Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa
File:                     34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa (raw, json)
Hash identifier:          s1+ZMvk5rzJS+vF3ZwG9fnS+ClbUfnQTUc4/b4GnywQ=
Subject key identifier:   69:2B:FD:46:F0:54:5A:3F:60:BE:7F:2D:9D:AE:A3:C7:68:6A:27:CC
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       650BEEFCF76E79A29A00AAB2E074CA3BED70A9CE
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa
Signing time:             Thu 04 Apr 2024 07:57:02 +0000
ROA not before:           Thu 04 Apr 2024 07:52:02 +0000
ROA not after:            Thu 03 Apr 2025 07:57:02 +0000
asID:                     267218
IP address blocks:        45.231.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0b:ee:fc:f7:6e:79:a2:9a:00:aa:b2:e0:74:ca:3b:ed:70:a9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Apr  4 07:52:02 2024 GMT
            Not After : Apr  3 07:57:02 2025 GMT
        Subject: CN=692BFD46F0545A3F60BE7F2D9DAEA3C7686A27CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:06:2c:6c:2f:1c:dc:f2:85:ab:70:3d:6a:
                    a1:bb:7e:9e:bb:b7:ae:19:09:c7:bf:54:94:36:1f:
                    31:58:49:16:0f:58:23:7a:13:05:66:94:be:be:5c:
                    ff:b4:d3:e0:56:ac:b3:d1:9c:d6:7f:b6:4d:f0:3d:
                    9f:7b:74:53:b9:34:35:6f:d7:a2:5d:a1:e7:d6:5c:
                    4a:10:ef:04:04:05:d8:be:35:47:da:77:2e:34:e8:
                    4a:ba:d3:92:b8:79:22:86:6f:e0:fb:5a:d9:f7:ad:
                    ad:3b:06:4d:d1:2b:83:3c:ee:51:ef:54:a9:66:7a:
                    22:02:06:15:5a:26:f5:61:18:22:08:27:61:ea:4e:
                    b0:2b:27:16:2f:0b:f1:0e:8f:c5:44:e6:b6:a7:32:
                    c1:65:26:14:68:a6:16:ba:f7:dd:3b:74:64:cf:02:
                    97:82:60:35:57:a2:33:60:31:74:71:c8:07:d8:84:
                    95:ce:34:8b:1a:5b:63:13:19:c1:d4:1a:24:d4:b8:
                    ba:64:58:5f:b5:50:0d:be:9e:ae:3f:84:0b:ca:f0:
                    f8:dc:0a:4e:08:42:3a:01:70:ff:5a:4e:0b:6a:c4:
                    91:9a:e6:24:4b:34:1b:22:c7:20:b2:1e:df:a4:2a:
                    d6:be:ea:0d:df:70:17:31:0f:94:57:b6:3d:72:29:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2B:FD:46:F0:54:5A:3F:60:BE:7F:2D:9D:AE:A3:C7:68:6A:27:CC
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:29:b3:c3:66:03:dd:5f:4e:8e:00:70:88:03:c1:80:0a:bc:
         9c:eb:e0:94:8c:1b:20:cd:e5:4a:39:c2:ba:ed:b2:3d:c6:ab:
         c1:51:18:0c:b6:20:8c:65:eb:26:6f:5f:94:e4:6e:54:ee:28:
         90:82:44:d5:a6:fb:2b:de:8a:14:85:b0:70:d5:a7:8b:01:f1:
         f9:1b:b3:7e:b2:79:3a:e2:d1:0c:f7:18:c1:05:a5:b6:90:63:
         15:a3:ca:f0:05:86:ec:e6:dc:27:e0:b9:9a:a1:ac:5d:32:71:
         52:12:99:2d:33:68:e6:0e:2e:43:09:02:74:8c:3a:9d:10:b1:
         93:b6:26:f0:91:2a:46:65:e5:95:9f:3d:2a:5f:f0:67:f0:e1:
         1d:2e:7f:90:43:fb:20:f0:3a:2d:f3:ae:6d:25:56:2d:a5:c1:
         9d:37:b0:5a:0e:c3:46:da:ce:ae:4b:b2:45:fe:58:23:9f:b6:
         cd:f0:07:b6:9b:67:88:a2:96:d3:d4:ee:db:1c:6c:9e:1f:3c:
         bf:64:0c:db:60:c4:47:85:0e:7f:c4:af:e1:c3:b2:ac:58:d9:
         f7:74:17:b8:fb:64:df:04:ca:94:9f:c4:18:19:14:91:58:db:
         3f:3e:98:2c:e2:e0:89:5a:2e:54:3b:8c:60:05:b0:0b:98:17:
         d8:55:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org