Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa
File:                     34352e37302e3137362e302f32322d3234203d3e20323637353736.roa (raw, json)
Hash identifier:          BBGkByTwfoMUlXcsuq8j/8BXpnHsUoe8jgPa0GtCD+0=
Subject key identifier:   94:60:4B:60:5D:E1:E0:F9:8A:44:7A:43:F1:B0:62:D7:E0:54:01:0E
Certificate issuer:       /CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
Certificate serial:       7734224196B02158C2CDC9572D777534EB844F86
Authority key identifier: 4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa
Signing time:             Wed 03 Apr 2024 23:11:31 +0000
ROA not before:           Wed 03 Apr 2024 23:06:31 +0000
ROA not after:            Wed 02 Apr 2025 23:11:31 +0000
asID:                     267576
IP address blocks:        45.70.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl
                          rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:34:22:41:96:b0:21:58:c2:cd:c9:57:2d:77:75:34:eb:84:4f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
        Validity
            Not Before: Apr  3 23:06:31 2024 GMT
            Not After : Apr  2 23:11:31 2025 GMT
        Subject: CN=94604B605DE1E0F98A447A43F1B062D7E054010E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f3:53:c8:f0:9c:85:e2:24:5f:85:6c:12:fb:
                    82:83:9b:a7:c6:56:7f:a9:6a:ce:8f:2b:8a:55:0c:
                    ec:11:3b:db:0a:35:0f:6c:20:86:5f:68:98:7c:75:
                    b3:25:3b:cb:56:81:9f:b2:02:d2:4b:af:32:c2:a1:
                    f8:08:75:41:69:6f:aa:c5:c0:a1:5a:79:d1:d6:58:
                    bf:c4:dd:c3:4f:b9:53:8d:d4:f4:f7:09:52:ad:f9:
                    a9:3d:74:e6:7a:40:32:ff:5f:e7:54:39:d8:ff:e2:
                    1a:71:e9:ea:9e:1b:69:56:80:9e:95:0c:a5:a3:2a:
                    d8:8b:75:a6:4c:a1:9f:07:7f:a4:0b:6d:2d:cc:39:
                    8f:6b:e5:93:f5:39:14:78:13:db:fb:d3:31:8f:bb:
                    78:dd:13:35:1b:9e:eb:21:4f:7d:a9:f5:9d:e2:3e:
                    e7:3e:6d:cc:df:62:af:0a:40:89:f4:77:c7:ce:74:
                    c3:30:fe:bd:e4:d4:95:3a:26:7a:9b:ee:51:b8:af:
                    39:4b:7d:07:27:61:9d:70:a6:93:0c:50:17:34:44:
                    1a:24:ef:4e:59:cf:4c:a0:08:2d:f5:84:21:72:03:
                    18:cd:bb:df:c7:2e:5c:2d:86:fa:67:38:7d:5d:83:
                    5f:e9:6b:19:eb:8d:7d:85:f6:00:d2:7a:d4:2c:64:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:60:4B:60:5D:E1:E0:F9:8A:44:7A:43:F1:B0:62:D7:E0:54:01:0E
            X509v3 Authority Key Identifier:
                keyid:4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:48:77:ea:47:27:86:ec:ed:29:c2:77:6f:8b:dd:16:ab:
         35:e4:b5:e1:1e:1b:63:00:fd:71:15:ae:13:6c:77:17:17:a5:
         67:db:a6:75:22:31:14:f6:9f:84:b1:74:94:b0:f1:ab:82:9c:
         c7:40:e8:23:ff:e0:9a:26:ac:0e:c5:1c:89:ba:0c:0e:f9:f8:
         71:e7:0f:e7:5b:98:38:09:e4:03:15:ea:86:30:73:dd:3f:b5:
         74:98:0d:4b:dc:e4:02:37:2a:e7:a1:42:3e:90:50:40:5b:cf:
         97:79:17:ed:6a:e2:fb:92:e3:d6:74:83:ba:34:8c:cb:b5:b1:
         f0:6a:2d:d8:a2:b5:09:58:a5:f2:6d:6f:dd:82:91:e1:bc:ca:
         49:b4:7a:d5:36:43:aa:93:0c:72:c8:cf:19:11:77:44:79:4b:
         4e:78:4e:2a:9d:26:bb:91:0c:b1:b5:88:a3:7f:2b:b7:fb:84:
         a3:07:29:66:4b:6d:94:ca:ab:8a:9a:66:94:92:31:3b:a7:1f:
         4c:80:b3:5e:10:b9:86:5d:81:b2:bc:e6:73:1a:f5:7c:7f:4f:
         d9:28:f1:e6:2c:0b:0b:e2:92:67:97:52:68:20:33:b9:47:1b:
         19:d7:e9:0b:e5:7c:a2:e7:1a:fe:46:c1:ea:35:01:33:65:8a:
         c6:7c:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org