Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
File:                     34352e37312e32322e302f32332d3233203d3e20323637353936.roa (raw, json)
Hash identifier:          757kxP3DeSP5JmPEBiiEu0EDaWK8eChwXRczIDI877Y=
Subject key identifier:   10:BE:99:93:54:19:7F:E1:C6:5E:15:0E:E9:F6:2D:68:85:CA:5D:64
Certificate issuer:       /CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
Certificate serial:       2C704F106C1129C931004866405B4369C51A96A4
Authority key identifier: 01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
Signing time:             Thu 04 Apr 2024 04:13:39 +0000
ROA not before:           Thu 04 Apr 2024 04:08:39 +0000
ROA not after:            Thu 03 Apr 2025 04:13:39 +0000
asID:                     267596
IP address blocks:        45.71.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:70:4f:10:6c:11:29:c9:31:00:48:66:40:5b:43:69:c5:1a:96:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
        Validity
            Not Before: Apr  4 04:08:39 2024 GMT
            Not After : Apr  3 04:13:39 2025 GMT
        Subject: CN=10BE999354197FE1C65E150EE9F62D6885CA5D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:2d:06:c2:6f:f0:a3:51:ba:7e:f7:36:38:
                    64:74:13:18:2a:22:48:34:eb:46:d6:36:46:e2:c0:
                    4d:f8:d3:8a:34:82:f8:2a:dc:65:df:1f:ff:6c:61:
                    0e:6b:1c:71:71:af:fd:cd:5a:46:31:2b:e2:c2:f5:
                    30:b1:90:b7:67:20:1b:e2:a3:ed:3e:f7:2b:26:37:
                    21:4c:ea:4a:53:5b:e6:6f:42:59:f1:50:62:54:75:
                    47:f7:5e:cd:f7:72:71:bd:f7:d4:4c:1d:58:60:ae:
                    0f:94:d2:df:ab:84:bf:8a:fe:00:f2:3c:8c:08:39:
                    ca:b4:3d:15:d6:cc:41:af:19:14:e9:4b:a5:65:4b:
                    fe:13:ea:f9:20:25:3a:25:27:b6:16:a7:db:a1:ff:
                    11:f9:fe:79:9e:87:c0:54:cb:e9:32:fb:fe:a5:f3:
                    40:62:9d:5b:de:6b:f7:79:42:58:33:4a:e0:ab:17:
                    f6:f2:cb:6d:ec:ee:79:11:f0:6f:cc:df:3a:0f:7c:
                    0b:d8:c1:b2:9d:0a:f2:e7:eb:01:4a:84:0c:35:cf:
                    58:24:66:a2:5b:5c:8b:b3:c7:04:02:b1:08:51:d5:
                    74:d3:db:5d:29:fa:b9:ab:84:8c:87:96:90:dc:cc:
                    e9:39:38:bc:06:24:6e:30:f8:1d:66:8a:22:a0:1d:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:99:93:54:19:7F:E1:C6:5E:15:0E:E9:F6:2D:68:85:CA:5D:64
            X509v3 Authority Key Identifier:
                keyid:01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:cf:6e:bb:e0:b2:0a:9f:c5:c8:c4:51:ef:7f:d1:bb:3b:
         68:bc:88:9e:78:db:f1:52:ce:61:e6:a8:99:f4:17:84:4c:e8:
         07:97:da:9f:11:8d:12:29:36:b3:b5:f1:d4:1a:1c:44:95:36:
         e1:d9:a8:ba:78:a4:ec:04:2a:ab:9c:a5:86:fb:f6:e8:12:e5:
         de:55:6c:05:ad:41:54:32:3b:38:71:50:ff:af:92:8b:cf:6f:
         3f:e3:0d:8d:9b:9a:de:c9:cf:f9:89:6e:e8:20:ab:fe:d1:bc:
         0e:56:41:66:c8:38:20:0f:e2:77:b0:25:bf:c2:7d:6b:05:87:
         e3:d1:b1:81:18:65:e0:8e:ca:21:53:9d:a4:e6:ae:54:88:76:
         bb:35:fd:9f:b7:7e:95:6e:f8:0e:e6:ce:63:c0:38:d4:9a:87:
         25:4d:af:b3:51:52:dc:57:0c:79:04:e5:59:ff:f0:d8:a3:c6:
         e7:2d:0a:b5:93:a4:ed:ed:1e:7f:fe:33:a5:06:49:4c:dc:14:
         35:04:56:69:ee:3a:6b:71:ea:01:5b:af:71:bf:8e:fe:b9:5f:
         67:ba:cc:4e:5e:2c:8d:27:a9:fd:28:ba:ba:0e:fa:6f:1e:c6:
         e3:75:0d:18:c4:3c:8a:1b:8e:43:49:e3:5a:d4:06:71:76:25:
         d0:f9:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:12 2024 by rpki-client on console-fra.rpki-client.org