Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/34352e362e3232302e302f32322d3234203d3e20323636323438.roa
File:                     34352e362e3232302e302f32322d3234203d3e20323636323438.roa (raw, json)
Hash identifier:          SXIakKSWrwrG/XKWJkuSu3mgY6ki4Mt89/8UCTY32Bo=
Subject key identifier:   10:C5:A7:75:3A:65:74:86:55:40:4A:2D:D9:75:81:DB:05:8D:77:D1
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       06EA495E270D8FFD91F757F211923E3D8A734859
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/34352e362e3232302e302f32322d3234203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     266248
IP address blocks:        45.6.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ea:49:5e:27:0d:8f:fd:91:f7:57:f2:11:92:3e:3d:8a:73:48:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:93:36:ae:dd:f8:44:70:bb:92:6c:bd:a3:
                    d7:6d:25:6f:cd:80:5a:a5:10:70:37:95:46:13:d1:
                    8b:2e:7f:c8:68:79:96:4a:dd:40:49:7d:85:b2:4e:
                    fd:6c:49:4f:eb:00:35:68:e6:cc:d5:12:ab:cb:43:
                    24:94:87:5f:e8:76:20:3a:a9:f6:37:d7:a1:64:bd:
                    f4:4b:bd:b1:db:c9:83:4b:a2:e8:d9:0d:b2:e5:5e:
                    a6:05:07:a4:98:dc:c2:f2:37:5a:31:7f:3b:c9:a9:
                    d8:d4:1d:10:d4:dd:b0:98:bc:88:f8:47:d5:bb:59:
                    ca:0d:c0:57:1d:b5:32:3a:56:fb:01:5f:74:33:2a:
                    de:46:11:5e:4a:d5:6d:cd:9e:bc:ce:45:18:db:2a:
                    43:98:91:52:28:ba:f5:1c:54:22:e7:41:4f:26:18:
                    29:97:00:5d:79:71:e7:40:0e:71:90:82:c2:df:16:
                    84:8d:86:94:85:c5:d5:2c:e6:ac:5c:fc:ca:8d:26:
                    ff:c0:6c:83:a7:2d:2c:9a:2f:6a:fb:d1:08:cf:c4:
                    11:4f:6f:e3:07:a9:62:f4:8a:ae:ec:41:f3:7c:3d:
                    fd:87:7d:4a:68:8c:5b:54:e7:25:8d:dd:44:e1:c4:
                    4d:b2:eb:2b:1d:73:81:78:fa:08:f5:b9:f6:13:b3:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:A7:75:3A:65:74:86:55:40:4A:2D:D9:75:81:DB:05:8D:77:D1
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/34352e362e3232302e302f32322d3234203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:7a:eb:e6:ef:24:46:17:8e:6d:be:c0:5d:c8:7d:73:be:77:
         a5:30:bc:20:b3:17:e1:b3:51:53:4d:dc:3a:75:5b:fe:9b:aa:
         7e:24:eb:04:bb:1b:29:dc:76:34:37:91:b0:af:0b:88:bc:e3:
         64:bf:72:0d:bc:d5:98:bf:47:b4:9c:29:97:4f:81:01:24:dd:
         60:a2:23:1d:f0:39:df:50:1b:09:9a:9f:da:97:8f:66:84:7a:
         0c:6a:5a:12:46:da:15:f8:da:9e:6a:b7:86:75:f7:d4:58:cd:
         3e:c6:0d:1b:81:6f:49:2a:ac:cd:2d:55:a7:88:be:a1:ed:35:
         01:7a:ea:78:b1:4b:7e:41:7d:c2:a7:77:26:e3:ea:b9:47:48:
         15:91:6b:fb:a0:93:91:f1:a5:06:9a:77:8e:b8:3e:b6:75:bb:
         49:26:d3:64:ca:aa:9b:21:a5:1a:40:2a:27:ac:b4:f9:9b:40:
         14:74:34:bc:6f:04:cb:1a:02:f7:00:7b:c7:92:75:5f:4b:05:
         12:de:59:a2:ac:a8:d0:c3:39:d7:97:5c:8d:77:27:c8:7a:74:
         69:1e:40:f9:5b:fa:2b:3f:68:55:5b:81:6c:c0:1b:84:90:10:
         24:bb:f9:39:aa:18:bc:ae:8c:1e:43:8c:86:45:04:e6:de:e1:
         f4:2e:c0:8f
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUBupJXicNj/2R91fyEZI+PYpzSFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3Qjc4MEJBQjNBRjMxOUE4RkExNjMyMkE1MDM2Q0I3
RjI3MDQ1ODAeFw0yNDA0MDMxODI2MDlaFw0yNTA0MDIxODMxMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0I0RjkzMzZBRURERjg0NDcw
QkI5MjZDQkRBM0Q3NkQyNTZGQ0Q4MDVBQTUxMDcwMzc5NTQ2MTNEMThCMkU3RkM4
Njg3OTk2NEFERDQwNDk3RDg1QjI0RUZENkM0OTRGRUIwMDM1NjhFNkNDRDUxMkFC
Q0I0MzI0OTQ4NzVGRTg3NjIwM0FBOUY2MzdEN0ExNjRCREY0NEJCREIxREJDOTgz
NEJBMkU4RDkwREIyRTU1RUE2MDUwN0E0OThEQ0MyRjIzNzVBMzE3RjNCQzlBOUQ4
RDQxRDEwRDREREIwOThCQzg4Rjg0N0Q1QkI1OUNBMERDMDU3MURCNTMyM0E1NkZC
MDE1Rjc0MzMyQURFNDYxMTVFNEFENTZEQ0Q5RUJDQ0U0NTE4REIyQTQzOTg5MTUy
MjhCQUY1MUM1NDIyRTc0MTRGMjYxODI5OTcwMDVENzk3MUU3NDAwRTcxOTA4MkMy
REYxNjg0OEQ4Njk0ODVDNUQ1MkNFNkFDNUNGQ0NBOEQyNkZGQzA2QzgzQTcyRDJD
OUEyRjZBRkJEMTA4Q0ZDNDExNEY2RkUzMDdBOTYyRjQ4QUFFRUM0MUYzN0MzREZE
ODc3RDRBNjg4QzVCNTRFNzI1OERERDQ0RTFDNDREQjJFQjJCMUQ3MzgxNzhGQTA4
RjVCOUY2MTNCMzI2RjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy0+TNq7d+ERwu5JsvaPXbSVvzYBapRBwN5VGE9GLLn/IaHmWSt1A
SX2Fsk79bElP6wA1aObM1RKry0MklIdf6HYgOqn2N9ehZL30S72x28mDS6Lo2Q2y
5V6mBQekmNzC8jdaMX87yanY1B0Q1N2wmLyI+EfVu1nKDcBXHbUyOlb7AV90Myre
RhFeStVtzZ68zkUY2ypDmJFSKLr1HFQi50FPJhgplwBdeXHnQA5xkILC3xaEjYaU
hcXVLOasXPzKjSb/wGyDpy0smi9q+9EIz8QRT2/jB6li9Iqu7EHzfD39h31KaIxb
VOcljd1E4cRNsusrHXOBePoI9bn2E7Mm8wIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FBDFp3U6ZXSGVUBKLdl1gdsFjXfRMB8GA1UdIwQYMBaAFG97eAurOvMZqPoWMipQ
Nst/JwRYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzEvNkY3Qjc4MEJBQjNBRjMx
OUE4RkExNjMyMkE1MDM2Q0I3RjI3MDQ1OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RjdCNzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcw
NDU4LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8xLzM0MzUyZTM2MmUzMjMyMzAyZTMw
MmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItBtww
DQYJKoZIhvcNAQELBQADggEBAHV66+bvJEYXjm2+wF3IfXO+d6UwvCCzF+GzUVNN
3Dp1W/6bqn4k6wS7GyncdjQ3kbCvC4i842S/cg281Zi/R7ScKZdPgQEk3WCiIx3w
Od9QGwman9qXj2aEegxqWhJG2hX42p5qt4Z199RYzT7GDRuBb0kqrM0tVaeIvqHt
NQF66nixS35BfcKndybj6rlHSBWRa/ugk5HxpQaad464PrZ1u0km02TKqpshpRpA
KiestPmbQBR0NLxvBMsaAvcAe8eSdV9LBRLeWaKsqNDDOdeXXI13J8h6dGkeQPlb
+is/aFVbgWzAG4SQECS7+TmqGLyujB5DjIZFBObe4fQuwI8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org