Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e322e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          ENnjuLBjv1mdPrgUl4wAdxDpda/KcXiP/FktBxU/8wk=
Subject key identifier:   23:54:96:24:69:DE:6D:0E:63:B2:15:08:A4:C5:AB:09:DB:96:AC:4E
Certificate issuer:       /CN=1E776A9F167A3ADD7E422B88C1048DD2C7E32795
Certificate serial:       32DE85183E8E83FC38F93344D0BC6D19F06BFD07
Authority key identifier: 1E:77:6A:9F:16:7A:3A:DD:7E:42:2B:88:C1:04:8D:D2:C7:E3:27:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa
Signing time:             Mon 18 Nov 2024 15:12:01 +0000
ROA not before:           Mon 18 Nov 2024 15:07:01 +0000
ROA not after:            Mon 17 Nov 2025 15:12:01 +0000
asID:                     267556
IP address blocks:        45.70.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:de:85:18:3e:8e:83:fc:38:f9:33:44:d0:bc:6d:19:f0:6b:fd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E776A9F167A3ADD7E422B88C1048DD2C7E32795
        Validity
            Not Before: Nov 18 15:07:01 2024 GMT
            Not After : Nov 17 15:12:01 2025 GMT
        Subject: CN=2354962469DE6D0E63B21508A4C5AB09DB96AC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:01:95:ba:cd:10:c7:c7:d6:55:e2:51:a4:
                    34:15:75:e6:a3:5c:c1:8a:0d:5a:aa:33:65:0e:73:
                    f9:a4:e6:31:eb:e8:da:d7:86:dc:af:54:77:b2:53:
                    ce:bc:09:ff:5d:1c:8a:46:6f:d6:f2:66:ff:ed:ea:
                    c1:0d:28:ba:3a:5d:32:33:a2:d7:78:a2:dd:d3:b8:
                    8a:72:bc:42:e4:0c:12:1b:7d:a8:12:19:80:aa:ad:
                    84:8b:fa:0b:bf:91:f2:c1:a6:9b:cf:21:f3:d8:f5:
                    77:bf:e8:93:24:a2:89:73:8e:bf:1e:83:bd:45:4e:
                    23:84:10:51:eb:7e:73:6f:c3:65:23:48:2a:7f:7c:
                    0a:fd:39:2c:e3:3a:51:c3:63:5a:18:9a:3b:4d:02:
                    be:d3:36:fe:be:86:33:5b:dc:da:69:63:21:97:e1:
                    8f:b7:a9:a2:aa:46:ce:34:3d:4c:1d:b1:a7:15:b4:
                    3e:15:70:a1:b2:8a:ff:00:42:98:0f:b3:2d:f5:6c:
                    a8:db:b3:46:c3:a8:af:8c:a8:06:d5:a3:4c:02:33:
                    f2:6f:e1:10:3d:c5:d0:9c:dc:5e:47:dd:e3:1d:f3:
                    52:22:51:af:a0:4b:c4:58:a1:5e:ba:42:ec:48:83:
                    88:a3:67:82:a3:04:1b:52:bd:6b:c5:1e:42:ee:17:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:54:96:24:69:DE:6D:0E:63:B2:15:08:A4:C5:AB:09:DB:96:AC:4E
            X509v3 Authority Key Identifier:
                keyid:1E:77:6A:9F:16:7A:3A:DD:7E:42:2B:88:C1:04:8D:D2:C7:E3:27:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:21:01:86:ec:63:b0:0a:23:92:2a:7c:02:8b:dd:ac:95:
         0d:df:f6:8e:a2:d8:0e:7c:d8:0a:29:ca:e8:be:f5:34:4c:69:
         64:04:0f:b2:a9:6c:ac:31:f7:a8:87:8b:f7:5f:e2:f8:33:27:
         72:20:f3:58:f5:4a:e0:26:ee:af:35:b1:80:04:2e:6f:e3:3a:
         3e:f8:ca:43:ca:45:e2:a8:1a:c6:d5:ff:bf:fc:a1:7d:a1:14:
         60:47:3a:48:93:0c:83:cb:cf:3b:a6:d7:5d:c4:dc:70:6d:d0:
         c9:6c:e3:7f:49:20:aa:01:4c:4d:b1:f4:c8:10:a6:32:a5:7c:
         73:1d:93:19:10:2f:e5:10:17:10:02:2f:a3:1c:61:de:46:57:
         93:b5:ae:e3:1d:09:82:7b:0c:03:8b:de:6f:1f:a3:ce:09:5c:
         d0:d1:2f:a9:00:b7:38:37:57:6e:54:fe:20:59:cb:da:71:23:
         b9:f6:bc:32:5a:69:e0:48:6c:52:6f:e9:4d:6d:46:6e:78:4f:
         53:a2:f8:f1:66:04:f1:28:9d:48:a6:41:9a:88:33:92:1c:11:
         93:b9:aa:11:ed:b2:e3:f3:62:18:51:17:38:08:dd:92:ac:50:
         08:67:27:f4:2b:d0:b0:5f:42:d0:a7:80:89:cc:00:78:af:66:
         ec:d4:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:09:50 2024 by rpki-client on console-fra.rpki-client.org