Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
File:                     34352e3136352e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          YCNDWl71qMUennF+R2yWLgbp7/+BolFBvSCwnC27GGA=
Subject key identifier:   7A:2E:DB:BB:43:BD:94:73:2B:2A:6F:DE:69:DB:FD:AE:12:6B:F0:D4
Certificate issuer:       /CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
Certificate serial:       71D7E221B8423D68571B7ECEE8474A3DBAD7A33B
Authority key identifier: 6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
Signing time:             Wed 10 Apr 2024 02:18:03 +0000
ROA not before:           Wed 10 Apr 2024 02:13:03 +0000
ROA not after:            Wed 09 Apr 2025 02:18:03 +0000
asID:                     263665
IP address blocks:        45.165.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d7:e2:21:b8:42:3d:68:57:1b:7e:ce:e8:47:4a:3d:ba:d7:a3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
        Validity
            Not Before: Apr 10 02:13:03 2024 GMT
            Not After : Apr  9 02:18:03 2025 GMT
        Subject: CN=7A2EDBBB43BD94732B2A6FDE69DBFDAE126BF0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:86:d7:77:e7:81:b2:c0:20:e6:b1:c3:22:
                    4a:27:f9:f9:68:cf:02:51:b6:98:98:46:8e:5b:2a:
                    42:0b:15:b6:82:81:f0:c9:54:8e:fc:3f:f7:29:d9:
                    41:66:d4:9d:ba:74:1f:43:22:a0:05:40:11:8e:81:
                    0d:fb:5f:7b:e1:38:bb:b9:4e:48:ee:d5:30:c1:40:
                    bb:56:32:c4:6c:cc:17:4a:7f:09:d7:7d:40:15:50:
                    14:83:31:84:d5:48:a5:d8:2b:72:fd:01:88:a8:86:
                    ff:60:8c:9a:5e:9c:0a:26:d7:fb:94:9d:10:1e:16:
                    40:3a:7e:66:a2:31:a7:b5:50:b8:ee:ca:67:6b:d8:
                    71:7b:34:4b:3b:51:ac:c9:86:da:2b:e7:ad:52:0d:
                    03:1c:5c:65:24:d2:31:71:56:37:92:9c:20:08:74:
                    f0:2a:8b:c2:67:ea:27:63:35:a3:a4:3e:04:19:41:
                    d5:d9:56:a9:01:a6:e0:d0:e6:ea:13:61:e7:ce:10:
                    a7:f8:b5:b5:09:37:04:5c:b3:70:2c:56:c6:08:6c:
                    aa:e8:b3:f2:bd:54:4b:59:0e:de:31:63:14:ff:6f:
                    a6:3d:d4:98:c4:91:70:c6:03:fc:c8:f3:73:95:b9:
                    8c:35:cc:28:21:6c:f0:e5:40:1e:42:72:0c:19:45:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2E:DB:BB:43:BD:94:73:2B:2A:6F:DE:69:DB:FD:AE:12:6B:F0:D4
            X509v3 Authority Key Identifier:
                keyid:6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:e7:a8:86:4d:02:65:b2:8d:54:4f:45:c4:d4:58:01:23:
         6a:31:85:c9:1e:9e:30:27:c9:c6:0f:88:af:9c:a6:96:7c:09:
         6b:7f:81:a0:06:5c:72:44:9c:65:69:8b:e5:82:9f:ee:54:98:
         8c:a7:1b:21:50:4f:bf:08:ff:c0:d3:10:b3:b7:a7:e4:09:b9:
         75:38:a1:4a:58:8d:0f:9b:2c:cb:82:72:99:4d:57:48:93:ca:
         a7:89:bd:21:e3:b4:ff:eb:97:9f:60:be:5a:1a:26:4c:c1:06:
         34:92:07:23:f4:4f:50:1b:c9:a6:80:4e:0a:2b:2e:97:bc:20:
         fa:25:77:45:32:ec:0e:9a:fd:60:69:22:96:6b:16:5a:0e:5c:
         06:93:9c:e8:5d:e2:91:b7:f2:62:9a:3f:85:82:ef:54:64:40:
         62:f1:55:b1:9b:23:04:c1:19:d6:c0:94:99:09:dd:15:42:21:
         5e:ec:1b:80:7f:4b:d0:27:e2:ff:3c:77:49:64:0a:7b:42:16:
         85:5b:5e:83:b1:86:d0:5b:c4:a9:e0:98:81:06:88:85:11:48:
         44:17:62:fd:4b:e1:e5:fc:15:15:04:86:f8:f8:8f:89:7c:8a:
         7c:23:35:f7:aa:f0:b1:de:a5:e6:2e:60:f5:a0:da:b7:6b:7b:
         f3:69:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:40 2024 by rpki-client on console-ams.rpki-client.org