Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa
File:                     34352e37302e3139322e302f32322d3332203d3e20323637353835.roa (raw, json)
Hash identifier:          f2UV3mJAEbqBhuQBbSTIHSvRtK5/bIcaDHQZ6aXf3DY=
Subject key identifier:   EC:90:C0:05:92:F3:5B:5B:C0:3E:E1:6B:23:80:2F:98:2B:97:F6:2A
Certificate issuer:       /CN=948EF1405CB732BA0AB9FB155E951539CF495561
Certificate serial:       426ED17FBC72ACE9903C10599E03D747BB50C5CA
Authority key identifier: 94:8E:F1:40:5C:B7:32:BA:0A:B9:FB:15:5E:95:15:39:CF:49:55:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948EF1405CB732BA0AB9FB155E951539CF495561.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa
Signing time:             Thu 01 Aug 2024 17:11:17 +0000
ROA not before:           Thu 01 Aug 2024 17:06:17 +0000
ROA not after:            Thu 31 Jul 2025 17:11:17 +0000
asID:                     267585
IP address blocks:        45.70.192.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/948EF1405CB732BA0AB9FB155E951539CF495561.crl
                          rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/948EF1405CB732BA0AB9FB155E951539CF495561.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948EF1405CB732BA0AB9FB155E951539CF495561.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6e:d1:7f:bc:72:ac:e9:90:3c:10:59:9e:03:d7:47:bb:50:c5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948EF1405CB732BA0AB9FB155E951539CF495561
        Validity
            Not Before: Aug  1 17:06:17 2024 GMT
            Not After : Jul 31 17:11:17 2025 GMT
        Subject: CN=EC90C00592F35B5BC03EE16B23802F982B97F62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:78:6a:a6:64:a2:56:0d:53:f1:a4:51:e1:
                    66:c8:03:94:42:4c:8a:f1:85:bc:8b:8c:c6:ec:88:
                    fc:aa:0f:c8:60:2c:1c:0a:1c:97:e2:b2:35:1f:a6:
                    df:a5:b7:d8:4e:5b:f6:e2:e8:34:1c:59:ec:cd:d2:
                    dd:b7:ed:02:aa:24:7d:08:2e:0a:89:2d:f9:42:5b:
                    00:f2:93:67:ac:13:7d:82:38:0b:31:19:07:1d:61:
                    f3:d4:e1:27:50:f2:7f:71:af:f7:86:11:9c:a8:53:
                    37:45:34:3f:6f:ff:65:d4:01:26:6d:c3:df:f8:db:
                    17:e3:01:51:bb:98:a1:60:c7:08:ec:53:63:6d:48:
                    d0:b5:43:5a:ed:7c:8e:4b:b2:5f:53:6f:3e:49:5d:
                    b9:21:5d:4a:ed:f3:9b:5b:f8:59:0b:24:4c:52:39:
                    a5:bf:c6:9f:76:49:11:b1:b1:fb:fd:8f:d2:51:49:
                    c4:70:71:35:d5:10:8b:95:a4:13:5e:f4:f4:5c:d5:
                    90:9d:ae:15:a2:54:c4:5b:0c:37:d2:d6:42:33:27:
                    2b:79:2f:3d:01:bd:0d:ee:53:69:75:cc:7c:8d:f5:
                    01:1c:c6:1c:33:30:b6:ae:23:87:6d:db:85:8b:2c:
                    eb:b4:b8:fd:fe:bb:bf:76:e4:61:d5:1a:2f:10:99:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:C0:05:92:F3:5B:5B:C0:3E:E1:6B:23:80:2F:98:2B:97:F6:2A
            X509v3 Authority Key Identifier:
                keyid:94:8E:F1:40:5C:B7:32:BA:0A:B9:FB:15:5E:95:15:39:CF:49:55:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/948EF1405CB732BA0AB9FB155E951539CF495561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948EF1405CB732BA0AB9FB155E951539CF495561.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:99:00:89:22:25:b7:96:b0:8c:54:5c:f8:ae:06:b8:20:cb:
         0e:f6:cf:2a:46:5e:45:f7:9c:a0:82:54:9e:a1:9c:d5:cd:65:
         f5:50:61:c8:18:9f:44:17:62:c3:44:48:ca:ab:b1:1e:82:2e:
         bb:26:79:36:58:85:e9:bd:55:86:d9:7b:b6:87:d2:f7:fe:86:
         c3:73:44:6e:86:2e:72:e3:16:0e:a3:fe:c1:e8:f2:2d:50:b8:
         0c:cf:86:13:74:19:02:ba:fe:c3:9d:cb:1e:df:e5:5c:7e:3e:
         8f:a7:01:61:c7:32:51:7c:8b:94:61:3b:33:17:ea:ec:8e:6e:
         52:0e:84:86:88:96:25:10:7e:67:fc:69:69:ce:cf:0c:93:08:
         ed:fd:ba:ea:92:51:ba:69:d2:83:34:a3:0d:62:18:e1:ce:9b:
         6f:29:a8:76:31:88:5a:6a:b3:c3:2c:be:a5:77:fa:59:ef:ec:
         9e:7f:b3:5b:a5:9d:63:92:20:cc:3f:98:74:57:a8:b6:cb:68:
         04:f6:05:4a:93:cc:db:5a:3f:5f:a4:f7:7f:55:b8:3c:a7:b0:
         1d:8b:c9:71:ca:e9:e7:73:56:41:98:68:c6:89:b0:0e:05:bd:
         19:c8:6c:e8:14:1b:95:58:1d:2a:97:78:52:85:51:71:d7:97:
         13:7b:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:53 2024 by rpki-client on console-fra.rpki-client.org