Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232302e302f32332d3233203d3e20323638333833.roa
File:                     34352e3233392e3232302e302f32332d3233203d3e20323638333833.roa (raw, json)
Hash identifier:          EMOJDqb5P0h52TtxiX7GiVHKiVLVb9F4zZDGSmezVsc=
Subject key identifier:   01:86:C3:AD:62:87:4C:A5:2B:90:E4:AB:05:21:65:AD:2B:45:17:99
Certificate issuer:       /CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
Certificate serial:       1C6C20309378F2F65903593D230E818DFD0825FD
Authority key identifier: FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232302e302f32332d3233203d3e20323638333833.roa
Signing time:             Thu 25 Jul 2024 12:31:19 +0000
ROA not before:           Thu 25 Jul 2024 12:26:19 +0000
ROA not after:            Thu 24 Jul 2025 12:31:19 +0000
asID:                     268383
IP address blocks:        45.239.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl
                          rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6c:20:30:93:78:f2:f6:59:03:59:3d:23:0e:81:8d:fd:08:25:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
        Validity
            Not Before: Jul 25 12:26:19 2024 GMT
            Not After : Jul 24 12:31:19 2025 GMT
        Subject: CN=0186C3AD62874CA52B90E4AB052165AD2B451799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:8a:84:6e:0d:21:d7:62:0a:bf:33:66:8b:
                    f1:1e:bf:e1:2f:a4:be:b7:95:1d:4d:54:47:c9:55:
                    c1:ba:11:11:e0:5d:30:3c:c7:ea:80:fe:a9:1d:0e:
                    e4:71:df:06:23:29:24:c0:70:16:82:d9:c0:8f:2d:
                    aa:ec:69:e6:01:d9:49:07:43:71:a2:7f:6f:9f:b6:
                    d3:9a:12:3f:13:a2:06:27:34:67:e2:98:70:27:74:
                    72:8e:b9:07:0e:5c:ee:4d:11:99:2e:80:1a:43:f5:
                    0f:b0:20:b3:71:80:e8:95:80:58:52:cd:a7:e7:68:
                    91:09:62:f2:0b:ab:a7:5c:3a:f7:a9:de:85:ef:cd:
                    1a:18:77:b4:1b:7d:41:e0:6c:2c:0a:4b:cb:e5:89:
                    50:15:4c:74:f2:9c:57:b6:94:be:05:42:3c:6d:7a:
                    56:42:af:7a:b1:ac:96:12:42:c6:e1:19:d2:80:7b:
                    d5:76:ff:04:44:17:07:be:81:98:9c:6c:80:21:ad:
                    70:c7:ad:8b:ec:e4:4a:37:51:46:22:0c:ba:3f:65:
                    36:43:6e:14:52:0c:19:38:14:9f:3c:fe:4a:2a:8a:
                    bd:64:59:b5:3e:58:9f:23:ee:36:26:b4:c1:e9:98:
                    4b:1b:b2:29:88:19:5b:ad:4b:2c:d2:35:2f:aa:22:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:86:C3:AD:62:87:4C:A5:2B:90:E4:AB:05:21:65:AD:2B:45:17:99
            X509v3 Authority Key Identifier:
                keyid:FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232302e302f32332d3233203d3e20323638333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:27:01:56:1f:cb:3f:a9:23:48:94:64:7b:81:b2:4f:18:f8:
         ca:08:96:1e:15:d1:81:da:1c:9f:36:62:42:d9:85:4f:6c:54:
         14:47:85:7e:2d:b9:0f:ce:f0:09:8d:d7:55:08:8d:5c:10:ad:
         dc:17:b2:68:71:8f:df:35:5e:42:38:97:51:78:3a:be:3c:87:
         17:37:0e:00:6a:06:22:32:96:38:2f:58:8f:9f:c0:b9:cc:3e:
         dd:e7:a5:f6:3e:fb:62:d1:9a:47:d0:db:a7:61:1c:20:ac:5e:
         13:14:ec:40:05:08:6f:ac:d9:c9:0a:9c:92:be:a6:fc:00:04:
         27:dd:a4:3b:24:80:90:2c:5b:0d:64:5e:cd:95:17:d8:9e:ce:
         b4:44:ef:ef:0a:bf:86:59:de:aa:04:f2:2c:a5:88:68:c1:78:
         ca:dc:8e:56:22:7d:56:85:2e:7d:3f:9a:06:d2:4d:f6:de:51:
         6f:78:7c:39:63:a6:7a:3e:4e:7f:dc:2d:aa:87:29:fd:09:17:
         82:d2:8f:39:ac:b9:0c:ac:b7:0f:09:9f:39:fc:d9:3b:88:20:
         95:7c:14:f4:cc:44:06:35:b8:e5:7f:e7:28:2c:85:d3:87:b7:
         fe:c4:93:1b:77:8c:ee:34:2b:9b:ba:08:bf:70:5a:f0:6a:f6:
         78:b2:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:53 2024 by rpki-client on console-ams.rpki-client.org