:7b:84:b0:8c:7d:9d:5f:1b:30:3f:
                    89:43:a6:34:bb:34:aa:50:88:a9:8d:a0:d5:c7:a3:
                    75:7f:b3:45:21:2a:95:7c:74:5e:38:73:d5:19:1e:
                    c3:30:0c:30:c6:40:ba:26:b8:90:01:03:25:32:5d:
                    b0:1e:c3:23:be:8f:93:11:65:70:72:06:e8:2b:0f:
                    8f:3d:57:25:03:e1:22:46:34:aa:aa:87:77:2b:01:
                    ae:8c:9b:79:54:7c:f2:59:f6:5f:19:4c:c7:26:1c:
                    ec:56:0e:c6:84:97:aa:73:4f:26:86:31:4a:3c:86:
                    55:d8:bf:b0:bd:8f:c5:a1:78:03:8c:7e:b9:2c:64:
                    3b:2f:80:f2:9f:5f:a6:28:c9:0e:28:81:c6:f5:3b:
                    64:84:27:b8:1d:48:38:11:33:fb:49:9b:fd:3f:d0:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E7:EC:A6:BD:C3:67:2F:89:1C:15:22:E3:BC:2D:11:00:4E:75:60
            X509v3 Authority Key Identifier:
                keyid:77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37312e37362e302f32322d3234203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:4a:0f:ae:f6:f7:2c:08:aa:0e:d0:4b:90:42:6f:be:b7:
         d0:e5:1c:62:1e:02:1b:72:59:32:0b:d4:c5:4e:47:ae:22:4f:
         20:e4:2c:c1:07:bc:92:5b:66:4a:91:fc:57:86:5c:31:7a:25:
         4c:a7:50:27:d0:c2:59:cc:2f:3d:5f:8f:7e:a4:04:62:f1:8a:
         6c:e3:30:5f:b8:1e:9a:32:80:59:bf:f3:23:9f:64:3d:87:c0:
         c6:a3:70:62:64:a8:f7:11:cb:0b:0c:47:7e:02:30:1b:8c:e9:
         e0:8a:44:3a:3a:cf:f0:47:b3:2a:2e:77:dc:64:a7:4e:22:22:
         5c:a6:9e:b9:72:13:99:28:30:9f:87:4c:2f:8c:e0:53:63:91:
         03:f0:fb:9c:52:61:3a:ae:fa:0a:cc:1e:76:ef:76:59:51:f3:
         aa:47:cb:0a:dd:df:8c:63:1c:4c:e2:d7:2b:2e:c2:02:59:d7:
         18:b3:80:ef:50:75:ee:a1:6a:a3:28:0e:96:61:4f:87:d2:e3:
         41:dd:d8:6f:6b:64:6c:45:92:4e:d0:11:bd:8d:27:a2:95:23:
         64:27:27:bb:ee:f5:1c:c7:60:0f:f0:61:b5:2e:94:03:86:1d:
         f7:61:9a:54:8c:b0:fd:fc:b7:b6:e0:be:11:2d:16:96:99:0f:
         9a:32:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:41 2024 by rpki-client on console-fra.rpki-client.org