Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa
File:                     34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa (raw, json)
Hash identifier:          iU9+5pNTDDqu5+5+A2waCBIXYCF4PShi8ad9KskBJrY=
Subject key identifier:   F4:1D:D8:98:2C:80:9E:42:CA:2C:76:D0:EA:35:53:1A:1E:F0:9B:76
Certificate issuer:       /CN=C896D3E514DEA0EE3CC97EA356050AE859BEAB4E
Certificate serial:       2E6973153B86557C5F9B7D7C89E17F1168A6DA7A
Authority key identifier: C8:96:D3:E5:14:DE:A0:EE:3C:C9:7E:A3:56:05:0A:E8:59:BE:AB:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa
Signing time:             Mon 15 Jul 2024 18:04:00 +0000
ROA not before:           Mon 15 Jul 2024 17:59:00 +0000
ROA not after:            Mon 14 Jul 2025 18:04:00 +0000
asID:                     269683
IP address blocks:        45.191.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl
                          rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:69:73:15:3b:86:55:7c:5f:9b:7d:7c:89:e1:7f:11:68:a6:da:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C896D3E514DEA0EE3CC97EA356050AE859BEAB4E
        Validity
            Not Before: Jul 15 17:59:00 2024 GMT
            Not After : Jul 14 18:04:00 2025 GMT
        Subject: CN=F41DD8982C809E42CA2C76D0EA35531A1EF09B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:e0:cc:eb:32:4f:36:68:f5:c6:35:ab:c4:
                    9b:91:e1:79:3c:33:2b:11:69:7d:32:60:16:06:0c:
                    fd:f8:d5:60:7e:47:d2:3a:c6:f7:41:ad:3d:93:04:
                    b5:5c:00:dc:42:84:04:dd:ed:44:bd:7f:21:35:ba:
                    85:c6:c3:5a:ca:11:91:23:17:1c:70:9d:d5:59:81:
                    d7:5e:b0:e8:1e:07:e5:95:7b:01:9d:ec:9c:f8:1d:
                    2b:9c:71:27:ce:cf:17:89:ab:c4:90:55:ba:97:f3:
                    01:3d:a3:a8:45:32:5e:0d:91:cd:97:94:97:ca:0e:
                    fe:91:78:27:df:4f:b6:15:f7:26:b4:10:2f:60:44:
                    9c:b4:48:c7:b3:d4:bd:37:5a:06:5b:a7:db:5f:5b:
                    1f:69:9a:e9:0f:e5:2d:37:bf:5e:93:f5:1b:bd:9a:
                    b2:4a:84:36:43:4e:27:5c:f9:9a:fc:c3:39:1a:9a:
                    f8:be:93:9f:4a:c9:02:d1:44:6a:5a:bc:a5:c2:8d:
                    ab:b1:c8:08:7b:4e:98:bd:2a:a3:89:54:db:91:28:
                    e0:51:25:44:b9:a0:95:69:ab:23:c0:12:84:af:7c:
                    29:48:cf:a4:27:5b:eb:1e:1f:51:ab:00:9f:3d:56:
                    df:88:09:a3:1d:34:73:ad:e8:a0:3b:55:04:f3:0f:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1D:D8:98:2C:80:9E:42:CA:2C:76:D0:EA:35:53:1A:1E:F0:9B:76
            X509v3 Authority Key Identifier:
                keyid:C8:96:D3:E5:14:DE:A0:EE:3C:C9:7E:A3:56:05:0A:E8:59:BE:AB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:92:0b:0b:b7:64:45:3e:1e:fa:d2:72:9e:66:b4:37:7f:d3:
         39:e0:6d:27:f7:77:41:83:1a:97:e1:57:9a:55:ba:43:1f:41:
         48:da:32:fb:82:62:d2:dd:31:cf:37:27:4a:c4:3b:f2:a1:b7:
         3c:8e:2e:8d:49:1b:88:e5:30:66:49:50:ca:07:9c:43:97:99:
         19:b0:8e:45:2c:49:50:0e:50:bb:96:64:5f:df:45:a3:7d:9e:
         f8:bf:80:65:76:15:eb:e9:cc:2f:d3:fa:79:29:9b:d8:00:20:
         27:a2:07:77:2c:f5:c7:80:ee:a0:4b:1b:8b:92:57:ed:9a:94:
         b7:99:6e:0c:1e:73:28:7e:b7:04:65:46:aa:1b:44:f9:13:a0:
         b4:b1:35:15:da:dc:77:30:4a:d1:d8:01:71:32:d4:e3:0b:71:
         13:20:26:ee:41:e0:31:7c:20:ed:e0:2c:4a:47:f0:c4:3a:a2:
         64:25:32:41:29:d3:11:0b:69:39:2d:8b:fb:fc:73:8d:c9:f5:
         60:f0:50:da:91:ca:37:45:27:47:af:32:6a:8f:7e:43:18:76:
         9b:24:9c:d4:1c:f0:81:21:d7:db:11:39:78:45:05:d2:6c:f8:
         77:69:49:6c:17:6d:16:44:4f:ff:97:e9:16:e0:fa:88:97:f6:
         ec:ab:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:03 2024 by rpki-client on console-fra.rpki-client.org