Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
File:                     34352e37302e3130302e302f32322d3235203d3e20323637353637.roa (raw, json)
Hash identifier:          l91iqyCKoyumGM32RU4TjeIOrwE6T/qvTWAjdSwocOI=
Subject key identifier:   30:58:CD:AA:5B:FE:30:81:07:35:66:A5:FB:E4:83:44:94:18:13:48
Certificate issuer:       /CN=4E27A0B096E02E90683CA85B3CA4A97B1B6060C4
Certificate serial:       7057B3A1BE7B09C55F1104EF0B797D52BC71D4CE
Authority key identifier: 4E:27:A0:B0:96:E0:2E:90:68:3C:A8:5B:3C:A4:A9:7B:1B:60:60:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
Signing time:             Thu 04 Apr 2024 11:18:33 +0000
ROA not before:           Thu 04 Apr 2024 11:13:33 +0000
ROA not after:            Thu 03 Apr 2025 11:18:33 +0000
asID:                     267567
IP address blocks:        45.70.100.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.crl
                          rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:57:b3:a1:be:7b:09:c5:5f:11:04:ef:0b:79:7d:52:bc:71:d4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E27A0B096E02E90683CA85B3CA4A97B1B6060C4
        Validity
            Not Before: Apr  4 11:13:33 2024 GMT
            Not After : Apr  3 11:18:33 2025 GMT
        Subject: CN=3058CDAA5BFE3081073566A5FBE4834494181348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:4c:0e:1a:b1:d6:71:76:c6:91:2b:19:4e:
                    11:4f:16:fc:f2:8d:23:a6:d9:3b:8a:11:0f:df:4a:
                    3b:8e:f0:fc:d9:d8:a7:3f:ef:0b:73:01:98:68:1f:
                    7e:83:8a:f2:9b:81:36:c8:67:91:6b:87:8f:f0:0c:
                    a3:66:45:93:9a:06:1d:11:b5:14:fe:48:40:00:7a:
                    c2:ee:20:cf:37:4a:3e:ab:2a:7f:a7:db:90:fa:ac:
                    78:5e:5e:4f:42:96:a9:84:e5:65:7e:8b:f4:79:89:
                    54:79:ec:e1:86:3a:18:e0:c7:80:1a:4a:97:d2:b5:
                    6e:74:a8:ed:c9:24:a1:59:8e:b6:fe:6d:48:bc:14:
                    72:67:6a:6a:0e:82:33:6d:c0:6f:e5:fa:09:59:e3:
                    df:39:26:36:d4:38:b4:8c:55:13:65:4c:3c:ae:3e:
                    4a:83:2f:db:ff:b0:91:68:ac:9e:01:a7:36:52:28:
                    85:19:16:46:2e:f4:e6:2c:d3:b0:ca:87:bb:86:14:
                    9b:85:30:04:89:62:63:6b:d4:8c:9c:ac:04:90:44:
                    60:16:f6:c3:b2:82:54:13:a7:16:f2:2a:ed:28:b5:
                    0f:80:cc:30:38:7f:4f:7f:9e:af:ff:83:c8:37:de:
                    22:02:4d:4a:c4:f9:a0:f6:9b:73:2d:76:d2:16:76:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:58:CD:AA:5B:FE:30:81:07:35:66:A5:FB:E4:83:44:94:18:13:48
            X509v3 Authority Key Identifier:
                keyid:4E:27:A0:B0:96:E0:2E:90:68:3C:A8:5B:3C:A4:A9:7B:1B:60:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:65:14:67:59:1f:27:1b:85:34:30:31:02:92:c7:2a:90:
         e9:ff:b6:be:e9:10:e3:5c:43:b2:f4:ca:42:37:a5:4f:c3:d6:
         47:9e:a5:dd:ba:30:7c:4b:3c:53:81:9c:5f:3f:31:ff:51:f2:
         0e:10:ee:34:fd:b9:42:c2:46:9a:87:d8:46:57:68:de:c2:8f:
         b0:ec:81:ad:d1:c7:0e:4c:af:99:c6:0e:e8:0c:d9:8c:df:0e:
         34:cb:d9:8c:11:b6:73:b7:f7:ab:f4:b3:b1:3d:e9:50:37:82:
         70:65:4b:33:34:b6:71:eb:34:18:6c:af:42:91:7a:6b:ac:72:
         07:30:08:4a:4c:cc:ef:65:4c:40:04:2c:07:9b:ce:97:6a:44:
         91:84:2f:bf:91:60:ac:a4:a8:b0:61:85:bd:50:eb:a2:66:c5:
         d3:ff:1c:9e:fd:09:93:af:b3:4d:e6:19:41:ff:b5:52:97:e5:
         22:8e:c1:e1:74:bd:f1:ee:bb:53:fa:20:fa:a9:e7:84:7b:ae:
         4a:4d:94:9a:6e:a7:5b:95:1f:aa:22:af:19:14:33:76:ed:53:
         f4:18:b7:e6:ec:0f:df:26:eb:f0:68:4e:80:7e:56:70:6e:8b:
         5f:81:6b:96:be:d4:d8:2a:5f:b3:ab:c3:b9:fb:fd:f8:2e:9f:
         19:be:84:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org