Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32312e302f32342d3234203d3e20323637353936.roa
File:                     34352e37312e32312e302f32342d3234203d3e20323637353936.roa (raw, json)
Hash identifier:          zjxzhf4nJFTQQv0AvpU9Fao7Uy1kZ09Yg/pFJgeBeDY=
Subject key identifier:   93:EF:AD:C1:FC:EA:1D:59:71:A9:E4:D3:89:52:D8:A1:E0:80:16:F2
Certificate issuer:       /CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
Certificate serial:       348ED7417AFC7EF1A85901B8558C57A5CF061FE0
Authority key identifier: 01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32312e302f32342d3234203d3e20323637353936.roa
Signing time:             Thu 04 Apr 2024 04:13:38 +0000
ROA not before:           Thu 04 Apr 2024 04:08:38 +0000
ROA not after:            Thu 03 Apr 2025 04:13:38 +0000
asID:                     267596
IP address blocks:        45.71.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8e:d7:41:7a:fc:7e:f1:a8:59:01:b8:55:8c:57:a5:cf:06:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
        Validity
            Not Before: Apr  4 04:08:38 2024 GMT
            Not After : Apr  3 04:13:38 2025 GMT
        Subject: CN=93EFADC1FCEA1D5971A9E4D38952D8A1E08016F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:18:50:12:c9:ac:6f:82:8e:e1:2a:44:92:
                    b7:f1:04:a6:b5:b7:3a:a8:56:1d:fc:18:31:08:bc:
                    38:69:18:ba:95:43:cf:a4:0f:27:d0:cc:b0:10:8e:
                    b5:ba:91:1a:57:c8:71:03:da:1b:94:a1:76:84:08:
                    46:37:3c:76:fc:5e:46:85:e1:36:a9:ca:a9:2a:b0:
                    13:ae:43:d0:4e:c2:35:fc:9d:37:9b:85:a2:1f:ce:
                    9a:3a:d3:eb:70:d0:3e:34:cc:76:52:0b:10:1c:d9:
                    12:c3:fc:91:c9:1e:29:f1:29:da:df:bf:67:8a:b3:
                    bc:09:eb:42:1f:f8:f3:2d:68:ba:32:ec:83:60:66:
                    fb:90:5f:b2:ca:53:9f:5b:fc:e8:25:26:38:99:3a:
                    95:11:81:df:0d:64:48:41:70:d6:8d:d3:12:ee:88:
                    2a:2e:82:49:88:64:8b:18:6f:d4:9c:c5:8e:54:6e:
                    bd:58:d3:30:af:ee:60:a8:6a:eb:fd:ae:b9:2a:6c:
                    97:1a:1e:91:ce:21:0e:58:29:97:59:06:fa:8f:de:
                    2a:36:50:6b:b7:10:c4:eb:4a:51:e9:97:56:74:02:
                    a7:9b:a7:d7:4a:c3:3b:2e:99:6a:1b:6f:49:48:5c:
                    0a:2c:1d:0a:60:5b:ca:c5:2b:f0:68:59:74:9f:bb:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EF:AD:C1:FC:EA:1D:59:71:A9:E4:D3:89:52:D8:A1:E0:80:16:F2
            X509v3 Authority Key Identifier:
                keyid:01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32312e302f32342d3234203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:18:18:c0:02:7d:e1:35:93:ec:df:5c:d6:0e:61:c4:3f:3f:
         9b:1e:e5:d4:9d:af:ca:7d:d9:f8:fd:37:e6:ad:6e:b1:be:e8:
         5b:ac:7e:18:9d:38:f1:a5:5b:19:8b:9d:e2:39:53:b3:02:de:
         3c:b0:1e:57:54:77:32:98:f2:90:6d:25:a2:26:89:ee:82:fa:
         72:42:f3:e1:15:cc:56:da:53:01:69:4c:9b:54:df:ef:8d:41:
         6b:cd:87:01:54:4d:da:e9:c3:59:7b:74:8a:ef:63:be:19:8c:
         2e:e3:22:10:c8:ea:ae:8d:ca:44:28:34:f1:48:0a:9e:6b:3f:
         e2:36:fc:5a:d1:de:37:c6:fe:95:23:57:28:97:4b:5c:64:c1:
         4f:ec:55:9c:3d:26:b6:5d:43:8e:20:5f:5f:8d:1f:99:52:d0:
         0f:6a:3c:69:46:9b:b0:9a:7b:67:0f:bc:73:0d:f0:7f:2b:5f:
         52:1d:d6:fd:75:9f:fe:0b:79:e4:72:99:f9:c7:07:ae:be:88:
         c6:cf:6e:00:d2:50:7f:6d:98:9c:38:5d:94:7d:85:ac:ce:5a:
         a0:d3:07:32:35:9c:5e:c4:15:f7:2a:63:b0:3d:27:7c:5a:c1:
         dc:c9:cc:5a:aa:67:c3:bb:5e:51:d6:6a:fc:27:d7:39:29:04:
         0a:27:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:57 2024 by rpki-client on console-ams.rpki-client.org