Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa
File:                     34352e3137332e33302e302f32332d3233203d3e20323638373839.roa (raw, json)
Hash identifier:          hELpFhkHcNOhdPjPvBLArXornGjxpOonAHxvqB9KOo8=
Subject key identifier:   3C:0F:5C:93:3F:7C:A8:6E:C0:9B:45:B8:E9:A2:33:2B:E5:41:93:F1
Certificate issuer:       /CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
Certificate serial:       538DBEA06B13B79C4279EB85C51D2ED95F328A77
Authority key identifier: C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa
Signing time:             Thu 04 Apr 2024 12:10:53 +0000
ROA not before:           Thu 04 Apr 2024 12:05:53 +0000
ROA not after:            Thu 03 Apr 2025 12:10:53 +0000
asID:                     268789
IP address blocks:        45.173.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl
                          rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8d:be:a0:6b:13:b7:9c:42:79:eb:85:c5:1d:2e:d9:5f:32:8a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
        Validity
            Not Before: Apr  4 12:05:53 2024 GMT
            Not After : Apr  3 12:10:53 2025 GMT
        Subject: CN=3C0F5C933F7CA86EC09B45B8E9A2332BE54193F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:3e:f8:f7:79:28:fe:23:ad:5b:e8:4b:8a:
                    66:d3:b0:c2:89:3e:f9:09:05:fd:ff:6c:a0:ae:c0:
                    57:a7:e8:9d:88:a7:38:f0:2b:ff:57:a9:fd:e6:15:
                    0f:fc:ec:99:37:fd:8e:6a:53:fb:9e:50:78:6e:85:
                    54:3c:14:e3:ce:2f:26:95:c3:dc:d0:c7:d8:e2:50:
                    7f:52:97:a7:4d:19:7f:76:ac:f7:5a:8a:6a:df:c9:
                    9c:7f:6f:fd:6b:43:8a:f0:c6:28:fa:61:37:94:89:
                    44:9c:44:18:5e:8a:89:e6:00:f5:d5:27:f6:8b:e5:
                    15:8d:16:86:cf:1f:20:c8:36:61:1d:e6:c5:bd:bf:
                    0a:1c:21:ee:b5:13:d6:10:0c:d5:d3:1a:89:27:18:
                    3b:17:11:24:f7:a9:3b:8e:b0:18:af:e3:40:60:ce:
                    c7:6c:aa:2b:8b:e2:43:a2:44:63:1b:6a:27:2c:8f:
                    94:39:ef:07:9c:bd:5a:a7:0a:cb:e8:8a:dd:7f:7d:
                    07:a0:e8:1f:51:51:aa:40:19:7b:f0:8c:d4:b5:96:
                    6d:14:38:a9:bf:19:e1:68:25:69:ce:b2:61:74:cb:
                    71:84:77:46:90:67:d5:ea:78:f9:30:e5:e2:65:71:
                    1f:ee:30:9c:cd:9e:19:d5:4a:64:09:76:91:f5:3b:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0F:5C:93:3F:7C:A8:6E:C0:9B:45:B8:E9:A2:33:2B:E5:41:93:F1
            X509v3 Authority Key Identifier:
                keyid:C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:7f:d4:7a:26:e5:3a:11:e3:c8:d4:a6:b8:71:6f:e2:1c:
         6d:bf:55:2b:58:7a:05:6f:81:1c:60:bb:90:fd:57:07:57:ed:
         42:5f:5d:08:ee:63:3d:32:f1:98:d2:86:6e:ad:14:a7:32:d3:
         f4:72:ba:51:e9:75:ae:4a:2b:9f:0a:af:20:ca:d6:53:e1:13:
         03:42:9e:08:a4:97:d9:e6:01:27:b1:47:91:97:b3:ce:9b:65:
         6e:53:1c:da:b5:65:53:7c:20:70:71:26:4a:62:f6:3d:c4:9d:
         10:e9:be:4f:3d:96:8d:3e:c9:16:e0:91:e3:f5:22:72:55:50:
         3e:28:eb:64:84:f1:71:96:33:6c:81:dd:22:0a:05:5f:41:e6:
         f2:67:9f:97:03:fb:04:91:12:4a:2e:67:e5:18:0e:68:53:6a:
         3a:e7:51:6d:45:92:47:3b:62:62:52:93:da:07:b4:3a:66:4d:
         05:25:d8:74:84:a6:ab:57:c5:71:8e:b7:df:b7:67:3d:fd:14:
         6d:51:6d:ef:a8:46:cc:52:8d:59:e4:29:54:5b:e0:ab:41:ed:
         50:5f:eb:6d:d5:08:9c:a3:71:53:30:91:3c:0e:23:a3:19:fc:
         8b:e2:8c:1c:a7:c5:04:c0:87:24:b4:d7:ef:ee:45:27:07:20:
         8a:3b:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org