Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/34352e372e36382e302f32322d3234203d3e20323636363130.roa
File:                     34352e372e36382e302f32322d3234203d3e20323636363130.roa (raw, json)
Hash identifier:          SZ+sJ2GJBmQnswhCt5qHkmz2ermsgZjMp3HhACRwOZ0=
Subject key identifier:   2B:B3:F5:D0:06:5B:2F:A7:79:83:6A:12:4B:94:3B:B9:1B:33:6A:BC
Certificate issuer:       /CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
Certificate serial:       0F5D3BC780F65C586F292820A72E700ECDC1EC63
Authority key identifier: 6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/34352e372e36382e302f32322d3234203d3e20323636363130.roa
Signing time:             Thu 04 Apr 2024 08:59:10 +0000
ROA not before:           Thu 04 Apr 2024 08:54:10 +0000
ROA not after:            Thu 03 Apr 2025 08:59:10 +0000
asID:                     266610
IP address blocks:        45.7.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5d:3b:c7:80:f6:5c:58:6f:29:28:20:a7:2e:70:0e:cd:c1:ec:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
        Validity
            Not Before: Apr  4 08:54:10 2024 GMT
            Not After : Apr  3 08:59:10 2025 GMT
        Subject: CN=2BB3F5D0065B2FA779836A124B943BB91B336ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:70:a6:1b:77:78:19:9a:30:96:df:37:69:
                    ac:40:07:8b:1a:11:9c:ec:65:31:02:73:21:66:1c:
                    97:86:52:b4:d7:47:6f:13:b5:9d:d5:b1:a6:44:c4:
                    ea:75:68:e0:28:56:d9:66:de:d0:70:49:72:e5:12:
                    26:e6:15:89:cd:e4:69:a5:4c:b5:87:2c:65:a3:72:
                    b6:ff:3c:44:74:5f:f6:02:9f:e1:82:2c:88:3d:5f:
                    4f:2c:7d:6e:fd:1e:f4:a3:66:be:96:b1:e3:01:6d:
                    26:82:5f:a5:39:5c:b6:9e:01:91:be:75:b5:96:54:
                    b0:75:54:a9:2a:c5:27:96:68:03:e6:b9:b9:ec:ed:
                    99:91:7b:a8:eb:56:3e:0b:dd:4e:1a:11:bf:37:23:
                    ad:6f:6c:cc:66:e9:13:7f:9c:d8:cf:39:02:05:a6:
                    a2:64:71:d1:ea:f4:3f:f2:e3:4b:53:3b:ed:ca:a3:
                    bc:a9:de:07:55:32:22:c0:a3:fb:32:c8:f9:7f:8e:
                    32:d0:40:8b:7f:1b:3d:47:77:da:1f:84:22:80:72:
                    04:ca:e7:42:07:8d:be:fd:c5:da:76:ca:b6:6b:8f:
                    a2:88:8d:ae:b2:09:67:ee:30:96:e4:4a:85:72:15:
                    7c:f8:d1:80:10:6d:ed:31:44:f8:34:f6:84:b9:c1:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B3:F5:D0:06:5B:2F:A7:79:83:6A:12:4B:94:3B:B9:1B:33:6A:BC
            X509v3 Authority Key Identifier:
                keyid:6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/34352e372e36382e302f32322d3234203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:eb:5b:d6:e9:c2:c2:8a:11:2f:c7:d6:c2:80:cc:b6:49:ec:
         f3:b0:bb:fb:78:9e:ac:95:3f:b9:ae:4a:c7:05:91:25:43:13:
         03:1f:1e:6c:ff:5f:69:2b:b1:6a:e7:02:89:e2:e7:6f:4f:e6:
         58:d7:01:e9:55:02:3d:bf:67:84:62:b9:da:63:45:a0:bd:60:
         12:50:3c:ae:1d:10:67:9e:01:af:d9:f1:e9:16:bc:ae:36:06:
         0f:fc:e8:2f:1c:14:c9:c0:58:c3:91:58:2a:c7:9d:54:a8:8b:
         c8:92:09:e9:22:8b:27:7e:66:1b:f3:69:17:1d:41:63:4e:53:
         c4:0f:f5:8f:7f:94:7c:e8:cf:ed:cc:67:17:e1:eb:cc:84:e4:
         94:a4:21:fc:e7:a2:51:c5:02:5c:72:de:1a:b6:f6:52:e9:bd:
         36:9f:6c:36:3b:3e:2f:3a:a9:90:64:ee:31:c4:c6:e4:cf:f7:
         61:83:f4:e0:aa:34:4b:3f:05:4b:96:f7:81:71:8f:82:ff:03:
         74:79:da:a9:bf:31:4b:6d:80:31:3c:45:1d:e9:dc:71:aa:ec:
         a9:00:f3:e1:cf:36:73:58:24:c3:27:b8:04:95:39:71:7e:98:
         da:3a:42:9f:4f:3e:08:26:62:97:a6:72:c5:02:d5:83:93:ee:
         de:95:95:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org