Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa
File:                     34352e3139312e36342e302f32322d3232203d3e20323639363730.roa (raw, json)
Hash identifier:          OXctU4gN9UtKMSIhN+SJ8frAt4hcsSk6hxUaRW7SxBM=
Subject key identifier:   80:A5:E0:99:2E:35:03:7A:A8:19:3E:4F:1E:A2:A5:E0:FA:17:CF:D1
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       6B2EA4939B17D1CD939B09F95B0CB528773DA564
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa
Signing time:             Wed 03 Apr 2024 19:36:39 +0000
ROA not before:           Wed 03 Apr 2024 19:31:39 +0000
ROA not after:            Wed 02 Apr 2025 19:36:39 +0000
asID:                     269670
IP address blocks:        45.191.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
                          rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2e:a4:93:9b:17:d1:cd:93:9b:09:f9:5b:0c:b5:28:77:3d:a5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Apr  3 19:31:39 2024 GMT
            Not After : Apr  2 19:36:39 2025 GMT
        Subject: CN=80A5E0992E35037AA8193E4F1EA2A5E0FA17CFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:18:d8:59:35:a1:55:d8:1e:f0:12:5f:bf:
                    1c:5e:0a:66:22:9a:e0:46:16:dc:a9:9b:57:49:a3:
                    ec:13:b3:4b:0d:15:d7:bb:d3:a8:9c:c8:a4:b2:95:
                    d2:3c:1e:be:a1:1c:e7:38:2d:de:73:cf:01:d4:4e:
                    69:54:05:57:ae:fe:af:9d:fa:b0:2c:7b:1c:7b:38:
                    04:68:3d:24:2e:15:b0:b9:e8:46:fd:c6:4f:72:2b:
                    fb:77:33:c3:34:06:29:3f:dd:45:1a:a9:5f:0f:27:
                    59:4b:0c:b4:c1:a2:3d:d0:aa:da:18:85:c7:fc:63:
                    05:6d:0b:31:4b:bb:ec:d8:dc:92:3e:36:b8:63:0d:
                    7a:5f:a9:9b:63:d0:be:9f:74:c2:db:e2:34:10:8a:
                    36:fe:a2:48:b3:c7:39:c7:48:c5:84:ca:40:01:81:
                    2e:64:93:b3:97:7b:76:2e:29:89:ef:d9:ec:88:ba:
                    a1:3c:4d:45:21:e8:cf:03:9b:ec:27:09:a9:f8:68:
                    56:08:ff:15:3b:a6:00:0b:36:d7:bf:01:e1:9f:c3:
                    a8:fb:fc:1d:8c:d7:0b:82:40:dc:64:4b:1d:39:2d:
                    25:ce:b4:c0:29:be:e6:a0:ec:32:79:31:fc:db:21:
                    60:80:67:09:05:30:9a:bf:0d:6a:10:80:a5:4b:23:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A5:E0:99:2E:35:03:7A:A8:19:3E:4F:1E:A2:A5:E0:FA:17:CF:D1
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:55:1a:bf:2b:cf:de:6b:ed:43:d5:38:a8:66:5d:16:fc:
         12:22:72:e3:f6:05:69:ee:96:07:33:7e:df:ca:47:b4:4b:15:
         a6:39:fa:27:3f:92:4d:3d:4c:66:da:3e:e2:dc:91:09:07:6e:
         15:45:c7:b7:f0:bc:47:5d:e3:96:22:eb:fe:14:96:f5:c5:80:
         36:f6:d3:3e:83:64:cf:e1:ae:4c:b0:54:76:bc:07:3d:af:67:
         de:45:94:69:51:fd:da:2d:6c:e8:78:0b:62:84:e4:8a:6f:e1:
         28:e7:33:aa:b9:da:db:f8:b6:36:c7:7e:69:88:30:f9:76:be:
         73:8f:be:00:e4:7d:64:ea:ba:9d:ed:4f:18:74:d6:55:4d:8c:
         9f:18:eb:81:91:d3:3e:24:db:4e:58:71:9a:be:d5:86:fe:bc:
         08:a4:ff:b7:02:af:2d:6c:6e:82:a5:8f:81:61:df:0b:8a:cc:
         a7:dd:38:a5:10:47:c2:3a:01:6b:12:3b:2d:8a:30:06:f4:42:
         33:fa:03:fd:da:6a:24:69:cd:3f:36:f9:04:22:af:d0:5e:21:
         3b:95:7c:da:67:a4:35:3d:e4:31:ab:99:31:c3:c9:16:3a:c7:
         0f:69:85:4c:e5:8b:23:e7:d5:cb:2a:00:9e:1e:f1:91:e7:4c:
         1c:b3:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org