Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
File:                     34352e37312e36382e302f32322d3234203d3e20323637363031.roa (raw, json)
Hash identifier:          IlyUmNrbAz+JCTIYOKNa16wRk1f572hbOH5DqhvMPoo=
Subject key identifier:   4F:2E:26:9C:44:3A:35:AF:B4:DB:83:F1:47:14:84:36:69:11:DA:7B
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       71CC7D9A9CD31206AAF615FCF252FFF0FE480724
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
Signing time:             Fri 16 Aug 2024 00:37:19 +0000
ROA not before:           Fri 16 Aug 2024 00:32:19 +0000
ROA not after:            Fri 15 Aug 2025 00:37:19 +0000
asID:                     267601
IP address blocks:        45.71.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cc:7d:9a:9c:d3:12:06:aa:f6:15:fc:f2:52:ff:f0:fe:48:07:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Aug 16 00:32:19 2024 GMT
            Not After : Aug 15 00:37:19 2025 GMT
        Subject: CN=4F2E269C443A35AFB4DB83F1471484366911DA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:00:20:66:2b:b5:71:16:a8:05:d6:29:6d:
                    96:dc:44:c4:86:1f:86:f3:8f:b8:2f:2f:c7:21:08:
                    88:af:0a:63:30:64:f8:0f:d0:ae:ca:d3:c3:0d:00:
                    53:7c:22:8f:7b:e4:5a:4e:5c:ed:ff:8e:c8:d0:b9:
                    e0:d7:88:5b:0e:b6:11:9b:cc:57:6a:bd:cc:ad:05:
                    f3:c8:42:4a:1f:d4:1f:87:76:b4:31:0a:8e:c9:f7:
                    ba:02:d0:d8:cb:47:bb:b9:32:2e:b3:7d:7a:45:07:
                    cb:73:c4:7b:5d:74:83:11:65:3e:ba:7a:43:65:49:
                    95:5c:f8:93:c7:5d:f4:48:0a:65:85:6e:f4:be:42:
                    a7:11:92:c6:2c:c9:cc:51:5b:0f:c5:f9:c7:c2:56:
                    00:99:b7:45:d0:e1:90:8f:d9:51:5d:27:6e:93:61:
                    87:00:0a:27:35:fc:ee:ce:b9:10:ba:0c:ef:a9:ea:
                    3a:35:fa:79:10:76:3d:0e:9d:1a:d6:68:d1:b7:e5:
                    78:3f:a0:72:8e:da:28:c9:8c:e1:18:58:15:89:15:
                    6d:da:f7:11:dc:4f:f7:76:81:f9:2d:53:2f:be:db:
                    3e:0c:50:60:ae:fb:3d:80:99:44:82:02:b6:41:00:
                    f2:68:7a:b5:16:66:f4:57:76:f5:b7:dd:c7:f4:1b:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2E:26:9C:44:3A:35:AF:B4:DB:83:F1:47:14:84:36:69:11:DA:7B
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:98:66:b8:d2:da:bb:98:75:ec:be:2a:0c:a7:8f:e1:7a:4b:
         11:ba:d7:96:00:45:a6:d4:29:c0:7a:7e:39:b2:4d:36:08:93:
         20:6a:68:fe:8e:d0:ea:9f:93:01:19:f2:59:fc:70:d7:64:8f:
         dd:ca:c1:5a:32:0d:2d:81:ed:3d:68:05:e3:9f:0e:3e:e8:da:
         33:75:72:e3:1d:a7:8c:c5:be:51:90:92:bd:87:51:d3:43:23:
         69:36:b6:cf:07:cf:8e:7f:f3:d8:b0:69:a6:c0:07:9a:2e:25:
         14:49:e4:b1:27:6a:3b:8d:63:23:cb:b7:1b:13:f6:a8:cd:77:
         b6:23:cd:29:8f:cd:13:b1:10:69:b4:80:8a:5f:28:50:bc:57:
         37:1f:d9:6d:ef:46:b9:18:89:58:e6:3a:40:e5:1d:c5:72:22:
         82:42:11:b8:ca:14:ae:38:82:8c:5e:77:f4:11:d2:f5:50:de:
         45:ac:5a:9b:0c:a9:ec:72:a8:7f:bf:cc:14:f1:98:36:7e:d1:
         c3:93:f5:45:ea:dd:65:ac:2d:05:97:e0:63:73:9d:c9:8d:cd:
         b0:7b:a0:3a:c0:77:b1:6e:1a:4d:1f:51:be:fd:77:ff:52:32:
         7e:f1:a0:33:ff:39:c7:2a:19:4f:76:9f:7e:c4:72:0e:af:7d:
         b1:63:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org