Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32302e302f32322d3232203d3e20323637353936.roa
File:                     34352e37312e32302e302f32322d3232203d3e20323637353936.roa (raw, json)
Hash identifier:          MbmTuBy4Hu4dpFjqokHQHkUDm8TpRyLFbXPmhfo92ew=
Subject key identifier:   18:7B:CD:FF:92:BC:E7:34:E9:FB:BA:B6:50:EE:93:A9:48:80:6D:2F
Certificate issuer:       /CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
Certificate serial:       55F2E0E238D6E6337FFECEFE711465DFEB3C3FCD
Authority key identifier: 01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32302e302f32322d3232203d3e20323637353936.roa
Signing time:             Thu 04 Apr 2024 04:13:37 +0000
ROA not before:           Thu 04 Apr 2024 04:08:37 +0000
ROA not after:            Thu 03 Apr 2025 04:13:37 +0000
asID:                     267596
IP address blocks:        45.71.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f2:e0:e2:38:d6:e6:33:7f:fe:ce:fe:71:14:65:df:eb:3c:3f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
        Validity
            Not Before: Apr  4 04:08:37 2024 GMT
            Not After : Apr  3 04:13:37 2025 GMT
        Subject: CN=187BCDFF92BCE734E9FBBAB650EE93A948806D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:b7:2d:a2:15:83:1c:11:83:c0:55:09:65:
                    0d:10:2e:6f:29:b7:42:1d:86:30:4e:fb:e7:9f:0e:
                    ce:86:92:d9:ee:7c:54:5e:fa:cb:57:94:37:00:fe:
                    5c:21:02:20:78:4c:55:70:a0:5e:58:33:dd:ac:db:
                    5c:ba:42:d9:0b:f7:96:e7:d5:c2:06:7e:2b:ca:c4:
                    91:2f:59:6e:9f:53:5c:48:ec:95:9d:63:96:af:1f:
                    f4:da:6a:4c:ce:1b:b2:d4:2b:af:02:cb:bb:9f:1d:
                    60:3e:3b:2a:d3:6e:1d:c2:47:fa:b6:d1:61:3e:ff:
                    fd:63:34:a9:d3:62:33:ab:a3:ef:00:7a:e4:b7:a9:
                    12:c8:30:9f:4d:78:f2:49:eb:1e:d4:46:e5:a9:e5:
                    42:54:ba:89:2b:4c:d5:3f:49:70:8b:1a:7a:db:2f:
                    e8:0a:3c:4f:a1:be:ee:d1:eb:ea:a0:88:0b:a0:f6:
                    b4:c0:23:83:5e:74:8d:68:01:ed:82:db:7e:99:8a:
                    39:1a:aa:54:86:9d:70:47:bc:7e:ec:35:21:79:ab:
                    27:11:3c:d2:61:1a:bf:35:f1:62:4e:c6:5b:0b:c2:
                    0e:8b:73:b8:99:17:65:b4:9d:c7:78:0f:39:9a:1b:
                    f5:77:5f:d6:da:55:b7:5e:e7:c5:a5:05:02:34:ce:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7B:CD:FF:92:BC:E7:34:E9:FB:BA:B6:50:EE:93:A9:48:80:6D:2F
            X509v3 Authority Key Identifier:
                keyid:01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32302e302f32322d3232203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:e6:dc:71:32:9f:da:77:2d:a0:75:ab:a6:4e:c8:1f:f9:3e:
         0d:f2:ec:ec:c9:e0:19:a8:52:bf:98:d3:76:35:53:b7:db:e1:
         fc:fe:c2:ed:bc:8f:d7:27:5d:7f:59:97:ac:a8:1e:a3:60:84:
         35:dc:f6:37:8a:33:14:e5:70:4a:79:f0:db:46:e9:9f:b9:8f:
         8c:f8:d7:83:bf:fb:e7:59:e4:49:fd:7a:6d:b3:9d:f1:f0:0a:
         f4:ed:b9:a8:76:e4:42:ac:16:dd:cd:fb:cc:39:98:00:66:f6:
         07:d8:72:0c:df:fc:0f:33:5d:f4:b3:0e:30:24:36:7f:7e:ad:
         c1:5e:c2:23:03:59:a9:fa:9e:24:54:bc:38:2b:96:f9:9d:1f:
         02:fd:b2:64:e4:80:af:59:f4:51:4b:75:ec:c8:51:a6:b5:8c:
         d2:0e:28:e5:a2:14:e8:9b:6d:6b:16:33:dd:77:2c:e9:00:41:
         0b:52:0b:3e:2b:fe:63:fd:99:dd:87:53:dc:fb:ed:e1:59:5b:
         4d:7d:f9:4f:8c:e5:d4:a2:96:ce:b4:f9:fa:8d:9c:5d:b5:2b:
         64:c1:84:cc:8e:ac:51:7b:92:5f:c0:a9:0c:7f:24:a9:52:7d:
         9c:96:b3:f7:d3:1a:86:c2:fb:53:53:1a:b6:be:11:c8:e6:41:
         92:c3:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org