Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa
File:                     34352e37312e3130342e302f32332d3234203d3e20323637363034.roa (raw, json)
Hash identifier:          sjOTftb1+FvnF3ag3hdUOZgK0fnfFA2DTuO6j9GDJkw=
Subject key identifier:   07:21:A6:CE:49:19:24:32:8C:71:1E:66:74:10:FE:49:B0:D0:DF:F9
Certificate issuer:       /CN=62504691574999BE3FC471A877B8D5C052A750B8
Certificate serial:       5F87491782AD77AD87D3CCE7C7FC34017271CF99
Authority key identifier: 62:50:46:91:57:49:99:BE:3F:C4:71:A8:77:B8:D5:C0:52:A7:50:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa
Signing time:             Thu 04 Apr 2024 16:48:01 +0000
ROA not before:           Thu 04 Apr 2024 16:43:01 +0000
ROA not after:            Thu 03 Apr 2025 16:48:01 +0000
asID:                     267604
IP address blocks:        45.71.104.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.crl
                          rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:87:49:17:82:ad:77:ad:87:d3:cc:e7:c7:fc:34:01:72:71:cf:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62504691574999BE3FC471A877B8D5C052A750B8
        Validity
            Not Before: Apr  4 16:43:01 2024 GMT
            Not After : Apr  3 16:48:01 2025 GMT
        Subject: CN=0721A6CE491924328C711E667410FE49B0D0DFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:04:53:9c:98:a1:1d:56:13:3c:4e:95:cd:
                    7a:82:4d:ca:62:08:04:1a:12:de:42:86:cd:8a:5d:
                    ca:6e:c7:79:62:64:67:37:a3:b3:91:b4:59:91:5c:
                    83:fa:99:f6:89:0b:fe:6a:b7:10:30:71:27:58:23:
                    9f:ed:c6:14:1d:12:6a:36:9f:7f:ec:2c:80:70:03:
                    47:a8:29:8e:e5:bf:dd:03:14:34:2e:36:d2:5f:4b:
                    e0:ba:54:be:92:2e:d6:66:81:6b:a5:3e:4b:28:85:
                    4b:7b:a1:39:a9:6e:6a:a7:02:c1:5f:01:13:5f:9c:
                    65:65:c7:84:b2:90:ce:e2:ad:67:59:9f:f7:33:bb:
                    4a:6e:8d:a7:54:1c:b4:ed:e8:9c:10:92:f4:0f:38:
                    bc:01:b3:ef:fb:ec:b4:aa:1f:37:ed:01:d2:2e:93:
                    25:fe:a3:f8:5e:9e:45:bf:4b:b9:3b:2f:e5:0b:f9:
                    8d:10:c1:9b:59:ff:1c:ea:00:fd:4f:93:11:8f:e2:
                    52:82:4b:28:ed:72:4c:9f:80:d5:50:56:dc:34:b5:
                    37:fa:0f:c9:f9:63:cd:99:51:28:9f:47:e4:66:59:
                    7d:e2:fc:28:70:35:6b:71:4d:08:e0:80:37:eb:a8:
                    4d:57:ba:a9:ce:cc:68:19:28:02:1c:5a:b8:d1:c5:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:21:A6:CE:49:19:24:32:8C:71:1E:66:74:10:FE:49:B0:D0:DF:F9
            X509v3 Authority Key Identifier:
                keyid:62:50:46:91:57:49:99:BE:3F:C4:71:A8:77:B8:D5:C0:52:A7:50:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:dd:dd:8c:a5:cd:f8:08:e9:08:fc:f7:ec:1c:05:c7:2b:
         a1:a9:3b:3a:e7:0f:f2:4d:63:c6:62:c5:c2:cb:d4:0f:86:38:
         39:e9:47:02:f5:82:0e:6d:e6:a7:bc:d0:5f:52:87:f3:db:e1:
         e1:50:fb:ef:79:e1:be:6e:26:ee:46:b4:e9:c8:b0:95:3d:6d:
         08:af:54:6a:e5:ec:57:f5:75:7a:df:33:58:8a:f8:2e:6a:5d:
         66:05:7a:55:05:21:6b:97:c9:10:62:e8:c1:5b:a3:a2:57:3f:
         c7:54:8d:83:96:42:b8:35:3c:e1:cf:e3:8f:62:30:c3:e9:27:
         71:3e:7a:4f:a3:64:e2:1f:f3:af:37:c2:bf:40:34:35:73:25:
         0d:bf:8c:e6:fd:c0:ce:47:21:a0:f7:fa:a9:e7:a6:d4:90:cd:
         d4:42:0f:93:9d:3c:32:3e:f7:2f:2d:50:7c:24:f5:2c:c6:87:
         44:24:01:83:bb:3d:15:05:18:ee:f3:e8:7b:6b:3a:29:0f:83:
         f7:32:0e:42:c2:c9:4c:6d:f8:e9:da:7c:d5:c9:0b:fb:c4:28:
         f3:d5:12:4b:48:a1:c6:4a:62:f8:2c:a0:db:96:df:a2:91:6b:
         6a:2b:5e:7e:bf:48:58:1a:1e:84:3b:61:4d:84:bc:b3:49:47:
         01:12:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org