Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/34352e3136352e3139342e302f32332d3233203d3e20323637393337.roa
File:                     34352e3136352e3139342e302f32332d3233203d3e20323637393337.roa (raw, json)
Hash identifier:          D+5RnkAmc5w1nZHi0l7XPD8D9rN7JmkuDn3LkFbWgx0=
Subject key identifier:   6E:1E:1A:69:3B:01:BE:29:38:DE:0A:AD:A2:16:0F:2C:02:97:78:A5
Certificate issuer:       /CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
Certificate serial:       6E6C09BB45570AC2C53515DD736ACF14044409D9
Authority key identifier: 0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/34352e3136352e3139342e302f32332d3233203d3e20323637393337.roa
Signing time:             Thu 04 Apr 2024 08:24:02 +0000
ROA not before:           Thu 04 Apr 2024 08:19:02 +0000
ROA not after:            Thu 03 Apr 2025 08:24:02 +0000
asID:                     267937
IP address blocks:        45.165.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.crl
                          rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6c:09:bb:45:57:0a:c2:c5:35:15:dd:73:6a:cf:14:04:44:09:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
        Validity
            Not Before: Apr  4 08:19:02 2024 GMT
            Not After : Apr  3 08:24:02 2025 GMT
        Subject: CN=6E1E1A693B01BE2938DE0AADA2160F2C029778A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:f3:cf:43:47:d9:9a:d4:92:39:05:dd:73:
                    a8:60:02:af:05:3c:4f:b6:cc:40:94:a7:e8:74:c7:
                    0e:ba:53:24:45:51:54:63:8b:81:63:2d:26:9e:9e:
                    6b:63:27:9a:66:20:fb:e9:31:7c:7c:f1:01:13:91:
                    4c:79:2d:1c:c6:44:c3:1e:cc:95:15:49:c4:8a:89:
                    9d:58:78:22:6b:80:0e:ce:9b:3f:80:c9:fc:91:ce:
                    10:14:6c:77:9b:06:f9:3f:6c:a7:7e:6d:07:2b:4e:
                    95:73:9c:56:0a:1a:ed:6f:50:7f:1f:9c:63:7c:91:
                    da:67:a3:ac:0e:8d:61:2c:86:09:78:29:81:87:2d:
                    68:6f:5f:e9:22:28:1f:59:a6:cf:00:64:f9:f1:96:
                    20:f1:2e:57:44:05:c1:f1:b7:3e:9a:9f:80:37:c8:
                    f7:93:ca:5b:a2:27:ae:2a:8b:1a:55:cd:4f:bc:14:
                    29:0a:38:7c:94:06:3e:16:3f:93:07:55:30:24:1d:
                    aa:5a:80:3d:30:89:14:64:7e:2f:9b:31:99:9e:e2:
                    c6:49:50:ec:2d:97:87:23:c5:33:db:17:1f:68:5f:
                    9a:49:5c:ef:ba:ad:2a:3d:92:ac:91:ea:70:34:03:
                    e3:5c:e0:e8:d3:ea:da:d3:50:e2:48:14:52:c5:d0:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1E:1A:69:3B:01:BE:29:38:DE:0A:AD:A2:16:0F:2C:02:97:78:A5
            X509v3 Authority Key Identifier:
                keyid:0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/34352e3136352e3139342e302f32332d3233203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:73:1c:f3:67:dd:99:26:2e:82:3e:01:40:01:db:3c:f0:fa:
         eb:81:94:d5:8a:a6:83:47:d9:7a:3b:3d:93:6a:59:32:92:3c:
         62:04:c4:65:a6:5f:35:c0:c1:c8:e6:62:59:c7:c0:04:db:0f:
         29:88:af:39:34:7a:f5:c7:3a:a5:01:11:cd:5f:53:a0:b8:46:
         be:61:c0:31:d5:a7:30:27:7e:fb:7a:33:fd:05:2f:92:7d:8d:
         90:a4:b3:36:9a:c9:53:fe:ce:9b:66:79:05:33:e0:3f:7d:f2:
         58:1f:fe:91:16:4f:55:ce:44:e9:2b:8b:51:b5:1a:7c:4f:43:
         60:ac:9c:90:87:59:40:d6:e3:18:90:2b:3e:94:cc:ad:b5:a3:
         7b:8d:c6:70:77:c5:05:9e:48:93:3c:ef:1d:35:95:73:c4:36:
         da:f2:6f:cc:57:e2:ef:8c:ff:cd:65:25:4b:58:86:13:a2:2c:
         30:e4:02:6c:16:24:53:fe:2f:15:74:89:a6:43:a1:f5:c3:bc:
         f4:df:7a:79:6b:df:d5:9d:98:f5:e1:06:77:52:51:60:33:2c:
         38:ea:af:25:d1:15:d9:31:74:14:b4:e2:75:50:fd:54:bf:57:
         4f:d7:23:fc:19:db:7f:eb:ad:f8:a4:a0:cc:40:45:36:59:b0:
         41:8e:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:14:26 2024 by rpki-client on console-ams.rpki-client.org