Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3231302e302f32332d3233203d3e20323636303836.roa
File:                     34352e342e3231302e302f32332d3233203d3e20323636303836.roa (raw, json)
Hash identifier:          40Ie5P7WoIjpnbq/N4Y3ug98w8RflYZ73W9gsbFyk2w=
Subject key identifier:   0D:6F:83:34:33:FC:40:68:73:47:60:3C:56:58:44:3A:E5:86:AF:83
Certificate issuer:       /CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
Certificate serial:       201F8F004CFE54EFA35D95C87F30D72757282AF0
Authority key identifier: 6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3231302e302f32332d3233203d3e20323636303836.roa
Signing time:             Thu 20 Jun 2024 15:43:16 +0000
ROA not before:           Thu 20 Jun 2024 15:38:16 +0000
ROA not after:            Thu 19 Jun 2025 15:43:16 +0000
asID:                     266086
IP address blocks:        45.4.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1f:8f:00:4c:fe:54:ef:a3:5d:95:c8:7f:30:d7:27:57:28:2a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
        Validity
            Not Before: Jun 20 15:38:16 2024 GMT
            Not After : Jun 19 15:43:16 2025 GMT
        Subject: CN=0D6F833433FC40687347603C5658443AE586AF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8f:e5:01:85:7a:da:e2:f9:4d:85:68:e5:4b:
                    90:d9:c9:3a:8b:df:03:37:d8:23:04:53:b8:e8:e0:
                    9f:02:17:3f:9d:4d:8b:d4:a1:89:66:f4:0d:bb:88:
                    cb:13:f9:7d:1e:c7:92:83:7f:49:ac:ee:15:6f:f3:
                    ad:c8:71:45:26:f8:d1:76:fb:61:49:09:1b:4a:0e:
                    74:bd:b3:79:d1:60:90:6a:c8:3e:64:83:e7:d0:56:
                    dc:2d:38:68:6d:1b:6d:19:57:18:63:cc:9c:dc:a2:
                    fd:ad:55:2e:17:35:ee:93:9a:60:38:db:3e:40:c6:
                    98:75:68:4e:81:cd:95:17:df:db:af:f2:af:38:27:
                    8f:f5:d7:1d:87:20:2d:61:38:59:dd:a7:ed:e9:cb:
                    82:21:75:42:e4:8e:27:ff:1b:ab:33:55:55:1f:82:
                    81:8c:ee:dc:f9:63:e3:45:46:2c:77:43:aa:bb:fe:
                    f3:51:50:ab:9c:6d:fb:30:ec:1d:8c:6c:8e:ae:08:
                    57:71:f3:e4:78:77:dc:db:74:74:b6:f0:27:cf:d4:
                    d7:f7:2b:91:43:88:2c:cf:d4:a7:bd:8f:88:29:99:
                    24:fb:47:f6:1c:d3:ce:44:8e:19:f2:ef:29:0b:8b:
                    ea:13:c8:5a:a3:26:6b:9e:8a:0c:1a:39:09:5b:f8:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6F:83:34:33:FC:40:68:73:47:60:3C:56:58:44:3A:E5:86:AF:83
            X509v3 Authority Key Identifier:
                keyid:6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3231302e302f32332d3233203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:6d:67:eb:fc:3c:78:ec:fe:d7:8f:3c:aa:c1:1d:b3:11:
         bc:dd:cf:1c:79:c9:7f:be:05:1c:25:f7:16:0f:91:37:7b:dd:
         ca:39:49:b2:e2:a4:5d:34:65:00:29:3f:4f:0e:36:ee:c9:bb:
         ef:20:a7:c8:d0:06:f9:83:ee:78:bd:7c:29:fe:21:43:44:35:
         20:c3:3e:07:60:51:19:a9:98:c4:c3:a6:78:6e:fa:17:3c:f9:
         be:e5:51:c4:b4:04:66:34:de:9c:a1:d6:55:6a:6f:ea:5a:65:
         f7:04:7f:c3:c6:08:1a:6c:b0:f9:00:52:28:ce:77:5e:f3:d6:
         cb:cc:86:09:b9:c1:13:a3:58:6e:79:9b:ce:f8:9c:e1:ed:f3:
         48:89:ec:9e:a8:81:7c:90:72:09:61:8a:e6:15:52:81:dd:0a:
         b6:be:50:7a:cd:2d:51:bd:62:35:74:f0:7d:03:97:f6:32:1f:
         58:68:b7:76:30:57:ce:01:e8:39:89:b5:98:26:f1:e2:49:af:
         e1:0e:62:3d:e6:59:24:e6:92:2e:d5:55:8f:d6:b1:6b:94:89:
         ad:40:7d:19:2d:ee:e9:c9:be:6a:a7:13:b3:cd:42:83:62:9e:
         99:f6:a1:b8:68:c3:38:b8:8d:ae:86:85:79:79:83:78:60:6c:
         fd:79:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:54 2024 by rpki-client on console-fra.rpki-client.org