Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232322e302f32342d3234203d3e20323638333833.roa
File:                     34352e3233392e3232322e302f32342d3234203d3e20323638333833.roa (raw, json)
Hash identifier:          ZvCRGGlparKns3/zFje/Bab2lJytFqqJyh6luU2VjBg=
Subject key identifier:   FB:04:3F:46:B3:8C:B0:F0:87:CB:96:DF:7E:49:DE:48:93:12:03:9F
Certificate issuer:       /CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
Certificate serial:       2C9703392A14ACCA197B392CB5D542AC2E2A08E8
Authority key identifier: FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232322e302f32342d3234203d3e20323638333833.roa
Signing time:             Thu 25 Jul 2024 12:31:19 +0000
ROA not before:           Thu 25 Jul 2024 12:26:19 +0000
ROA not after:            Thu 24 Jul 2025 12:31:19 +0000
asID:                     268383
IP address blocks:        45.239.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl
                          rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:97:03:39:2a:14:ac:ca:19:7b:39:2c:b5:d5:42:ac:2e:2a:08:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
        Validity
            Not Before: Jul 25 12:26:19 2024 GMT
            Not After : Jul 24 12:31:19 2025 GMT
        Subject: CN=FB043F46B38CB0F087CB96DF7E49DE489312039F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:dd:73:2b:3a:64:a6:6d:cf:09:ef:13:57:
                    c9:de:fc:e3:49:29:f9:50:76:33:20:59:34:38:55:
                    0a:ff:92:00:e0:13:6d:95:74:f8:3d:16:73:68:70:
                    8c:98:56:8e:26:33:ad:8b:b9:b7:27:a7:42:e0:e2:
                    96:cf:9c:9d:a4:10:f4:f6:24:d0:8c:34:49:5d:84:
                    ea:77:cb:97:f1:fe:6b:78:8c:09:35:2c:e5:7f:e1:
                    ed:e6:db:74:23:c1:73:98:2f:ab:2f:ca:ef:a6:7e:
                    32:83:ca:00:f0:16:15:ff:c3:63:60:5f:fc:97:75:
                    8d:bc:4d:ad:fc:55:70:1e:db:4c:7b:ab:eb:b8:8a:
                    2f:73:fd:48:a6:e2:e6:b4:13:7d:10:16:85:25:91:
                    aa:fa:25:7d:02:39:f2:79:f2:a0:19:87:7d:d5:f9:
                    72:a9:23:4b:e4:81:49:63:bd:11:ba:f4:45:ba:74:
                    68:a7:ba:b6:e0:20:8f:10:b4:88:f1:a1:5d:ab:c9:
                    fa:7d:be:f1:d4:1c:5b:cf:c6:c4:f3:ea:59:4d:8f:
                    e3:e7:95:0d:d6:90:89:08:f3:cd:1a:ba:98:0e:9d:
                    9b:f2:ed:7a:b7:80:01:10:e2:c8:d4:b9:34:0f:7c:
                    23:b6:82:39:8c:09:7c:dc:01:0c:54:bb:cd:03:44:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:04:3F:46:B3:8C:B0:F0:87:CB:96:DF:7E:49:DE:48:93:12:03:9F
            X509v3 Authority Key Identifier:
                keyid:FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232322e302f32342d3234203d3e20323638333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:6e:5a:14:10:ba:13:4b:99:ef:c4:0f:68:cd:c1:d7:06:
         6c:a0:23:6e:d4:f8:07:26:06:e2:cd:d0:53:a2:8f:fe:5a:83:
         62:b6:87:d1:cc:0b:8c:9f:d2:a5:ab:f0:42:ab:a1:b4:7b:2e:
         ee:01:f6:a3:7f:4c:f0:9c:85:52:fb:51:08:7b:ce:50:c6:6f:
         de:90:05:b6:8a:73:4c:f4:be:15:d7:e2:7d:7e:75:80:11:fa:
         38:ee:99:ea:dc:a8:31:c2:83:68:81:eb:82:ba:ff:c0:e8:0f:
         75:fd:0c:c7:4e:66:e5:be:3d:89:5c:b3:dc:df:a4:bd:b2:87:
         77:35:0c:6c:24:05:10:73:db:6e:b0:80:1e:1b:0b:38:68:42:
         44:ee:d2:9a:18:3d:7d:2d:f2:b2:0a:88:39:e5:90:6c:af:74:
         ad:8a:d5:39:a7:c4:9a:24:0f:59:ae:72:88:1f:6b:7c:d0:8b:
         64:5e:c8:ee:b2:55:a4:90:c4:a4:85:14:6c:ea:a2:7d:bc:18:
         0f:53:ab:84:d8:28:c5:3f:4f:2f:da:36:55:c0:ba:6b:95:df:
         d4:c1:6d:4e:84:df:dd:62:d5:65:0b:9d:c3:8b:9b:e1:23:89:
         6c:e4:0a:61:6b:1f:d3:a1:ac:8b:80:24:04:1d:07:27:0c:21:
         47:b0:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org