Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32342d3234203d3e20323637363134.roa
File:                     34352e37312e3130382e302f32342d3234203d3e20323637363134.roa (raw, json)
Hash identifier:          1kRDA0w7NtTeCAmWWWxaITUMVXDR1C1G7wJRTD7lO0E=
Subject key identifier:   BD:F9:6F:74:91:B5:8A:EF:CC:E5:B3:E0:49:F7:1F:76:36:EF:81:B9
Certificate issuer:       /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
Certificate serial:       62CD40C3817C31FB25B48D1A5FFB7C3E36B47DF9
Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32342d3234203d3e20323637363134.roa
Signing time:             Thu 04 Apr 2024 20:25:41 +0000
ROA not before:           Thu 04 Apr 2024 20:20:41 +0000
ROA not after:            Thu 03 Apr 2025 20:25:41 +0000
asID:                     267614
IP address blocks:        45.71.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl
                          rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cd:40:c3:81:7c:31:fb:25:b4:8d:1a:5f:fb:7c:3e:36:b4:7d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Validity
            Not Before: Apr  4 20:20:41 2024 GMT
            Not After : Apr  3 20:25:41 2025 GMT
        Subject: CN=BDF96F7491B58AEFCCE5B3E049F71F7636EF81B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:83:5d:69:70:9c:ac:52:0a:ca:10:b6:78:
                    14:34:f2:70:44:e0:50:d8:37:47:1f:c2:d3:dd:f7:
                    83:54:e9:45:1b:36:cd:71:3d:01:2a:cb:59:35:fe:
                    85:e4:7e:41:3d:ea:df:d6:23:71:45:56:d0:78:66:
                    38:90:04:df:d9:83:aa:c7:43:bc:6f:f0:2e:04:98:
                    25:20:8d:83:38:1d:65:41:8a:45:68:a8:f5:73:b2:
                    16:09:bb:29:58:45:fa:ed:07:a5:a5:a8:01:fc:bc:
                    65:1b:4c:25:94:d6:4a:d9:fa:11:c1:6e:36:aa:a6:
                    df:9a:d9:d3:0e:87:64:37:2e:49:82:23:97:8a:66:
                    e2:76:d2:f0:40:11:6c:f9:45:d7:96:96:39:9f:8b:
                    6a:d9:8e:8a:f1:6c:e2:29:35:66:05:58:f3:fd:20:
                    b3:0a:1b:dc:30:4e:30:aa:e2:da:bb:9f:72:67:10:
                    52:bf:e3:d1:a6:b8:22:7c:98:6c:fd:ed:45:bf:d1:
                    65:40:f9:51:fe:4d:63:e9:ce:a1:29:c6:f9:d0:b1:
                    f7:4e:45:0b:db:56:db:f0:7e:1b:eb:39:b6:68:a7:
                    20:61:6a:9b:5f:88:d3:a7:cb:9f:84:51:8b:a3:8b:
                    5b:b0:72:b2:0d:6c:64:4d:0d:89:c7:62:59:dd:0a:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F9:6F:74:91:B5:8A:EF:CC:E5:B3:E0:49:F7:1F:76:36:EF:81:B9
            X509v3 Authority Key Identifier:
                keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32342d3234203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:76:a9:87:a4:0b:dd:ac:20:f0:82:d0:da:a8:23:16:db:ea:
         d6:16:b1:37:4d:8d:28:3c:f4:95:b5:6a:ec:82:3b:6a:5f:cc:
         e1:3c:cf:3c:7e:74:92:7a:2d:a6:5b:37:53:73:73:12:6c:a1:
         c5:32:3c:09:8b:17:9a:e9:5a:ab:54:93:f2:dd:19:eb:fd:58:
         cc:a5:46:aa:58:16:03:83:65:67:eb:40:27:e6:51:6b:0b:da:
         a1:59:d4:d5:c4:55:98:80:f8:3e:76:ec:ff:7d:28:23:78:18:
         f5:4d:3c:05:dc:3e:d5:8a:c1:36:39:ca:03:62:64:c2:94:e2:
         dc:a2:b4:b8:67:38:df:08:b8:0e:82:45:2f:09:a0:ef:c6:84:
         b5:a1:17:47:42:59:75:c8:d6:29:31:e9:8f:cb:e4:22:33:c4:
         72:c8:fd:fb:ca:60:88:32:37:35:d5:4e:9f:d1:d8:53:dc:da:
         3b:48:e0:09:d3:b1:f0:e3:d7:29:ac:38:eb:72:a2:9a:48:08:
         c2:47:ab:48:ee:43:69:0b:38:1b:5e:d9:71:0f:8b:28:7d:65:
         f2:93:e5:07:73:bc:8b:2c:45:31:51:f3:71:52:0e:5a:8a:86:
         cd:96:1c:82:c1:16:53:d0:af:14:e4:37:c6:9d:a6:43:9d:a8:
         55:dc:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org