Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/34352e37302e362e302f32332d3332203d3e20323733353833.roa
File:                     34352e37302e362e302f32332d3332203d3e20323733353833.roa (raw, json)
Hash identifier:          h5vDg7d3FkzhaynzHEULJSMaF/DLE2B5vdemWLNaQV0=
Subject key identifier:   E1:95:07:BF:03:C8:9B:69:50:D0:04:09:4A:F4:B1:E8:DB:FE:5F:77
Certificate issuer:       /CN=13B10A287389E55AEF186C7F7E3473FBBA6994CE
Certificate serial:       7B7F5918AD2F7209830E53ACDEDCA61B46DCE82A
Authority key identifier: 13:B1:0A:28:73:89:E5:5A:EF:18:6C:7F:7E:34:73:FB:BA:69:94:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/34352e37302e362e302f32332d3332203d3e20323733353833.roa
Signing time:             Thu 04 Apr 2024 10:10:49 +0000
ROA not before:           Thu 04 Apr 2024 10:05:49 +0000
ROA not after:            Thu 03 Apr 2025 10:10:49 +0000
asID:                     273583
IP address blocks:        45.70.6.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.crl
                          rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7f:59:18:ad:2f:72:09:83:0e:53:ac:de:dc:a6:1b:46:dc:e8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B10A287389E55AEF186C7F7E3473FBBA6994CE
        Validity
            Not Before: Apr  4 10:05:49 2024 GMT
            Not After : Apr  3 10:10:49 2025 GMT
        Subject: CN=E19507BF03C89B6950D004094AF4B1E8DBFE5F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:8a:8d:e9:66:6f:63:ec:7c:63:23:f7:67:
                    e4:2a:c0:11:ea:cc:b9:59:c2:97:ba:78:d4:6b:5a:
                    aa:e0:88:2d:2e:eb:e5:65:16:b2:9a:06:9e:36:3e:
                    e8:75:e8:87:b2:5f:b1:f7:89:4c:35:fb:bc:0f:07:
                    5a:a0:92:7c:22:27:3d:ff:03:fc:1f:ba:e0:75:b5:
                    79:92:0a:06:37:a7:b6:54:c8:fe:b5:4e:60:c5:09:
                    03:00:a6:a7:a6:40:9a:7b:0a:1f:9a:c8:64:ec:41:
                    2d:e4:ff:52:a1:f7:50:4d:f1:d2:64:08:05:94:5c:
                    4d:75:c7:30:6b:75:76:63:ee:2c:2e:5e:56:6d:19:
                    43:7b:57:b1:4a:0f:58:8f:fd:da:0d:60:75:eb:bc:
                    e6:cc:7b:d4:c4:b3:1c:be:5b:98:91:d9:fb:dd:f1:
                    91:bd:00:47:b2:79:ea:02:ad:cb:b3:80:7e:fa:28:
                    a5:28:fe:6f:ff:db:a0:4d:60:df:09:db:cd:50:c5:
                    bc:a4:da:34:b4:e1:5e:fc:c1:ee:1c:96:c0:70:f4:
                    75:94:b5:f8:1a:55:e1:8e:c7:70:14:64:a1:53:b0:
                    32:6b:e6:55:81:fe:fb:c4:c9:96:6d:e3:cd:c9:4a:
                    d2:5b:3f:23:e0:b0:d7:40:2f:7b:2d:21:a3:ca:33:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:07:BF:03:C8:9B:69:50:D0:04:09:4A:F4:B1:E8:DB:FE:5F:77
            X509v3 Authority Key Identifier:
                keyid:13:B1:0A:28:73:89:E5:5A:EF:18:6C:7F:7E:34:73:FB:BA:69:94:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/34352e37302e362e302f32332d3332203d3e20323733353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:1f:96:ed:83:88:6d:d7:71:9c:e5:14:2a:b1:4d:e8:d5:97:
         7f:04:2b:2d:76:53:71:90:8d:74:12:41:fd:84:7a:7e:67:8b:
         a0:8b:2d:0e:3d:8e:53:e6:cd:cc:68:80:f7:86:b5:d7:00:09:
         28:a5:ba:a2:46:01:45:89:51:c0:c7:db:0b:83:26:e0:c1:e5:
         f2:9a:0e:82:a8:14:b0:8a:8b:19:e1:a2:14:3a:5e:9f:c5:71:
         e6:a7:21:5b:9f:0f:63:c9:47:a4:0c:3a:d3:cb:32:dd:2b:72:
         e4:8d:a7:d6:73:be:b0:05:d0:92:ae:92:e2:6d:36:09:e1:bf:
         9b:dc:73:7e:6a:bd:b2:0d:ca:45:2d:3e:ab:d7:4a:88:52:ca:
         43:71:ff:ff:5c:3b:d4:aa:d4:87:62:ab:ee:cf:f0:98:89:e6:
         ce:2e:c9:bb:51:22:7f:52:d6:2a:32:9c:ba:bc:72:38:66:65:
         47:52:03:e9:2a:6b:65:5e:71:78:5a:69:be:48:6b:a5:a5:a0:
         8f:68:1f:75:9e:71:c1:6e:c7:e4:64:a5:ed:23:73:a8:4d:74:
         a2:33:a6:02:14:8e:22:23:0d:39:7b:9f:a2:36:e7:73:b7:da:
         fa:86:0f:5c:a0:2a:b3:e1:b1:97:36:60:78:ee:10:45:cf:57:
         39:8d:68:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:19 2024 by rpki-client on console-ams.rpki-client.org