Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/34352e3136332e33322e302f32322d3332203d3e20323638353934.roa
File:                     34352e3136332e33322e302f32322d3332203d3e20323638353934.roa (raw, json)
Hash identifier:          QuAY0AjOJSNdJkQA/cyddad4J9OkhnFYHzyYN0i/0AU=
Subject key identifier:   DB:33:1A:8C:6A:BD:8C:DE:EE:F8:C7:6E:2B:E0:7E:22:9C:B2:82:31
Certificate issuer:       /CN=FF748D018F29A13A92FABAAC30F3690B3B43CCA1
Certificate serial:       4CF97E8A1C8137B02E41DC5020AB25199AFDABA3
Authority key identifier: FF:74:8D:01:8F:29:A1:3A:92:FA:BA:AC:30:F3:69:0B:3B:43:CC:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/34352e3136332e33322e302f32322d3332203d3e20323638353934.roa
Signing time:             Thu 19 Sep 2024 00:54:45 +0000
ROA not before:           Thu 19 Sep 2024 00:49:45 +0000
ROA not after:            Thu 18 Sep 2025 00:54:45 +0000
asID:                     268594
IP address blocks:        45.163.32.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.crl
                          rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:7e:8a:1c:81:37:b0:2e:41:dc:50:20:ab:25:19:9a:fd:ab:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF748D018F29A13A92FABAAC30F3690B3B43CCA1
        Validity
            Not Before: Sep 19 00:49:45 2024 GMT
            Not After : Sep 18 00:54:45 2025 GMT
        Subject: CN=DB331A8C6ABD8CDEEEF8C76E2BE07E229CB28231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:b6:d5:47:63:a8:2b:90:45:78:82:ad:63:
                    6f:fb:74:44:c9:18:06:53:9f:4d:d4:67:d4:3e:dc:
                    45:f3:ef:49:e4:23:fe:d2:3d:46:bf:db:78:fa:23:
                    9a:4a:e2:25:6a:06:91:3c:8a:9a:60:19:3e:15:95:
                    9e:43:a5:38:c6:cd:9e:6a:39:2f:12:99:b5:fd:0d:
                    f9:67:18:f6:5d:38:fc:60:32:50:f0:0d:41:67:69:
                    88:8d:29:3a:38:70:62:40:db:ce:9b:3e:74:6f:1c:
                    1a:41:1d:6b:4f:f0:44:bf:19:38:53:01:44:95:0c:
                    6a:db:37:d2:08:59:59:ff:53:df:ed:a4:32:06:fd:
                    9c:25:61:af:7a:58:66:5b:be:ca:90:3f:bf:c0:6e:
                    53:d6:fb:25:cb:ad:23:d7:1f:29:2d:3e:5d:23:03:
                    5c:d6:33:bb:29:e2:0c:95:d3:bd:ed:15:e5:fb:18:
                    d1:10:ae:ce:58:e6:2b:f8:23:f4:ed:82:95:6c:dd:
                    83:7a:c7:fc:d1:0d:8a:f6:cf:3a:d8:e9:d0:21:d2:
                    97:45:1a:4f:f7:fd:e1:44:2d:74:98:27:cc:c7:b9:
                    0e:00:e7:65:32:9e:49:05:70:47:56:07:62:7e:96:
                    84:61:67:90:03:31:8b:69:e1:d4:09:58:b3:c5:b9:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:33:1A:8C:6A:BD:8C:DE:EE:F8:C7:6E:2B:E0:7E:22:9C:B2:82:31
            X509v3 Authority Key Identifier:
                keyid:FF:74:8D:01:8F:29:A1:3A:92:FA:BA:AC:30:F3:69:0B:3B:43:CC:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/34352e3136332e33322e302f32322d3332203d3e20323638353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:7b:73:62:9d:29:99:fd:89:07:97:8d:64:a2:9e:0e:62:
         b7:0c:3b:cd:5e:2d:eb:2c:43:39:43:16:22:c8:96:28:8c:96:
         78:ac:68:8c:f6:77:1c:bd:15:79:5f:eb:e8:ef:c5:0b:7c:66:
         4e:12:ad:61:12:fc:c3:35:ad:ec:1f:95:f3:15:77:2d:33:07:
         be:95:fa:51:d0:10:11:98:7d:ce:ca:a3:1d:2d:32:f0:aa:cf:
         64:71:e6:b8:c7:26:0f:03:7b:76:73:11:1e:8f:4c:77:93:1a:
         39:91:a7:3a:23:a7:6c:0f:46:86:12:18:27:7b:33:f6:a5:e0:
         a4:fc:28:1c:8f:3a:2b:5e:85:4a:3e:dc:b6:19:bd:eb:3d:85:
         e0:af:93:79:ad:e0:e0:3f:90:55:e3:26:91:4c:25:4c:8f:08:
         44:92:25:f8:2d:37:92:37:72:fb:ca:05:8c:cc:9e:5f:e0:8a:
         30:52:c8:ec:08:4d:12:a4:77:44:e0:08:2c:7b:c6:d2:17:d8:
         0f:b9:d4:0e:ad:f1:b2:1a:c5:b1:cc:2d:c0:0f:d5:5c:e9:2a:
         2a:c0:3c:7f:bb:65:3c:05:2b:54:ea:25:7a:c0:f1:b0:92:63:
         58:6b:b9:78:75:86:07:14:a2:91:1f:b0:ff:79:ab:14:39:2e:
         48:e8:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:06 2024 by rpki-client on console-ams.rpki-client.org