Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32332d3233203d3e20323636313239.roa
File:                     34352e362e39342e302f32332d3233203d3e20323636313239.roa (raw, json)
Hash identifier:          coJ/ph8qkgTHa4oSpT/vhYMwvZHzNuHAsep8yBsb4yk=
Subject key identifier:   E6:0B:A2:8F:F0:B1:6D:16:FF:E8:C9:C6:F3:E7:41:6B:03:65:3D:64
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       3977CF1255C9C57BEA4EC9DEE2FC2F7D3E7FDD26
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32332d3233203d3e20323636313239.roa
Signing time:             Wed 03 Apr 2024 18:32:20 +0000
ROA not before:           Wed 03 Apr 2024 18:27:20 +0000
ROA not after:            Wed 02 Apr 2025 18:32:20 +0000
asID:                     266129
IP address blocks:        45.6.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:77:cf:12:55:c9:c5:7b:ea:4e:c9:de:e2:fc:2f:7d:3e:7f:dd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Apr  3 18:27:20 2024 GMT
            Not After : Apr  2 18:32:20 2025 GMT
        Subject: CN=E60BA28FF0B16D16FFE8C9C6F3E7416B03653D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:f2:ee:4a:4a:89:11:5a:b3:aa:3c:8d:a6:
                    4d:95:2a:b8:bb:27:ce:4c:4f:e8:95:d3:d4:17:00:
                    ce:f4:de:14:18:8e:7a:13:2e:b3:b7:6e:d6:e2:b6:
                    e8:fc:50:52:52:eb:fb:50:1d:9e:f2:9a:32:6d:57:
                    50:ef:58:f9:29:90:ee:bc:4d:7a:03:8d:ee:d3:0a:
                    6f:79:91:ba:31:43:fa:c8:37:4d:36:fb:17:86:0f:
                    73:4b:84:cd:c8:69:45:dd:b9:4f:9c:b6:32:e4:ff:
                    49:02:ef:32:08:70:52:6c:63:16:29:57:50:6f:e0:
                    94:a6:6f:26:41:07:aa:b2:71:63:d2:b0:ba:bc:c9:
                    c7:97:01:1a:ca:56:b8:63:e5:8c:a1:18:01:f2:d2:
                    7b:19:fa:df:d5:ca:fd:16:a8:21:51:9b:15:de:29:
                    1b:5d:00:23:b1:cc:3e:af:7e:31:51:9f:56:fb:36:
                    de:a8:7b:b3:f4:01:c4:d5:6f:a6:9d:d0:cc:a9:30:
                    de:32:11:f4:9e:3d:d6:d1:15:01:68:54:96:29:1f:
                    3f:a1:ee:c3:84:48:d0:5f:70:df:f2:c6:c3:33:07:
                    57:82:89:05:e4:84:bd:ea:88:d8:17:26:4b:9d:b0:
                    84:55:fe:51:f1:26:1c:0e:4c:9d:84:2a:ee:f1:ee:
                    8b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0B:A2:8F:F0:B1:6D:16:FF:E8:C9:C6:F3:E7:41:6B:03:65:3D:64
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32332d3233203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:be:a2:94:ce:40:c0:60:7e:53:b5:87:2d:ea:7e:1d:f7:46:
         f3:1a:cd:39:68:28:e3:f5:8b:ec:25:77:e0:50:82:60:a6:58:
         ec:f1:95:28:9c:06:7f:6f:6c:0c:2f:b1:73:fc:c6:f3:e5:44:
         c9:b2:f3:f9:b9:e1:2d:e8:d2:53:35:72:63:68:0c:f5:4c:10:
         da:b2:91:ce:c9:3b:a6:5d:0f:31:3a:1d:b9:97:a1:49:0f:24:
         a0:f6:64:2e:7a:8d:33:09:d2:0e:61:d5:31:f1:61:51:1f:9d:
         cf:b9:c7:5d:7b:8c:d7:57:35:e0:24:c2:0f:01:9c:c6:0b:66:
         cf:1c:27:9e:4e:08:a9:62:a4:97:32:eb:af:ed:dd:9f:90:e7:
         64:93:08:ce:3a:e6:d2:18:e1:c9:a6:9e:e1:55:a9:5e:a6:73:
         df:65:96:e6:a2:a2:78:30:91:bf:10:fb:43:d0:ba:4c:df:a8:
         3e:31:4f:37:78:bf:0b:af:2f:06:49:70:ff:fd:c9:4a:42:d1:
         a8:dd:26:66:9a:13:f6:90:42:cb:9c:07:91:30:1a:f4:fc:ba:
         3d:3d:ee:a0:e0:f9:9d:fb:5d:9a:00:36:c7:ed:23:17:26:5a:
         3c:0a:dc:83:24:54:87:cd:1f:c3:7a:88:98:fc:3a:ec:71:6a:
         86:fe:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:52 2024 by rpki-client on console-fra.rpki-client.org