Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa
File:                     34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa (raw, json)
Hash identifier:          oZ6zzgq9Dm/SYNX6KbMpPRbwcGbrDx7YjPChw6LulEs=
Subject key identifier:   04:3B:3E:29:5C:46:1D:60:3D:FA:36:0B:A7:80:89:48:09:39:35:BC
Certificate issuer:       /CN=6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96
Certificate serial:       2E58559ED045F5279A9394C39D4A076A624128B9
Authority key identifier: 6C:7E:69:D6:E3:D5:39:A7:E5:D0:2A:6A:A4:62:ED:A7:7A:75:CE:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa
Signing time:             Tue 30 Jul 2024 19:18:07 +0000
ROA not before:           Tue 30 Jul 2024 19:13:07 +0000
ROA not after:            Tue 29 Jul 2025 19:18:07 +0000
asID:                     268385
IP address blocks:        45.239.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.crl
                          rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:58:55:9e:d0:45:f5:27:9a:93:94:c3:9d:4a:07:6a:62:41:28:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96
        Validity
            Not Before: Jul 30 19:13:07 2024 GMT
            Not After : Jul 29 19:18:07 2025 GMT
        Subject: CN=043B3E295C461D603DFA360BA7808948093935BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:b3:c1:46:c2:b2:07:d8:89:a2:47:71:7f:
                    50:fa:e5:47:96:ef:46:92:20:6a:1a:a6:86:c8:d3:
                    74:e2:7f:95:17:d2:c5:f4:bb:7f:28:63:db:cc:b8:
                    b0:98:c2:0b:89:91:16:ad:64:d7:3e:a9:4e:22:a2:
                    62:14:d4:19:2c:51:b5:18:d2:93:2e:d3:dd:49:4c:
                    56:a6:cc:2f:7f:3f:e4:0d:07:5d:d2:38:0c:42:d4:
                    3a:ca:3c:42:67:d6:30:5a:b4:c3:c6:17:cc:93:87:
                    fa:0a:a1:a2:3a:29:f3:7b:98:bf:82:7a:11:92:a0:
                    a8:3d:47:02:5d:59:d8:bb:29:95:10:df:b6:96:1e:
                    47:d2:e3:eb:3f:9b:1b:e2:71:f1:e5:2c:17:83:6b:
                    9a:dc:1b:b1:7b:c5:3d:eb:bc:70:be:f1:7d:27:40:
                    54:91:db:b1:6a:3f:34:39:40:e8:50:95:bd:d7:17:
                    be:a5:5b:09:44:f3:d9:7f:71:bc:e5:41:6c:d9:f3:
                    92:5b:9e:fd:94:18:b8:d9:60:80:1e:a0:9c:cb:aa:
                    80:47:e6:ad:e4:1b:11:95:e1:6b:dd:cd:64:cd:5c:
                    cf:52:8f:b1:51:e2:c1:0f:4d:02:2a:91:72:40:90:
                    fd:8a:0f:65:cd:56:89:0b:e0:b2:ca:bb:bf:b5:65:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3B:3E:29:5C:46:1D:60:3D:FA:36:0B:A7:80:89:48:09:39:35:BC
            X509v3 Authority Key Identifier:
                keyid:6C:7E:69:D6:E3:D5:39:A7:E5:D0:2A:6A:A4:62:ED:A7:7A:75:CE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:dd:e8:ce:f6:dd:6c:62:5f:8b:d9:42:6f:b4:32:f9:c5:
         45:ab:c1:39:09:00:ba:9f:9c:35:73:20:79:74:21:62:19:19:
         b1:e9:32:3f:eb:05:64:05:8c:7a:9c:39:d3:59:a7:7b:c5:ac:
         8a:b0:dc:86:5b:94:cf:7a:19:cc:84:59:f7:12:09:f9:0e:d0:
         e8:c7:93:ac:45:d5:d4:9d:30:da:24:00:b7:d9:6f:64:fc:4c:
         91:f3:69:73:1a:a8:5e:ee:0f:8c:df:b7:87:8f:54:f9:e5:46:
         13:b1:47:79:29:a6:e3:62:94:51:c4:44:71:ad:4d:c8:5e:30:
         ae:45:48:b1:98:56:98:98:4a:e8:b4:b1:c5:8e:10:c5:43:5d:
         13:bb:d4:6f:d8:ca:20:10:e4:69:0c:93:ca:49:16:53:8c:1a:
         0b:2c:93:ca:bc:ad:53:2f:96:1d:42:39:54:bc:56:15:a0:0a:
         a5:e3:af:e5:ec:50:63:a6:95:7f:00:46:75:2c:4b:32:2c:94:
         a7:df:7a:b8:23:32:01:86:99:dc:db:0c:39:cc:93:19:aa:7e:
         9b:04:bc:5d:f1:fb:a6:12:14:45:b8:37:5e:54:b7:f0:d7:8c:
         d1:c4:c5:34:09:1c:89:ef:fe:40:b3:93:99:5f:16:2d:75:cd:
         77:79:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:37 2024 by rpki-client on console-fra.rpki-client.org