Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32332d3233203d3e20323639363730.roa
File:                     34352e3139312e36362e302f32332d3233203d3e20323639363730.roa (raw, json)
Hash identifier:          DSUq5We6Gm4XLbB9lMWxytruOR8fFJ6PFjUFuieS2XM=
Subject key identifier:   69:4F:9B:83:4B:EE:71:86:95:D2:B9:8C:8D:FA:95:11:2A:72:A4:5A
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       2FAEA2F09C57B7F57785694E29212BD6E1F6C271
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32332d3233203d3e20323639363730.roa
Signing time:             Wed 03 Apr 2024 19:36:39 +0000
ROA not before:           Wed 03 Apr 2024 19:31:39 +0000
ROA not after:            Wed 02 Apr 2025 19:36:39 +0000
asID:                     269670
IP address blocks:        45.191.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
                          rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ae:a2:f0:9c:57:b7:f5:77:85:69:4e:29:21:2b:d6:e1:f6:c2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Apr  3 19:31:39 2024 GMT
            Not After : Apr  2 19:36:39 2025 GMT
        Subject: CN=694F9B834BEE718695D2B98C8DFA95112A72A45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:32:1e:77:2d:f5:f8:0f:7d:a3:d9:07:c6:24:
                    81:42:44:6d:f3:e8:7f:34:2d:35:42:08:26:39:98:
                    07:db:52:a0:69:0a:d2:45:4f:9c:87:df:0e:dc:69:
                    ae:22:94:0b:11:09:43:df:0c:89:d7:41:6b:b1:f1:
                    97:cc:a7:71:29:97:39:3d:91:7b:d2:dc:40:5a:98:
                    fd:31:33:99:e3:89:c3:cd:45:f5:94:17:f2:2b:66:
                    f1:2b:7f:bc:a4:c0:6c:f0:38:c6:c8:09:31:f0:86:
                    69:d8:d0:84:b4:32:49:23:be:e0:67:7e:93:1c:c3:
                    18:fa:57:df:44:7c:c1:8d:fa:de:f1:e1:47:a2:3a:
                    8b:d6:a7:0f:0e:b0:19:2c:95:74:19:40:0d:7f:42:
                    68:f8:75:4b:32:d1:9e:6d:b0:5d:01:3d:2b:ec:db:
                    f6:7b:49:8e:c3:88:b5:4b:0f:cb:a7:ac:30:73:fd:
                    d7:cf:9b:75:34:0c:3c:ad:35:45:76:83:31:cd:ed:
                    a7:91:82:8e:df:41:7c:8e:91:fb:5a:70:e5:46:89:
                    de:38:65:3c:ec:43:28:d0:d3:fb:43:b1:79:c2:31:
                    d0:18:fd:53:ad:3f:6e:97:9f:ac:02:ec:e9:04:f6:
                    8c:59:18:49:7e:d4:b3:6a:99:bc:27:3e:a7:1b:73:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:9B:83:4B:EE:71:86:95:D2:B9:8C:8D:FA:95:11:2A:72:A4:5A
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32332d3233203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:88:46:42:6a:a5:c1:60:ba:57:32:87:d9:69:cc:0a:8b:5b:
         bf:42:f8:fc:08:fb:83:14:3e:c1:e8:a1:0d:15:de:9d:f3:d5:
         c7:f0:b0:c8:0f:32:c6:3b:b3:e5:c5:57:17:78:30:6f:92:6b:
         28:30:72:6d:32:9c:fe:c4:50:81:30:2b:f8:d9:34:e7:1d:69:
         d2:e1:d8:69:e3:ea:04:3a:90:a8:bf:24:b0:2d:d0:61:4b:e7:
         ba:5a:23:c8:71:9c:62:a2:61:d4:44:d7:d3:45:a2:08:77:e6:
         f8:b9:93:58:e0:22:dd:ee:14:f3:31:e8:fb:42:6f:f8:59:ad:
         bc:3f:b6:2f:ab:bd:e2:a0:0e:e2:c5:14:13:0e:b0:5c:c0:2b:
         0f:28:35:4a:89:8c:e3:d3:0f:79:5e:35:62:c5:33:5d:84:14:
         f6:3d:0b:d5:39:2c:19:77:82:23:38:d4:24:af:33:9c:1b:3d:
         bd:12:14:ed:9a:28:c9:94:09:1b:b7:e2:51:7f:2f:1f:d2:34:
         e5:2c:d1:95:db:5b:5a:10:39:fa:07:d9:f0:42:65:30:2e:f6:
         6c:64:7f:93:32:cb:29:45:11:47:b2:a8:e4:31:5c:6b:53:46:
         cd:37:7a:f6:69:c0:82:8c:c4:3c:c9:ad:7f:35:ac:f3:00:8d:
         54:02:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:34 2024 by rpki-client on console-ams.rpki-client.org