Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa
File:                     34352e3136352e32302e302f32322d3232203d3e20323638363532.roa (raw, json)
Hash identifier:          wQhmcM7ylU0gimj+6112yc/u1nEk/AozDyO+aakVvTg=
Subject key identifier:   F7:91:E7:73:9B:B3:50:BB:B4:CC:76:10:AF:BF:08:78:C9:14:2F:B2
Certificate issuer:       /CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
Certificate serial:       337AE79769570B2E74E1DBBE238E2C5BCF644D6B
Authority key identifier: 6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa
Signing time:             Mon 08 Apr 2024 20:11:29 +0000
ROA not before:           Mon 08 Apr 2024 20:06:29 +0000
ROA not after:            Mon 07 Apr 2025 20:11:29 +0000
asID:                     268652
IP address blocks:        45.165.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7a:e7:97:69:57:0b:2e:74:e1:db:be:23:8e:2c:5b:cf:64:4d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
        Validity
            Not Before: Apr  8 20:06:29 2024 GMT
            Not After : Apr  7 20:11:29 2025 GMT
        Subject: CN=F791E7739BB350BBB4CC7610AFBF0878C9142FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a1:57:cb:45:15:94:5e:d4:1d:f7:21:30:dc:
                    26:f9:6c:5c:81:dd:85:6c:18:e8:1e:88:99:da:b7:
                    c5:f9:80:41:5b:44:7e:ac:0a:6a:bd:1b:54:60:50:
                    72:61:91:7b:0c:6d:14:c0:a7:90:4c:61:1e:f6:80:
                    37:f8:68:28:4b:a2:27:30:a7:68:d2:80:ac:ac:b0:
                    90:e8:d0:fb:d6:87:4f:53:38:31:d1:35:b1:0f:1d:
                    6a:c0:e3:57:8a:a3:f2:7f:6a:8f:d8:63:6c:56:a6:
                    83:91:89:90:82:81:24:91:07:b7:c5:70:ee:1e:ab:
                    83:5b:58:48:2f:19:4a:9a:90:8c:fa:98:00:9c:c6:
                    6d:4d:ab:c1:01:49:16:75:8c:d0:9e:e1:ce:88:d7:
                    54:e0:96:c9:cf:2d:6b:b7:ee:be:9c:ee:f3:5c:35:
                    82:db:33:f6:bf:6b:87:f5:37:42:b1:db:6b:c7:04:
                    ee:25:7f:0a:88:27:31:35:f2:4b:0c:31:0b:e2:67:
                    68:03:26:02:72:d0:40:42:2e:9f:23:56:b4:3d:36:
                    d3:86:73:68:9f:82:99:d0:2c:ec:1e:db:1a:7f:f1:
                    04:21:a7:85:62:20:70:fa:87:99:60:96:45:83:dc:
                    e8:94:d4:ae:7b:3a:59:d2:18:e7:5d:24:cb:fc:a7:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:91:E7:73:9B:B3:50:BB:B4:CC:76:10:AF:BF:08:78:C9:14:2F:B2
            X509v3 Authority Key Identifier:
                keyid:6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:12:6a:92:0f:f0:40:6a:f2:af:0d:27:ee:91:20:3d:06:
         62:7d:b9:c1:7b:2d:29:2c:6b:12:4e:f9:7e:17:72:73:af:08:
         f6:2d:12:f8:6c:cc:6e:94:db:2e:62:53:d8:ac:67:db:84:49:
         ed:f0:ea:7c:85:30:d9:ea:3c:d0:fd:66:3b:9a:85:0c:79:9f:
         be:c9:e9:7d:b5:c0:b1:7e:1c:99:68:7a:6a:dd:1b:a0:af:23:
         32:80:91:3a:aa:8e:09:f7:b7:75:37:cf:89:94:18:fb:00:ec:
         5e:53:1b:9e:8b:13:62:8a:bc:b6:38:6a:81:2c:00:75:8c:98:
         6f:2b:3b:6c:37:22:87:e5:2d:cb:34:f9:9d:c3:07:33:ec:5f:
         6d:4b:96:05:3d:09:b6:35:27:f1:b5:9d:da:95:78:6e:75:36:
         7a:89:c4:fa:2d:a7:b0:ed:6d:ec:8f:90:70:0f:46:bd:78:96:
         bf:34:78:49:dd:71:93:02:ca:ff:a8:da:d7:72:f3:46:df:96:
         4a:86:64:3b:2e:68:c6:2f:51:f0:40:ef:11:27:75:85:3b:3b:
         77:4e:d6:c6:4f:cf:9d:b9:9a:1f:ca:55:c8:ed:0a:b9:db:db:
         f4:74:2c:f6:a8:77:ca:db:a5:9c:c1:a1:74:08:9f:8d:c4:4e:
         46:30:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:40 2024 by rpki-client on console-ams.rpki-client.org