Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130322e302f32342d3234203d3e20323636313831.roa
File:                     34352e362e3130322e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          iUkrHMqOM5WgJ5zrTNkMR5Uvu8/PW3IJO8Kzhvq8x4c=
Subject key identifier:   F9:6D:46:A0:6D:57:A2:AF:4E:7E:9D:BC:90:07:44:E1:BF:F5:82:AA
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       2D097D302DCEE0F304F22005FCC6C35BF50E1928
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130322e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:31 +0000
ROA not before:           Fri 19 Jul 2024 16:54:31 +0000
ROA not after:            Fri 18 Jul 2025 16:59:31 +0000
asID:                     266181
IP address blocks:        45.6.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:09:7d:30:2d:ce:e0:f3:04:f2:20:05:fc:c6:c3:5b:f5:0e:19:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:31 2024 GMT
            Not After : Jul 18 16:59:31 2025 GMT
        Subject: CN=F96D46A06D57A2AF4E7E9DBC900744E1BFF582AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:b2:35:80:86:8e:66:75:4e:c8:3f:ff:d2:
                    b3:d4:31:34:86:20:cf:39:54:cb:fa:9a:25:c3:a2:
                    45:17:bf:c0:20:b2:17:78:a9:74:b4:e6:fb:51:b3:
                    03:70:ec:ab:d4:50:b4:e6:f1:26:5d:49:65:e1:45:
                    c0:13:7c:38:f0:88:23:27:c7:53:3d:00:1c:6f:b3:
                    cd:1c:e5:6f:f3:b6:c4:ca:4d:10:19:cd:a7:ad:47:
                    cb:2c:59:13:81:61:19:ef:08:04:fd:56:db:8a:51:
                    5e:6e:a4:73:73:79:d5:b5:bc:f8:99:3e:50:d9:b1:
                    21:2b:f8:82:da:a3:e5:9a:2d:2e:7f:c4:2d:48:79:
                    75:4c:b1:60:61:78:1a:49:fb:f4:42:41:b0:32:a2:
                    66:dc:9e:b9:aa:9f:46:0f:cf:8a:b8:13:84:ba:69:
                    10:31:21:90:d6:b6:2c:38:92:50:32:6b:63:e1:49:
                    da:0d:db:25:ef:8b:b7:31:df:34:63:9c:0c:56:e6:
                    d2:43:6f:e5:9f:ae:47:d5:1e:a9:dd:95:94:58:98:
                    ac:f1:76:06:49:04:4d:a8:34:1d:fa:2d:1c:1b:ca:
                    67:eb:10:57:96:3e:56:fc:c9:90:c7:4e:29:1b:fe:
                    76:cf:8f:e8:6c:76:74:58:67:23:5d:8b:f8:10:8a:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6D:46:A0:6D:57:A2:AF:4E:7E:9D:BC:90:07:44:E1:BF:F5:82:AA
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130322e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:b5:78:1c:83:f4:dd:9e:4f:1c:eb:79:c0:9c:88:8d:7e:
         c4:cf:42:f3:a6:40:90:b8:fa:fe:8f:28:d6:1a:8e:fa:18:8d:
         7a:ea:12:13:72:ad:d4:9d:e8:e2:ff:28:16:82:77:96:57:2e:
         9d:11:f9:be:90:2a:d8:58:9e:d7:6a:d7:14:1e:c0:f5:83:39:
         af:05:9b:9a:08:3c:d7:ae:17:af:4e:02:9b:0c:ed:96:87:b0:
         57:a6:ea:d9:ae:f8:32:44:8d:02:db:da:ad:8e:41:bf:7b:45:
         fd:7d:03:ea:44:c4:8d:80:ee:bb:7a:85:90:8d:fa:6d:54:6d:
         74:1a:71:9c:d6:58:04:db:26:f6:7f:cf:ce:45:e7:bc:06:49:
         20:4d:3a:54:43:a5:d8:0a:45:6d:6f:4b:b4:94:5e:7a:96:44:
         ff:57:92:cc:f6:26:1d:68:89:d9:a2:18:54:75:bc:0d:e0:7b:
         8b:ca:7c:76:73:cb:cc:9e:f4:77:10:dd:46:6f:87:07:a3:e2:
         ad:5a:82:b5:ed:cd:47:a0:2a:2f:8e:ae:db:4a:90:c9:ab:26:
         ff:6e:9e:32:08:bd:30:30:38:db:fe:58:64:28:e1:34:59:2c:
         47:9a:ef:66:ec:f2:ed:c4:b9:e7:2d:3a:fe:f2:f9:67:98:f9:
         6b:50:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org