Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39352e302f32342d3234203d3e20323638313439.roa
File:                     34352e3137302e39352e302f32342d3234203d3e20323638313439.roa (raw, json)
Hash identifier:          O+IQI/u87MPjuXJK6cCjAKEXyjMyMcB67XqY/Gsqjl8=
Subject key identifier:   E3:D5:D9:C7:55:51:02:D5:86:AA:BA:37:A1:FE:EE:D2:98:52:3C:8F
Certificate issuer:       /CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
Certificate serial:       424D20B3BB40EA9CC800D62C12C9F86623C0C2C9
Authority key identifier: 62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39352e302f32342d3234203d3e20323638313439.roa
Signing time:             Wed 01 May 2024 00:12:39 +0000
ROA not before:           Wed 01 May 2024 00:07:39 +0000
ROA not after:            Wed 30 Apr 2025 00:12:39 +0000
asID:                     268149
IP address blocks:        45.170.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4d:20:b3:bb:40:ea:9c:c8:00:d6:2c:12:c9:f8:66:23:c0:c2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
        Validity
            Not Before: May  1 00:07:39 2024 GMT
            Not After : Apr 30 00:12:39 2025 GMT
        Subject: CN=E3D5D9C7555102D586AABA37A1FEEED298523C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:63:12:64:8c:27:80:a9:14:37:9d:6a:41:
                    30:f8:c6:af:41:a9:80:1e:97:17:f4:23:21:e9:26:
                    27:ff:a7:27:06:1e:88:f0:38:00:3b:ea:7c:79:e7:
                    de:47:07:45:8c:e5:72:a8:0d:34:94:63:d6:9c:c5:
                    24:f3:d0:15:12:1a:37:f8:02:d6:30:0b:82:fb:58:
                    80:87:ad:95:ef:cf:00:6a:e0:84:bf:20:29:08:e9:
                    16:bf:dd:47:11:31:00:02:18:3a:77:af:65:74:3b:
                    12:aa:20:f3:07:de:cc:7f:15:e1:27:8d:74:0f:36:
                    e7:f6:83:3a:92:3d:a3:b3:16:18:ee:62:c4:9d:9c:
                    04:1e:81:97:09:f1:e2:fd:97:fd:10:84:a6:69:35:
                    db:2a:bc:1d:ce:d5:f5:6c:41:ba:51:35:63:b9:52:
                    ee:c1:0b:1f:36:55:a0:15:3c:89:65:23:84:1e:44:
                    9b:2e:e7:8f:aa:10:ef:a0:d2:9a:1d:49:08:09:fc:
                    bb:c0:dc:47:65:89:fb:b3:7d:e0:0e:de:67:e8:7a:
                    2c:2f:c7:75:05:23:5d:82:5b:38:16:1f:68:1f:a9:
                    44:6e:3c:19:1a:03:8f:07:35:fb:98:c9:f5:28:6d:
                    97:3b:aa:dc:f2:14:f8:95:22:c8:59:b7:b9:34:fa:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D5:D9:C7:55:51:02:D5:86:AA:BA:37:A1:FE:EE:D2:98:52:3C:8F
            X509v3 Authority Key Identifier:
                keyid:62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39352e302f32342d3234203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:46:e2:7f:59:55:88:45:4d:4b:5f:0b:a0:1f:07:6f:97:
         28:d2:bf:ef:f3:b1:e0:4c:8e:c2:9c:df:04:34:4f:73:b3:67:
         2f:f9:79:64:61:73:e6:d7:b3:36:fa:b5:67:6f:58:6e:7d:21:
         2f:f8:cf:4f:67:62:e1:57:24:60:77:2e:33:37:ad:ff:5e:47:
         a8:22:93:42:66:07:df:6a:1d:bd:bf:f6:b6:94:6f:97:ec:86:
         9a:2b:37:c8:58:51:ea:b6:9d:ef:65:14:8e:36:1e:4e:b3:16:
         84:71:c0:99:29:47:cc:49:d7:1d:19:5a:8e:25:b9:94:59:1e:
         0c:90:a9:8f:17:91:28:bd:e9:47:74:63:a8:f6:fa:6c:3a:e4:
         87:7c:33:26:52:b0:c0:58:69:76:f6:b2:0a:76:ce:52:fd:dd:
         f5:b0:93:4d:79:36:5c:80:54:e0:cc:44:1d:98:0c:2d:15:19:
         47:86:88:18:f9:ca:59:62:c6:1e:14:93:48:19:e7:6e:5b:2c:
         4d:4e:c7:66:b6:66:2c:bc:d1:0e:9c:f5:43:b1:a3:4f:84:a0:
         81:bd:3b:0d:b6:9a:1e:08:e4:f1:3e:9a:bf:ad:2d:62:a2:a6:
         1b:7f:e9:19:6a:c2:8a:25:1b:fa:46:bf:d6:1e:10:76:71:d2:
         ce:b0:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org