Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232332e302f32342d3234203d3e20323638333833.roa
File:                     34352e3233392e3232332e302f32342d3234203d3e20323638333833.roa (raw, json)
Hash identifier:          niHXqan3HwQrFxvjwsAwg6fMvKWQxV8UhqEjXmKxmKg=
Subject key identifier:   91:35:33:FE:1C:45:D3:91:65:2F:BE:C5:04:F7:79:1E:08:71:0E:F5
Certificate issuer:       /CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
Certificate serial:       441D5A4618267B11A15DD76252A94FC114CFD02A
Authority key identifier: FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232332e302f32342d3234203d3e20323638333833.roa
Signing time:             Thu 25 Jul 2024 12:31:19 +0000
ROA not before:           Thu 25 Jul 2024 12:26:19 +0000
ROA not after:            Thu 24 Jul 2025 12:31:19 +0000
asID:                     268383
IP address blocks:        45.239.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl
                          rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1d:5a:46:18:26:7b:11:a1:5d:d7:62:52:a9:4f:c1:14:cf:d0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
        Validity
            Not Before: Jul 25 12:26:19 2024 GMT
            Not After : Jul 24 12:31:19 2025 GMT
        Subject: CN=913533FE1C45D391652FBEC504F7791E08710EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:1c:88:dd:da:6c:e0:36:96:1a:d3:44:a6:
                    de:c3:94:34:bf:36:e2:40:5d:65:7d:65:35:e0:df:
                    53:9f:fb:44:bd:44:19:ec:94:39:2f:80:78:cc:c5:
                    4c:bd:a2:94:19:f9:38:46:4d:8d:dd:99:86:e0:78:
                    e8:7a:1c:99:50:c2:09:0d:16:90:1a:57:b1:6b:1d:
                    c2:69:54:44:28:83:fc:17:bf:38:83:54:b5:5d:44:
                    c8:7d:f3:14:04:ca:04:17:fb:a4:bd:bb:86:4d:3d:
                    59:8c:0c:6c:7d:c5:93:2d:d3:44:75:04:ba:c2:00:
                    82:56:de:3a:7d:72:bf:0a:c7:1f:60:04:2f:7a:60:
                    5f:50:44:b5:88:17:2a:67:e3:a7:25:57:06:af:99:
                    c5:b2:eb:0a:27:a3:6c:f7:f3:54:2f:5c:d2:3f:ab:
                    40:db:a5:f8:73:98:e1:e3:48:e6:17:5d:f2:16:2d:
                    71:46:7b:25:cb:1f:a7:b4:6a:db:46:3e:9b:f9:27:
                    55:6d:72:ae:73:07:27:cf:b5:0b:0e:38:97:9e:85:
                    9a:07:90:be:8b:8c:54:2c:68:e3:7b:91:de:8b:ab:
                    f1:72:16:a8:2f:46:c9:2d:c1:39:1f:98:1c:6d:20:
                    19:0f:7c:e0:bf:f6:48:f4:cd:45:fa:ca:61:44:11:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:35:33:FE:1C:45:D3:91:65:2F:BE:C5:04:F7:79:1E:08:71:0E:F5
            X509v3 Authority Key Identifier:
                keyid:FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/34352e3233392e3232332e302f32342d3234203d3e20323638333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:f5:14:95:c2:cf:9d:7b:82:82:b5:35:9a:88:30:e2:8b:
         8b:f7:36:73:72:07:ab:70:90:4c:0b:e0:fb:18:18:c3:1a:a1:
         e8:51:15:e3:61:0e:f2:b4:61:0f:e4:c6:0a:02:25:7d:f9:fa:
         45:68:30:5b:91:8d:f3:7c:02:ae:02:56:f6:e1:20:40:73:51:
         a8:79:fa:f8:12:87:4b:16:35:fc:00:01:f3:e2:5f:be:96:a6:
         c3:ec:d8:4a:02:8c:4f:b4:15:86:4c:05:19:cf:b2:ab:f9:76:
         89:8a:75:f6:98:56:b4:7d:e8:64:7e:b1:88:4b:f1:c3:b6:4a:
         37:95:92:31:7f:0e:5e:30:e5:ce:df:7a:46:93:a8:d2:53:5d:
         bd:ec:9a:08:10:e5:20:cd:b5:f3:d6:7b:85:c6:d9:96:ee:4b:
         39:d0:ab:80:50:6c:90:6d:c1:1c:e7:fb:e4:0b:c1:d1:df:a0:
         ff:e8:14:88:84:15:9d:6f:b1:6f:ba:e6:42:b8:fa:5d:49:61:
         b2:43:c5:57:61:58:04:68:f0:04:6d:d7:1d:01:9c:4b:2f:c6:
         49:b8:59:fe:45:f6:89:a6:c3:41:c6:7c:4d:01:1e:30:59:78:
         a7:dd:f7:16:64:43:e2:fc:b6:ec:eb:a5:45:c3:1a:d2:da:44:
         25:c6:b3:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURB1aRhgmexGhXddiUqlPwRTP0CowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGQkM1Njg1NTM0Qzg4MDRGMzU3Qjk0OTYyQ0M5QTVD
OUVCRUVBOTAeFw0yNDA3MjUxMjI2MTlaFw0yNTA3MjQxMjMxMTlaMDMxMTAvBgNV
BAMTKDkxMzUzM0ZFMUM0NUQzOTE2NTJGQkVDNTA0Rjc3OTFFMDg3MTBFRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0RyI3dps4DaWGtNEpt7DlDS/
NuJAXWV9ZTXg31Of+0S9RBnslDkvgHjMxUy9opQZ+ThGTY3dmYbgeOh6HJlQwgkN
FpAaV7FrHcJpVEQog/wXvziDVLVdRMh98xQEygQX+6S9u4ZNPVmMDGx9xZMt00R1
BLrCAIJW3jp9cr8Kxx9gBC96YF9QRLWIFypn46clVwavmcWy6wono2z381QvXNI/
q0DbpfhzmOHjSOYXXfIWLXFGeyXLH6e0attGPpv5J1Vtcq5zByfPtQsOOJeehZoH
kL6LjFQsaON7kd6Lq/FyFqgvRsktwTkfmBxtIBkPfOC/9kj0zUX6ymFEEa0vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkTUz/hxF05FlL77FBPd5HghxDvUwHwYDVR0j
BBgwFoAU//vFaFU0yIBPNXuUlizJpcnr7qkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRLaDlxTmVhSkVkNWdNOW9VTlBYRkVYZ1VFdW5WektrNUQyR215VzQ5
WnovMC9GRkZCQzU2ODU1MzRDODgwNEYzNTdCOTQ5NjJDQzlBNUM5RUJFRUE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRkJDNTY4NTUzNEM4ODA0
RjM1N0I5NDk2MkNDOUE1QzlFQkVFQTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0S2g5cU5lYUpFZDVnTTlvVU5QWEZFWGdVRXVuVnpLazVEMkdteVc0OVp6LzAv
MzQzNTJlMzIzMzM5MmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt798wDQYJKoZIhvcNAQELBQADggEBALEF9RSV
ws+de4KCtTWaiDDii4v3NnNyB6twkEwL4PsYGMMaoehRFeNhDvK0YQ/kxgoCJX35
+kVoMFuRjfN8Aq4CVvbhIEBzUah5+vgSh0sWNfwAAfPiX76WpsPs2EoCjE+0FYZM
BRnPsqv5domKdfaYVrR96GR+sYhL8cO2SjeVkjF/Dl4w5c7fekaTqNJTXb3smggQ
5SDNtfPWe4XG2ZbuSznQq4BQbJBtwRzn++QLwdHfoP/oFIiEFZ1vsW+65kK4+l1J
YbJDxVdhWARo8ARt1x0BnEsvxkm4Wf5F9ommw0HGfE0BHjBZeKfd9xZkQ+L8tuzr
pUXDGtLaRCXGs+Y=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:31 2024 by rpki-client on console-ams.rpki-client.org