Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/34352e3233312e302e302f32322d3234203d3e20323637313835.roa
File:                     34352e3233312e302e302f32322d3234203d3e20323637313835.roa (raw, json)
Hash identifier:          zvCPruVjSX8Cq2hrFdm6sSK1zRwIbs3Dacrmjoebct4=
Subject key identifier:   81:93:71:96:1C:84:74:89:48:02:57:3E:B7:A2:FC:63:A4:85:B7:76
Certificate issuer:       /CN=6A279B424612940DC791666933613422FF82BC7E
Certificate serial:       2227AF773DE8D2A722770D81C79050B41B3C24A4
Authority key identifier: 6A:27:9B:42:46:12:94:0D:C7:91:66:69:33:61:34:22:FF:82:BC:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A279B424612940DC791666933613422FF82BC7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/34352e3233312e302e302f32322d3234203d3e20323637313835.roa
Signing time:             Tue 02 Jul 2024 14:34:28 +0000
ROA not before:           Tue 02 Jul 2024 14:29:28 +0000
ROA not after:            Tue 01 Jul 2025 14:34:28 +0000
asID:                     267185
IP address blocks:        45.231.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/6A279B424612940DC791666933613422FF82BC7E.crl
                          rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/6A279B424612940DC791666933613422FF82BC7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A279B424612940DC791666933613422FF82BC7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:27:af:77:3d:e8:d2:a7:22:77:0d:81:c7:90:50:b4:1b:3c:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A279B424612940DC791666933613422FF82BC7E
        Validity
            Not Before: Jul  2 14:29:28 2024 GMT
            Not After : Jul  1 14:34:28 2025 GMT
        Subject: CN=819371961C8474894802573EB7A2FC63A485B776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:0f:3d:96:73:ca:c9:42:15:28:dc:cf:25:
                    2a:4c:15:5b:7b:92:ce:6a:88:4c:e0:32:30:2a:9f:
                    02:a8:19:1f:b5:a3:de:13:aa:56:9f:cb:e8:5f:b2:
                    9e:98:33:14:4d:f4:b8:4a:33:88:e1:de:3b:66:bc:
                    da:36:b0:c9:3a:bf:4e:51:7e:ed:cb:9b:48:f9:10:
                    c0:1c:2e:5e:9e:e9:3d:b7:fa:85:74:02:37:3d:a8:
                    c8:c1:15:5f:8a:da:2d:5d:03:8e:48:d2:68:9a:c7:
                    cd:c8:44:e0:d6:47:2d:4e:75:01:da:08:ed:7e:bf:
                    a6:9b:9e:18:f1:aa:f6:ee:b4:99:fd:86:00:e5:80:
                    eb:68:2c:0a:74:9f:23:ba:87:29:66:1f:ef:0d:72:
                    59:2a:a3:ba:67:c4:85:f4:b8:70:6e:33:6b:37:4f:
                    04:72:83:01:57:ad:09:66:0f:18:a5:94:69:72:cb:
                    02:13:7b:47:cb:46:5d:21:b7:57:cf:6e:96:e2:9d:
                    aa:dc:ae:67:e2:e1:da:68:fe:e5:c7:b5:8a:00:56:
                    a0:a1:4b:cc:f7:c4:e6:10:60:5c:5a:28:62:85:49:
                    80:a4:8f:b3:b8:d7:7a:11:a4:ba:55:dc:97:f8:c8:
                    99:97:77:cf:20:ce:3f:ef:15:39:58:56:99:e9:ac:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:93:71:96:1C:84:74:89:48:02:57:3E:B7:A2:FC:63:A4:85:B7:76
            X509v3 Authority Key Identifier:
                keyid:6A:27:9B:42:46:12:94:0D:C7:91:66:69:33:61:34:22:FF:82:BC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/6A279B424612940DC791666933613422FF82BC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A279B424612940DC791666933613422FF82BC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/34352e3233312e302e302f32322d3234203d3e20323637313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:29:42:82:87:1b:5e:fc:4e:65:4e:3d:9e:ae:1f:e6:15:7d:
         19:9d:36:6c:c3:c8:bf:bb:a9:96:39:8e:f9:2a:25:9a:e4:25:
         a3:9a:85:37:dc:db:ac:23:6b:1f:93:4b:9c:d1:8f:17:8b:84:
         a7:2c:25:ab:45:7f:40:67:08:f9:bd:29:57:0e:2d:cf:d3:08:
         29:33:0c:c0:3c:2a:7d:45:71:2d:bf:cf:a0:d6:7f:8c:72:ad:
         36:58:b6:9b:05:3c:45:0e:fe:d8:7c:01:0f:b8:08:90:5d:ff:
         7f:39:1d:04:4f:58:d1:ed:43:01:87:6a:a5:5a:42:9c:54:0e:
         9f:61:7b:4c:20:f7:23:e9:3b:aa:65:42:b9:b6:35:02:6a:cf:
         b0:20:71:2b:b0:f8:98:9a:ea:af:6f:c2:54:1b:75:56:17:0a:
         5e:cf:cb:ca:c3:05:b0:bc:73:9a:5b:a9:8e:a8:4b:8e:a5:14:
         2c:5a:50:39:4e:12:ea:e9:81:7c:39:10:52:05:6c:8c:5d:d9:
         23:dd:17:77:1d:2d:35:e5:5e:cd:da:87:d7:0d:93:49:4a:a5:
         3a:41:b9:c1:19:2a:de:97:38:32:a9:6f:22:c3:4c:14:96:f1:
         8b:bc:c5:0d:5f:c4:a6:19:d4:de:1e:9d:e5:8e:1f:e8:43:9c:
         02:58:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:52 2024 by rpki-client on console-fra.rpki-client.org