Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3131302e302f32332d3233203d3e20323637363134.roa
File:                     34352e37312e3131302e302f32332d3233203d3e20323637363134.roa (raw, json)
Hash identifier:          XgG51CSQp5yIYoQKHuiuvv/wNc61YlNZz+Xn/XnBU3Q=
Subject key identifier:   AB:E9:7E:7C:01:05:3A:76:D6:7A:B7:2E:4B:3F:C8:99:19:F6:62:EB
Certificate issuer:       /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
Certificate serial:       273CFC12873C7C9DE838223F3023A1C1DFAFB71C
Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3131302e302f32332d3233203d3e20323637363134.roa
Signing time:             Thu 04 Apr 2024 20:25:43 +0000
ROA not before:           Thu 04 Apr 2024 20:20:43 +0000
ROA not after:            Thu 03 Apr 2025 20:25:43 +0000
asID:                     267614
IP address blocks:        45.71.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl
                          rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3c:fc:12:87:3c:7c:9d:e8:38:22:3f:30:23:a1:c1:df:af:b7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Validity
            Not Before: Apr  4 20:20:43 2024 GMT
            Not After : Apr  3 20:25:43 2025 GMT
        Subject: CN=ABE97E7C01053A76D67AB72E4B3FC89919F662EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:b8:ec:f1:43:13:f8:26:a5:0e:f5:23:cc:
                    4b:b1:9d:0d:63:3c:e0:3a:f6:36:ec:da:8d:9d:ab:
                    51:ff:c0:6d:a4:0b:b7:9c:5a:3b:cc:98:e2:12:7e:
                    14:d7:04:72:aa:f7:c5:1b:fb:f1:19:7c:0d:1e:92:
                    0c:7c:4f:a4:d3:75:e9:40:42:15:0b:b2:59:b2:2e:
                    08:6c:26:4c:dd:43:0f:84:e5:bd:67:6a:32:e2:d5:
                    1f:bb:cd:7b:3f:de:06:1a:f6:22:47:b6:77:26:25:
                    14:2b:2d:e9:eb:e8:73:2c:4a:fd:a1:3a:47:18:8d:
                    97:67:4c:6b:54:ac:56:fd:24:af:2d:43:39:b1:34:
                    c2:7a:43:28:3c:ac:ff:2c:38:80:44:ab:96:fc:b5:
                    b3:9c:e8:28:3b:b8:f3:73:83:19:8b:c6:9e:59:f1:
                    15:7a:23:19:35:8d:f9:82:94:93:c6:cd:21:c6:d1:
                    0d:04:82:87:df:19:50:53:b1:e5:c3:60:d8:e2:b5:
                    44:ba:05:ab:e5:cd:a1:b7:cb:cf:d9:be:91:84:43:
                    a8:41:08:de:30:25:3d:1d:da:60:9d:c9:11:b9:0b:
                    e5:98:c1:81:83:6f:8f:ff:72:a8:83:80:77:77:98:
                    b5:27:b2:e7:31:3b:8c:df:05:cf:0e:5b:61:92:77:
                    ed:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E9:7E:7C:01:05:3A:76:D6:7A:B7:2E:4B:3F:C8:99:19:F6:62:EB
            X509v3 Authority Key Identifier:
                keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3131302e302f32332d3233203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:64:a1:f7:14:bf:ef:d9:85:39:36:d9:30:20:b6:86:74:d4:
         0b:3b:a3:0b:62:3b:f0:11:6d:89:64:1d:ed:83:92:71:1e:7d:
         90:48:ee:a8:89:20:bf:ad:20:ce:72:5c:4b:8b:b5:62:d3:93:
         5a:81:95:33:bc:91:ce:bb:b5:30:94:21:1b:b1:19:fd:6c:61:
         c4:d5:ff:e0:82:a7:1a:03:c7:7d:be:e9:8e:d2:c2:bd:49:bd:
         9a:77:c3:e0:b7:65:40:4d:95:f8:60:b2:b4:71:54:9c:85:55:
         2c:f2:0d:64:fa:5b:c1:a7:db:73:61:c4:03:15:81:ce:27:74:
         c4:3d:38:bc:0d:a4:ae:78:9c:e3:35:30:e2:05:20:18:79:f3:
         07:96:47:6a:b8:ca:da:08:d1:53:f8:fd:03:08:d2:eb:42:00:
         e1:f6:7a:05:89:0c:d1:6b:aa:77:3b:dc:e0:3b:dc:89:7d:a5:
         1a:06:be:85:3d:19:29:e1:71:61:7f:96:64:08:eb:e8:f0:96:
         09:fb:aa:1a:b0:b8:ee:2d:b4:65:78:2e:c8:ac:b9:f3:b5:8b:
         7b:5f:8f:57:5c:8e:2a:49:d6:63:ec:f9:77:f4:51:2c:7c:2a:
         b6:b1:bc:b7:ac:b6:23:8c:fa:7d:bf:1d:db:87:6c:ab:e0:7d:
         53:f0:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org