Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39342e302f32342d3234203d3e20323638313439.roa
File:                     34352e3137302e39342e302f32342d3234203d3e20323638313439.roa (raw, json)
Hash identifier:          f3B3qzZ8JWXBegxVbqk8FsYuJnIPvzWhDH8r2RP5Qng=
Subject key identifier:   AE:7F:77:07:44:50:AE:4F:D9:76:69:B0:7C:72:8C:90:A0:64:9C:86
Certificate issuer:       /CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
Certificate serial:       3EA8201474FA1FB4D8608FA643C81E44F4C86567
Authority key identifier: 62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39342e302f32342d3234203d3e20323638313439.roa
Signing time:             Wed 01 May 2024 00:12:40 +0000
ROA not before:           Wed 01 May 2024 00:07:40 +0000
ROA not after:            Wed 30 Apr 2025 00:12:40 +0000
asID:                     268149
IP address blocks:        45.170.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a8:20:14:74:fa:1f:b4:d8:60:8f:a6:43:c8:1e:44:f4:c8:65:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
        Validity
            Not Before: May  1 00:07:40 2024 GMT
            Not After : Apr 30 00:12:40 2025 GMT
        Subject: CN=AE7F77074450AE4FD97669B07C728C90A0649C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:0a:33:cb:c5:b6:1e:c2:a1:d1:0f:c7:b4:
                    6e:92:f8:20:38:a5:f4:4b:ae:d7:bd:31:71:89:f7:
                    57:fb:d4:23:76:e8:bd:37:da:96:99:f8:48:e8:cb:
                    cd:2d:83:d3:37:e4:3d:ab:73:3c:51:16:91:d9:fe:
                    d0:31:42:4d:6a:6f:fe:e5:5e:ce:80:82:be:7b:35:
                    c6:e9:54:69:91:ea:ee:1a:13:90:3a:6c:72:fe:8e:
                    ec:13:af:9b:c2:83:e7:dc:2c:9c:6e:be:60:79:2f:
                    92:d4:fd:4f:c4:dc:b9:e4:4a:cb:75:98:8d:9c:92:
                    8e:d1:63:d7:9c:b3:01:5a:92:65:13:60:e4:75:82:
                    55:61:3c:31:3a:de:08:ce:b8:e0:0a:70:8b:43:55:
                    b8:1d:ea:d4:fd:54:a7:d5:6b:d0:7b:27:f6:ff:29:
                    51:3e:7e:72:13:3e:1b:a4:a0:08:80:0c:19:d3:c6:
                    2f:ff:f1:a3:cb:37:6e:31:99:d8:d3:b8:9d:7d:6f:
                    29:e2:0c:0f:e5:56:42:f5:03:97:58:ea:61:38:f8:
                    64:3d:61:43:5d:5c:51:05:94:ed:62:e5:0f:a4:0a:
                    c2:29:c7:02:04:f7:6f:0c:82:1e:19:40:0b:5c:d3:
                    28:50:a9:0d:62:c3:76:06:25:3d:1f:9c:18:5f:b9:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7F:77:07:44:50:AE:4F:D9:76:69:B0:7C:72:8C:90:A0:64:9C:86
            X509v3 Authority Key Identifier:
                keyid:62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39342e302f32342d3234203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:81:aa:31:54:d1:fa:d3:f4:85:ad:b5:c2:85:7e:bb:fd:da:
         1d:ec:d7:b4:84:65:ab:a2:fb:19:d8:ed:0c:8e:af:a6:1e:e8:
         4c:ad:bf:f4:c4:42:19:fe:53:03:1a:1c:c0:7c:1f:11:7b:b4:
         66:6c:60:05:8e:59:a4:01:61:77:92:57:b2:cb:44:43:8a:6b:
         1a:78:5b:17:90:cf:f7:54:3d:cb:c3:c1:b6:fb:9c:6b:ce:17:
         56:80:ba:96:e3:b3:fe:df:45:41:c6:f7:f4:c8:0c:cc:72:3c:
         a2:2f:24:6e:16:e4:d3:05:e6:0a:c9:44:df:ed:bb:71:e0:82:
         99:cb:47:df:2b:f9:80:f1:b5:5f:ff:64:3b:10:99:d5:b1:6e:
         78:ff:0d:bb:2b:0f:31:1c:c8:b1:ee:48:dd:b5:93:d2:7d:28:
         6e:ce:7b:5b:a8:77:04:a7:6c:d6:be:6c:c7:00:6f:87:84:cb:
         b5:3c:02:1d:d6:96:15:e7:77:6f:71:00:29:4a:f1:55:1f:59:
         88:cd:0c:a9:2e:dc:39:52:ff:cc:e6:f4:d9:72:a0:22:ba:79:
         58:8a:74:d7:5d:f7:d2:0d:2d:55:93:95:d9:64:f7:06:a1:f0:
         8b:a8:19:d5:79:ae:82:08:63:91:5c:72:d3:bb:38:f3:9f:3f:
         84:37:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org