Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/34352e37302e3131322e302f32342d3234203d3e20323637353631.roa
File:                     34352e37302e3131322e302f32342d3234203d3e20323637353631.roa (raw, json)
Hash identifier:          ClWcbidMI7P7/upEtsW7UbEhT3asxZR/NFh/hqfy/lg=
Subject key identifier:   92:D6:58:E0:8E:73:16:08:DA:CF:CD:6E:18:7A:B8:93:73:A7:F0:10
Certificate issuer:       /CN=95E83C1EC29F8251CA035F581B61B808604EC59D
Certificate serial:       40E4B69B79E8796C3FE43C720D8A0DDB3A820468
Authority key identifier: 95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/34352e37302e3131322e302f32342d3234203d3e20323637353631.roa
Signing time:             Thu 04 Apr 2024 13:16:01 +0000
ROA not before:           Thu 04 Apr 2024 13:11:01 +0000
ROA not after:            Thu 03 Apr 2025 13:16:01 +0000
asID:                     267561
IP address blocks:        45.70.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl
                          rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e4:b6:9b:79:e8:79:6c:3f:e4:3c:72:0d:8a:0d:db:3a:82:04:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E83C1EC29F8251CA035F581B61B808604EC59D
        Validity
            Not Before: Apr  4 13:11:01 2024 GMT
            Not After : Apr  3 13:16:01 2025 GMT
        Subject: CN=92D658E08E731608DACFCD6E187AB89373A7F010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:82:03:8f:26:43:db:9a:d5:a9:07:19:b8:
                    98:d8:3e:10:84:44:19:6c:76:f6:58:51:6f:66:c7:
                    b2:ed:7f:20:d9:b3:21:9a:c4:6c:4b:f9:33:43:c8:
                    c8:ab:53:9b:b2:00:45:5e:b1:82:6e:19:64:e1:cc:
                    a9:a6:2f:c7:e3:6e:b3:18:fa:99:40:39:70:d2:f3:
                    44:0f:7b:1f:ea:97:8d:45:08:07:a4:80:80:8c:79:
                    43:7d:77:3e:2f:93:6d:1c:a1:b6:24:6e:42:32:08:
                    b6:8d:c3:98:84:d2:07:3c:84:c5:26:70:70:13:f0:
                    5b:ac:ed:c8:96:fa:e3:ea:2e:65:bd:e6:7f:95:ac:
                    10:7a:ff:3a:76:f0:3d:06:55:64:fe:36:09:36:43:
                    f4:46:84:cb:e8:6a:7f:f4:90:cd:81:71:54:3a:46:
                    3c:96:7e:25:7f:1c:3a:ac:2d:bf:bb:7d:24:41:ed:
                    ca:20:c1:5c:7e:fa:e2:78:44:68:f4:1b:5f:00:9c:
                    f8:e9:fa:9b:8f:88:87:bc:47:9d:f7:df:c9:29:84:
                    fd:9d:c1:bc:53:bb:61:43:df:3e:1f:eb:d9:e7:5d:
                    e3:47:df:59:0f:ff:3a:3f:34:59:80:2e:65:c8:7d:
                    ba:85:5b:41:02:8d:19:5f:75:51:96:59:ce:2c:b5:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D6:58:E0:8E:73:16:08:DA:CF:CD:6E:18:7A:B8:93:73:A7:F0:10
            X509v3 Authority Key Identifier:
                keyid:95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/34352e37302e3131322e302f32342d3234203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:08:18:3c:32:74:99:89:95:ab:b6:21:e2:39:86:dc:a8:
         d1:62:58:68:04:01:50:1c:10:98:8e:33:79:c7:16:cc:3f:3c:
         1e:4a:55:4c:a3:13:9b:f1:7e:63:a7:c2:e6:3e:93:9b:9f:fb:
         d5:d9:68:23:24:f5:43:e7:52:66:b0:e9:f5:e6:97:3d:f5:21:
         68:0f:4b:2a:25:5c:50:90:53:a8:f0:a8:03:4f:ae:be:8c:38:
         7e:10:d2:a1:d4:12:28:35:fd:24:12:6a:07:20:fc:15:2c:f0:
         57:c8:c8:11:eb:f0:3a:06:48:c3:8a:58:f8:43:24:8a:08:f2:
         a8:81:8d:f5:b3:ce:fc:22:4b:d2:49:42:15:ac:0b:84:75:1d:
         a2:09:73:c3:a9:06:95:07:9e:db:1a:33:ff:52:49:88:93:58:
         1f:5e:c9:b3:05:e5:e8:58:d5:3a:02:57:73:38:7d:88:7d:13:
         e1:1c:db:e6:60:c9:fb:9a:95:db:dc:9d:61:3b:a4:d4:cc:d8:
         40:3a:5c:d1:9b:77:63:13:13:c1:b9:46:6d:a7:a2:3b:f4:01:
         fb:dc:26:9c:c3:fb:d7:70:6b:51:ed:2a:b2:71:76:b2:a5:e8:
         ef:07:15:a3:b3:23:07:e9:55:9e:17:f9:4b:13:6f:18:ba:84:
         45:2c:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org