Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39332e302f32342d3234203d3e20323638313439.roa
File:                     34352e3137302e39332e302f32342d3234203d3e20323638313439.roa (raw, json)
Hash identifier:          tOQZph82IA4W2Bs+nrJo72SQEjWd5x9MtC3blSeT+aI=
Subject key identifier:   E4:04:A0:3F:19:C9:6A:A7:BC:E0:2A:05:18:6C:7E:ED:47:90:AE:EF
Certificate issuer:       /CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
Certificate serial:       6EFC1AA624B4A4C6224BF353F7AE53293FE9C0A5
Authority key identifier: 62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39332e302f32342d3234203d3e20323638313439.roa
Signing time:             Wed 01 May 2024 00:12:40 +0000
ROA not before:           Wed 01 May 2024 00:07:40 +0000
ROA not after:            Wed 30 Apr 2025 00:12:40 +0000
asID:                     268149
IP address blocks:        45.170.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fc:1a:a6:24:b4:a4:c6:22:4b:f3:53:f7:ae:53:29:3f:e9:c0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
        Validity
            Not Before: May  1 00:07:40 2024 GMT
            Not After : Apr 30 00:12:40 2025 GMT
        Subject: CN=E404A03F19C96AA7BCE02A05186C7EED4790AEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:fa:ac:7c:24:c5:99:d4:75:62:11:e9:85:
                    8b:16:2e:09:5e:8f:68:59:14:31:fb:1c:69:9c:45:
                    1b:bd:ed:d2:cb:36:a3:d8:36:8e:6b:97:0b:50:dc:
                    13:74:13:fe:47:3a:c3:86:46:17:c2:01:64:53:4f:
                    c4:ee:04:56:d5:6e:86:68:77:3f:2f:65:de:49:b1:
                    e2:35:de:83:39:0a:aa:70:53:21:3c:f5:e3:4c:17:
                    22:c7:5d:6a:6e:bb:c7:7e:1e:71:70:a4:82:df:1b:
                    09:34:3d:3b:3e:23:bd:65:66:da:fb:c1:be:ec:22:
                    64:96:25:4a:a3:7d:69:5d:fc:b1:01:1d:9f:4c:99:
                    60:2b:8f:fa:bc:fe:2c:64:ab:47:41:61:92:16:a4:
                    93:2d:ca:e0:5a:60:23:ed:e5:d3:79:f8:fc:53:be:
                    d7:d4:28:70:d5:a5:8a:ee:5e:7c:2c:20:04:ad:30:
                    29:33:d3:55:19:28:22:70:35:43:97:b7:46:e0:0c:
                    9b:3f:0d:21:21:05:d5:84:58:d1:e7:7d:ed:6d:2c:
                    cf:48:a8:3c:04:b8:97:f4:b2:4c:9d:25:3d:75:99:
                    e9:42:76:67:f2:81:1c:06:de:c7:6b:4c:fe:20:34:
                    b0:b1:24:1a:3a:67:34:0e:ea:ca:3a:b7:34:4d:fa:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:04:A0:3F:19:C9:6A:A7:BC:E0:2A:05:18:6C:7E:ED:47:90:AE:EF
            X509v3 Authority Key Identifier:
                keyid:62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39332e302f32342d3234203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:25:cb:d5:d4:35:56:07:3f:22:14:e9:ed:2f:52:cb:4c:9b:
         94:dc:66:ae:86:10:c6:bc:3f:6f:ad:45:e4:13:1a:bc:af:0f:
         7c:62:b5:96:9f:b6:95:1d:fd:ce:86:ea:7a:1c:9a:02:4d:52:
         cc:50:80:ea:02:81:b0:65:2b:4a:6d:5b:fa:5f:08:e1:cc:a2:
         fc:89:5f:4b:22:06:c1:16:e1:4e:24:95:52:f9:92:61:42:6b:
         f1:1b:fc:1b:7d:e1:ac:c0:91:d0:17:66:21:39:c0:49:32:48:
         88:68:76:96:b4:07:d1:d0:49:ce:d1:df:75:14:a6:53:3c:9c:
         c7:11:b5:c8:24:39:f0:07:bf:50:d1:38:0f:c7:e1:90:09:9a:
         fe:6a:27:fb:39:5a:b8:ff:5e:49:20:7b:da:b3:6b:93:e2:15:
         5d:10:e4:6b:8a:b8:6c:80:60:da:2f:56:ab:2a:35:ab:40:a2:
         26:1b:6e:c4:ec:2d:d6:72:f5:68:29:55:ca:ab:d1:31:7e:0f:
         4c:18:ba:dd:e6:d9:9a:3e:f0:03:62:a4:fd:48:4a:f1:48:df:
         24:90:35:f7:0b:ec:d1:56:e0:82:06:d6:fd:5f:29:c7:5a:7b:
         62:69:37:bb:e3:b4:c6:ed:07:aa:e4:95:e1:a5:27:58:9f:a8:
         d5:85:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:55 2024 by rpki-client on console-fra.rpki-client.org