Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35332e302f32342d3332203d3e20323639343131.roa
File:                     34352e3138362e35332e302f32342d3332203d3e20323639343131.roa (raw, json)
Hash identifier:          xbBbN+MK0lR+d7jmCr5WlPJcCQGdW7szZB35n8vzlgo=
Subject key identifier:   33:EF:62:26:91:68:20:40:44:2F:4D:FB:39:83:92:30:E5:8D:36:89
Certificate issuer:       /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial:       40DD7546CD8B43C6E2AFA37D6DF80DFB69927C70
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35332e302f32342d3332203d3e20323639343131.roa
Signing time:             Thu 23 May 2024 01:37:52 +0000
ROA not before:           Thu 23 May 2024 01:32:52 +0000
ROA not after:            Thu 22 May 2025 01:37:52 +0000
asID:                     269411
IP address blocks:        45.186.53.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:dd:75:46:cd:8b:43:c6:e2:af:a3:7d:6d:f8:0d:fb:69:92:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
        Validity
            Not Before: May 23 01:32:52 2024 GMT
            Not After : May 22 01:37:52 2025 GMT
        Subject: CN=33EF622691682040442F4DFB39839230E58D3689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:bf:48:59:da:ce:b3:45:78:c1:4a:06:d8:
                    84:8d:99:24:0c:a3:a4:86:11:54:ee:ca:92:13:7f:
                    d2:4b:1b:8b:22:21:99:ce:23:6d:36:b0:3a:a6:2b:
                    b6:0a:d3:93:e8:f6:1d:4c:c2:f8:8a:ef:9c:93:53:
                    c6:5c:5c:af:df:c9:d4:1b:ac:4c:0b:ed:b9:5e:ed:
                    2f:28:56:70:ca:17:56:2e:99:dc:df:9f:a1:a7:f2:
                    eb:4d:be:f3:0f:bf:91:d2:21:8d:91:88:43:c8:f5:
                    7a:19:5d:f7:6c:e2:60:6b:35:ca:c1:77:60:b5:8e:
                    3c:a4:b8:f0:f9:4c:96:f2:d5:3f:3a:37:7e:31:6f:
                    f0:63:c8:72:74:31:39:2c:16:76:29:42:8a:77:0e:
                    51:96:b5:97:5c:e0:39:b1:eb:19:5c:54:63:f4:6e:
                    a1:fe:b9:3d:bf:7c:10:8c:ce:98:b3:22:71:d8:c7:
                    72:42:d5:d9:41:60:c4:fa:d0:d9:1b:0b:3a:08:61:
                    58:67:23:85:62:c9:ec:80:f7:dc:bf:9c:05:09:c3:
                    be:eb:11:e4:0d:1f:58:b5:28:87:74:56:bf:56:42:
                    50:fc:5a:cb:da:35:ac:11:af:cd:d4:e6:c7:d6:78:
                    24:7f:b9:50:31:2c:c2:88:dc:42:6e:32:9c:d2:d4:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EF:62:26:91:68:20:40:44:2F:4D:FB:39:83:92:30:E5:8D:36:89
            X509v3 Authority Key Identifier:
                keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35332e302f32342d3332203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:d9:53:75:ac:58:69:73:8e:9f:e7:87:e5:d7:1c:8c:fd:9e:
         c9:ba:0e:8b:2f:f4:95:7b:18:19:14:13:81:68:61:a4:c6:7a:
         96:82:72:48:2a:bd:96:ec:e9:44:b2:b2:45:61:92:44:2f:86:
         b9:76:8f:a9:c1:13:a1:ca:4e:81:dc:f7:3e:9e:b5:ca:91:6d:
         f7:92:c2:70:3c:6a:08:81:9f:5d:2f:63:28:8e:bf:0b:bb:7a:
         6e:b6:fe:d1:41:d1:49:2f:45:b4:4c:e3:a7:1b:99:9f:0e:64:
         9a:94:d9:a4:ff:89:34:7f:f0:a8:54:1b:c2:08:21:9d:c0:db:
         0a:9f:6c:58:1b:e9:7a:8f:56:ec:1c:35:53:d0:14:43:c7:60:
         b5:d3:1c:46:14:ee:89:d5:34:16:68:c8:1e:ec:7b:13:34:13:
         d4:d4:0f:aa:4c:10:9d:83:99:fb:34:47:0f:2d:b8:93:7d:12:
         f7:85:f4:89:7c:f7:ad:e3:57:69:0a:72:44:88:ad:da:71:3d:
         5a:fe:dd:c7:13:95:b2:5c:2c:f5:12:fb:02:19:96:f4:46:7f:
         fe:51:cd:c3:b8:d4:c3:85:af:e7:5d:cd:30:ba:25:64:89:2d:
         1a:e4:04:0e:67:26:d4:a9:a6:35:ac:bf:86:14:27:64:09:64:
         21:5a:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:22 2024 by rpki-client on console-ams.rpki-client.org