Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa
File:                     34352e37302e3139322e302f32322d3332203d3e20323637353835.roa (raw, json)
Hash identifier:          0tp6yeBokOCE3P53AuReGYI6oxERg8mn6iwkEIzEIIo=
Subject key identifier:   49:30:39:30:FD:2A:9F:CB:17:09:F1:E7:81:3F:6A:5E:BE:32:69:80
Certificate issuer:       /CN=628FDF1FD002D8696B0090A9B2EED45327984F8D
Certificate serial:       123276C3BD69747178313A218A9C5A4167376A65
Authority key identifier: 62:8F:DF:1F:D0:02:D8:69:6B:00:90:A9:B2:EE:D4:53:27:98:4F:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa
Signing time:             Thu 04 Apr 2024 03:49:56 +0000
ROA not before:           Thu 04 Apr 2024 03:44:56 +0000
ROA not after:            Thu 03 Apr 2025 03:49:56 +0000
asID:                     267585
IP address blocks:        45.70.192.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.crl
                          rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:32:76:c3:bd:69:74:71:78:31:3a:21:8a:9c:5a:41:67:37:6a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628FDF1FD002D8696B0090A9B2EED45327984F8D
        Validity
            Not Before: Apr  4 03:44:56 2024 GMT
            Not After : Apr  3 03:49:56 2025 GMT
        Subject: CN=49303930FD2A9FCB1709F1E7813F6A5EBE326980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:c8:f5:2a:9a:1b:73:90:8f:88:2e:bb:7e:
                    f6:87:f4:9c:a7:7b:f4:ae:4d:1a:d9:68:46:70:50:
                    0b:2e:7c:62:87:01:2e:70:3b:51:f4:8f:cd:a3:f8:
                    9f:8e:fd:47:fe:44:83:da:c3:07:cb:84:e9:9d:fb:
                    c3:7d:51:a9:dc:5e:a2:a6:3a:3c:76:cf:e5:b0:a2:
                    b3:04:87:72:5b:2d:4c:06:9e:f5:44:d5:fe:49:c1:
                    c2:83:77:02:62:b6:30:4e:7b:09:61:24:21:cb:fb:
                    91:8b:6f:e0:da:fe:c4:d5:47:2f:38:70:1c:fc:63:
                    ba:7a:78:af:77:c0:32:9e:70:90:8f:72:79:f1:8f:
                    ae:a1:3c:e7:bd:a2:0b:ff:c4:d5:ed:7e:68:19:bc:
                    f7:12:dd:9b:e3:79:9c:7a:3e:6d:49:b7:e7:a0:68:
                    73:7e:fd:bf:2f:9b:02:72:66:95:83:96:e2:d8:b7:
                    89:88:b7:61:34:19:92:32:ad:a9:17:4a:08:bf:e0:
                    aa:25:b1:a7:eb:46:66:fe:63:0c:97:b9:c1:d9:50:
                    a2:d0:07:57:f6:ff:83:78:72:ec:e0:8b:ab:74:97:
                    db:8f:c9:10:c1:d7:14:fa:8b:6a:9e:8a:a3:8a:3a:
                    ab:ee:b6:b0:12:a8:be:57:3c:ce:6a:59:c4:55:4e:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:39:30:FD:2A:9F:CB:17:09:F1:E7:81:3F:6A:5E:BE:32:69:80
            X509v3 Authority Key Identifier:
                keyid:62:8F:DF:1F:D0:02:D8:69:6B:00:90:A9:B2:EE:D4:53:27:98:4F:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:34:30:68:ff:fd:a1:83:fc:7d:d2:92:c1:22:9d:a7:fb:a6:
         d0:e3:ed:90:17:16:33:dc:67:29:4b:d3:69:d5:a4:05:1a:2a:
         2d:6b:55:6b:54:17:e3:14:7c:60:7a:f4:41:18:ed:98:f4:c9:
         63:d0:2b:7a:7b:a0:cc:38:f0:3b:f8:e5:bc:d8:53:f0:a7:2d:
         96:30:86:98:f4:6d:8d:bd:fe:a5:df:0e:af:1f:04:eb:86:69:
         4a:21:0b:52:cf:31:ee:60:ac:b9:0b:6a:c1:66:61:d2:d2:7f:
         a2:0e:ec:ad:60:41:cb:13:4e:86:73:38:58:be:1d:bf:13:da:
         d3:95:dc:5e:33:47:3e:a2:81:cf:e4:91:a1:9c:58:e4:f3:28:
         18:9c:e7:b5:5b:bd:3e:08:8c:a2:da:44:ca:f0:9b:86:1a:3c:
         a2:cb:b4:58:9b:36:32:98:5e:00:3d:5c:66:7c:9c:7f:66:e4:
         c8:13:8d:22:df:e6:76:91:9e:d1:07:15:56:80:97:58:a2:be:
         12:44:3d:1b:43:5e:b3:fe:62:cc:cc:b2:a1:10:f5:f0:8f:ba:
         cc:94:0d:4d:ac:cf:a8:87:d0:c6:e3:22:c1:a6:24:d2:07:72:
         f1:57:04:0c:e8:65:50:b4:21:d1:0c:d8:b0:0a:a3:56:67:6d:
         53:05:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:03 2024 by rpki-client on console-ams.rpki-client.org