Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa
File:                     34352e3139312e36342e302f32342d3234203d3e20323639363730.roa (raw, json)
Hash identifier:          BCqW/ESLgbUhvjmhR5xrZGYqEhDMfksfyj1GZAlMLvQ=
Subject key identifier:   E3:4E:D6:2C:59:FB:62:B9:E4:0E:DE:45:34:CC:81:6F:60:A2:D7:71
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       222428FD8E6676325ED2F0C672DFE314B62B9468
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa
Signing time:             Wed 03 Apr 2024 19:36:39 +0000
ROA not before:           Wed 03 Apr 2024 19:31:39 +0000
ROA not after:            Wed 02 Apr 2025 19:36:39 +0000
asID:                     269670
IP address blocks:        45.191.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
                          rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:24:28:fd:8e:66:76:32:5e:d2:f0:c6:72:df:e3:14:b6:2b:94:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Apr  3 19:31:39 2024 GMT
            Not After : Apr  2 19:36:39 2025 GMT
        Subject: CN=E34ED62C59FB62B9E40EDE4534CC816F60A2D771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:2b:a8:8c:f2:18:1b:32:18:6d:58:2b:84:
                    03:65:d9:51:3b:49:56:b9:32:34:a1:65:2d:32:38:
                    d2:8e:4a:c9:f6:1f:31:59:f2:16:ea:88:b4:b3:ef:
                    59:f2:50:5a:85:0a:24:eb:e9:d0:cc:1f:8e:2b:90:
                    06:ea:11:9a:bb:00:ec:82:fa:5e:1a:55:0e:2a:86:
                    f0:de:bf:18:fe:54:f8:7a:10:60:eb:a5:1a:a0:94:
                    8f:31:bb:fe:cc:e0:23:51:00:9d:91:80:dd:b9:69:
                    10:1b:2e:ae:ca:28:23:1d:b1:68:ab:1c:f9:18:07:
                    56:a1:d6:ff:73:e1:57:ae:46:92:a6:bd:3c:4f:29:
                    5f:ff:c4:92:90:36:59:e9:c8:f6:ad:35:9b:d5:d5:
                    78:d6:22:53:e2:c9:24:bc:47:68:3e:d0:23:f2:08:
                    05:a7:90:d1:35:4b:30:a5:b3:0e:db:55:e3:dd:b9:
                    90:0c:4a:52:f8:70:f9:68:62:ec:59:4f:4c:f0:c2:
                    8c:d3:5e:5b:c3:5c:4f:e4:72:f0:7b:3c:c8:fb:17:
                    2a:b9:25:79:91:1b:5f:af:be:4d:3b:ab:7a:7f:a3:
                    09:a5:1c:2c:0b:b7:6b:b9:55:64:b2:0f:ef:5a:04:
                    0b:5b:08:01:ce:83:60:78:f9:32:a2:96:e6:27:9d:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4E:D6:2C:59:FB:62:B9:E4:0E:DE:45:34:CC:81:6F:60:A2:D7:71
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:c0:1b:68:bb:1d:e7:a8:9c:4b:5f:1e:2b:65:45:ec:f6:
         a2:de:35:82:3e:73:4b:00:0d:2f:e7:cb:c9:1c:2e:6a:b1:f5:
         44:94:99:dd:92:59:60:2a:3e:d4:6a:37:f6:7d:9d:f0:fe:e7:
         cd:17:c4:76:4b:ee:01:19:80:2c:47:0a:a0:10:99:c0:2f:61:
         03:64:f0:20:ee:ae:ee:e8:1e:2e:00:b2:91:74:8d:ab:61:c8:
         3b:6a:64:4c:91:95:df:31:9e:ff:bc:38:12:86:02:5d:ad:7e:
         36:2c:26:e9:c8:44:8a:01:8f:78:6b:71:ea:f2:92:87:d1:a5:
         5b:e8:66:5c:7e:62:5d:ac:3e:8c:31:25:af:8c:58:de:9b:1d:
         90:3e:e5:c4:2d:aa:6c:f2:ed:80:9c:cb:cd:6e:7c:10:14:eb:
         9f:1a:6d:0f:50:81:bb:69:77:47:04:38:0d:5a:fa:10:ba:cd:
         f2:46:46:8a:1b:74:50:f5:88:f8:ec:75:9f:e6:70:a5:50:15:
         a6:83:84:8a:71:53:23:4f:05:59:00:3e:88:d7:0e:bf:9a:2c:
         e1:16:6e:22:ee:07:f9:30:a2:02:39:cc:5e:44:53:9f:fb:41:
         a5:1e:eb:72:b5:a4:ef:7a:26:6f:b8:6d:12:b0:86:68:e3:bb:
         15:38:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org