Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32332d3233203d3e20323639363730.roa
File:                     34352e3139312e36342e302f32332d3233203d3e20323639363730.roa (raw, json)
Hash identifier:          cLPk8qxoUITCHLUvq0MO7EgwWmp5tuO/sNIRMHYr5HU=
Subject key identifier:   12:A4:AC:EA:40:F8:0B:14:27:60:E9:5A:AF:37:BB:3D:11:90:35:B3
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       52514465EF7A44CDE4265F913D65196082CF57C7
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32332d3233203d3e20323639363730.roa
Signing time:             Wed 03 Apr 2024 19:36:40 +0000
ROA not before:           Wed 03 Apr 2024 19:31:40 +0000
ROA not after:            Wed 02 Apr 2025 19:36:40 +0000
asID:                     269670
IP address blocks:        45.191.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
                          rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:51:44:65:ef:7a:44:cd:e4:26:5f:91:3d:65:19:60:82:cf:57:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Apr  3 19:31:40 2024 GMT
            Not After : Apr  2 19:36:40 2025 GMT
        Subject: CN=12A4ACEA40F80B142760E95AAF37BB3D119035B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:a4:9b:e8:fe:fc:b2:36:e0:92:8a:72:cc:
                    75:91:57:62:82:8f:ba:74:d1:5f:08:9c:16:41:2f:
                    88:e5:4a:c6:5b:c9:96:7f:56:da:0b:1d:9e:f8:b0:
                    24:cc:09:be:e5:5a:dd:c7:42:1f:d3:b9:af:4e:2b:
                    92:83:db:c4:fa:d1:6e:2d:29:89:30:91:b4:94:7c:
                    2b:62:38:07:0d:3e:6e:4b:54:cc:46:1d:2f:b2:ca:
                    67:d1:3a:36:ae:3c:37:42:e6:7c:5d:e0:ea:ae:b6:
                    bc:8a:ff:41:d3:64:7c:6d:cf:e5:ac:d9:72:aa:dc:
                    ae:74:f0:9f:82:b3:c6:87:60:3e:15:7c:53:74:1c:
                    45:e2:26:67:f0:33:0d:42:18:e9:2f:18:18:ec:b4:
                    66:42:aa:c9:37:2c:59:cd:61:f2:5d:c2:33:f8:38:
                    c6:37:16:a2:0b:26:54:d6:a6:47:86:2d:4d:cc:88:
                    e1:b0:83:12:cb:c4:75:22:e2:7e:05:4e:e4:48:a1:
                    0a:71:6b:05:d0:e2:b6:19:73:cf:bf:19:86:9a:98:
                    f7:c5:55:41:95:72:5a:e1:c5:c6:d8:3e:c5:fd:d1:
                    60:1b:8d:2c:05:f8:0a:b0:8b:1f:14:89:9f:af:7f:
                    da:2d:6b:10:a5:8e:01:07:4a:08:8f:ea:fe:18:d7:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:AC:EA:40:F8:0B:14:27:60:E9:5A:AF:37:BB:3D:11:90:35:B3
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32332d3233203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:1b:04:0b:46:46:5c:5a:18:29:a2:60:77:17:4f:68:d3:
         02:21:24:8b:66:eb:99:6a:a7:b1:b9:40:37:05:7b:3d:f2:43:
         3e:c0:4f:e7:0c:dc:c1:5f:f0:b6:0f:48:c7:68:66:e7:18:c9:
         26:07:eb:96:5a:9f:00:13:4c:3a:4c:0b:3f:4b:27:d9:ab:24:
         14:38:b5:e7:ca:9b:03:e3:2f:1a:c1:5f:78:37:aa:c7:13:6b:
         66:de:77:bb:04:f6:ef:30:a3:98:69:36:db:03:06:f0:c6:69:
         cf:66:fa:ee:65:b1:9a:f4:98:c8:8b:14:e4:81:96:a9:26:b1:
         38:b7:b5:bd:0e:58:c1:56:4d:76:19:7f:cd:97:80:5b:38:80:
         c5:7e:06:fa:17:60:77:58:cc:e3:09:5c:16:c9:06:0e:6b:cc:
         b1:6f:85:85:da:b7:2b:02:f5:85:0f:e6:f4:ac:ae:9a:94:4c:
         e7:ac:9e:84:a2:c2:23:cf:e1:1b:d3:37:b8:28:9e:f7:3b:1a:
         da:07:99:5a:c2:98:77:fb:86:86:9d:74:b7:2f:df:ae:d4:52:
         3a:3e:2f:1a:3a:3a:5e:bb:44:d9:16:60:a1:cf:fa:fc:94:1a:
         2e:fb:e7:fa:34:26:56:94:51:b8:fc:b9:d7:a3:3a:bf:85:53:
         2d:2e:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org