Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36352e302f32342d3234203d3e20323639363730.roa
File:                     34352e3139312e36352e302f32342d3234203d3e20323639363730.roa (raw, json)
Hash identifier:          6G5ec+L5uZgJRPC5yDNkRfJMbnu4GTRaxmh4dHSn7JQ=
Subject key identifier:   FC:BE:33:47:07:88:1F:F2:03:E6:B1:09:32:DC:68:04:72:11:58:16
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       31C83A3FB9D491FF5CA2AB21E2F5B911BA42E0C3
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36352e302f32342d3234203d3e20323639363730.roa
Signing time:             Wed 03 Apr 2024 19:36:39 +0000
ROA not before:           Wed 03 Apr 2024 19:31:39 +0000
ROA not after:            Wed 02 Apr 2025 19:36:39 +0000
asID:                     269670
IP address blocks:        45.191.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
                          rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:3a:3f:b9:d4:91:ff:5c:a2:ab:21:e2:f5:b9:11:ba:42:e0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Apr  3 19:31:39 2024 GMT
            Not After : Apr  2 19:36:39 2025 GMT
        Subject: CN=FCBE334707881FF203E6B10932DC680472115816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:4b:86:83:07:a6:44:d7:12:8f:3d:e2:90:
                    8f:b2:7f:2b:cb:95:5f:9a:01:7a:b1:f6:3a:b2:7a:
                    fa:5a:52:ad:6a:25:52:d9:27:34:a7:df:ed:e1:9d:
                    b6:fe:8f:12:07:62:04:98:1f:70:76:fd:9c:9c:cf:
                    05:5c:f9:9f:c0:d3:cf:90:51:c5:1b:bd:a3:01:b4:
                    ff:00:24:12:45:8c:bd:a5:44:c7:66:90:64:b2:aa:
                    35:4c:47:7c:56:d2:ab:96:6e:e0:29:7d:9e:33:7c:
                    80:ea:80:87:cc:40:45:f4:7a:91:be:b0:34:fc:01:
                    e7:5e:71:1e:85:52:f2:40:8c:5c:69:65:c1:14:17:
                    6f:af:7a:39:6f:ca:c0:ef:88:d4:d7:76:cb:81:8a:
                    a7:0c:3c:7a:b7:6d:b1:c0:d0:eb:8d:e0:3a:7c:93:
                    e3:ff:87:1c:60:bc:a4:41:27:31:04:7d:93:6b:07:
                    73:da:6d:a3:c5:34:86:20:d5:ce:a0:30:46:c6:a9:
                    f0:66:99:e6:34:e4:73:d0:52:52:b3:75:d4:09:f3:
                    c1:b0:6a:79:df:6c:d7:cf:09:b3:0c:c6:72:e9:3e:
                    96:69:62:d7:30:dd:e4:17:45:88:ea:8e:14:62:7c:
                    49:ed:b6:63:40:eb:6e:2d:a2:03:7e:0f:91:19:f3:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:33:47:07:88:1F:F2:03:E6:B1:09:32:DC:68:04:72:11:58:16
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36352e302f32342d3234203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:96:2d:0f:cf:7d:42:4c:cd:33:1c:a0:75:48:f9:47:c8:
         38:43:91:8d:90:d8:73:3b:cd:b1:28:eb:0a:b5:bc:9a:e3:14:
         4a:33:5a:e8:26:96:05:b3:8e:2b:72:50:54:9d:81:60:ee:23:
         c8:a1:ae:2f:00:44:b7:25:e5:0a:ae:d8:38:5c:20:53:1b:d4:
         db:0f:61:0b:7d:0d:44:05:e8:15:3b:45:31:77:d5:3f:47:69:
         47:07:15:a9:e5:11:d6:3e:e1:53:38:7f:a0:49:cb:7a:36:19:
         6c:8b:5e:e6:57:e8:e2:4f:27:3b:d4:29:b5:bb:e5:18:d7:6d:
         a4:f8:8d:cb:09:39:55:6c:29:93:03:14:3d:78:d8:94:a9:6f:
         69:30:ab:ab:47:55:6c:a8:a8:61:35:a4:ae:94:dd:18:d0:7a:
         f5:d6:fc:6a:fb:68:b5:5f:ef:2d:27:85:fb:9a:cc:88:65:8e:
         d9:d3:ae:4a:9c:09:96:44:cd:01:a2:12:8f:43:b6:57:7b:ed:
         3d:17:d2:77:44:80:1d:1a:30:01:7e:ce:02:47:4e:4f:2f:c9:
         79:c3:bf:f0:2f:50:98:47:66:e4:69:40:3c:2d:a4:22:a6:fd:
         4d:2d:91:10:f7:fe:d9:6a:26:7d:c0:36:3e:c7:8c:f3:13:a6:
         06:46:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:34 2024 by rpki-client on console-ams.rpki-client.org