Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/34352e37302e34302e302f32322d3332203d3e20323637353436.roa
File:                     34352e37302e34302e302f32322d3332203d3e20323637353436.roa (raw, json)
Hash identifier:          XdOAho787E4CbjSKlTlKYiAURxZc4iynbhqjGuJQq8A=
Subject key identifier:   27:20:5A:96:C7:30:3F:4C:A1:6E:6C:AF:82:4C:4B:D6:BD:19:6F:39
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       5FE11831CF08E619C33B426B1C702685952361E5
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/34352e37302e34302e302f32322d3332203d3e20323637353436.roa
Signing time:             Fri 05 Apr 2024 03:20:25 +0000
ROA not before:           Fri 05 Apr 2024 03:15:25 +0000
ROA not after:            Fri 04 Apr 2025 03:20:25 +0000
asID:                     267546
IP address blocks:        45.70.40.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e1:18:31:cf:08:e6:19:c3:3b:42:6b:1c:70:26:85:95:23:61:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Apr  5 03:15:25 2024 GMT
            Not After : Apr  4 03:20:25 2025 GMT
        Subject: CN=27205A96C7303F4CA16E6CAF824C4BD6BD196F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:7f:56:19:82:b2:76:2c:90:9d:54:d6:fd:
                    2e:be:5c:c9:23:f6:ff:cf:13:3d:42:87:c9:11:ab:
                    71:66:f5:b3:a6:08:50:17:a2:63:d7:83:13:13:ac:
                    9b:53:cf:5f:cf:57:da:c0:bc:9e:88:9a:69:8e:e1:
                    61:3e:00:6d:af:6e:4a:29:23:81:14:fe:dd:81:db:
                    f7:80:dc:06:a0:c9:45:29:08:e4:b8:db:4d:21:62:
                    f3:cf:3b:05:82:6b:26:23:3c:54:72:7c:1d:c7:5a:
                    97:f3:3e:83:fd:53:07:e4:01:cd:b2:67:2f:19:42:
                    6f:d7:f8:c7:1c:41:f9:ec:95:86:67:32:44:d6:7e:
                    fb:49:81:54:35:70:ae:7a:29:4e:cf:93:9b:50:a4:
                    e9:8d:d6:84:6a:ac:90:fe:9b:cb:6d:ec:87:36:9a:
                    28:7c:63:5f:06:fd:4d:80:10:81:a4:03:ae:a6:bc:
                    0a:f1:ff:7e:40:ec:c9:94:4d:ff:4f:59:e8:ed:5d:
                    c6:c4:d0:34:4a:7f:d5:c2:d4:43:b0:50:1a:c2:72:
                    3b:f7:ce:24:26:6c:a5:0c:36:57:5e:38:59:cd:f9:
                    89:3e:93:55:bd:65:02:93:2f:84:e3:3c:5e:d8:67:
                    89:37:b1:d3:f2:8c:ba:f8:a5:9d:a0:b8:43:56:c0:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:20:5A:96:C7:30:3F:4C:A1:6E:6C:AF:82:4C:4B:D6:BD:19:6F:39
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/34352e37302e34302e302f32322d3332203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:87:12:68:92:05:e9:86:f1:92:cf:53:f6:d3:bf:03:04:18:
         72:1e:84:7f:26:26:ca:87:16:b8:2d:1d:97:01:a2:78:7b:58:
         48:10:90:09:bf:c8:4d:58:ea:c8:0d:00:e7:f9:79:96:90:bc:
         74:72:30:91:9f:8d:d1:5b:fe:71:47:21:60:2b:35:51:0e:ec:
         f8:4a:ac:7a:89:f8:92:3b:97:66:07:13:a8:5e:12:4d:1c:5c:
         a2:b8:ac:98:16:e0:f7:1e:8b:c5:ee:94:ed:83:29:f5:50:ec:
         6f:b6:ea:88:c9:42:05:ca:ec:58:f7:04:7f:2d:0b:82:88:6c:
         b9:b2:b0:24:b3:18:cd:98:2a:d3:13:bf:79:c4:67:15:61:b7:
         a3:3f:b5:a6:2c:31:cc:a3:d0:b2:31:e4:e8:5d:99:96:3e:ce:
         4c:ab:42:42:67:43:71:c2:f3:81:75:3a:a6:53:c1:9c:67:df:
         5a:c0:67:a5:39:f5:89:34:3a:b5:5f:65:71:50:e1:2d:23:ef:
         5b:3a:d6:5d:6f:85:06:00:59:79:bf:54:ba:e0:cb:ad:af:5b:
         db:5f:3f:ac:6e:84:4e:a8:fb:79:4d:b6:a9:10:55:8a:7b:f1:
         70:8f:a7:08:31:5c:3c:57:f7:2a:6f:5f:07:c4:3b:bd:72:44:
         95:41:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:10 2024 by rpki-client on console-ams.rpki-client.org