Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130332e302f32342d3234203d3e20323636313831.roa
File:                     34352e362e3130332e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          daUTZouUMd0N3qZ0Rk4EGq/XF1EIzMun6OUtJNz4Cdo=
Subject key identifier:   BB:A9:4A:AD:02:54:02:1B:C7:8C:A1:27:32:77:C3:4C:AE:D3:50:0C
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       36B189B2A022D6F881F30765BB8E8E95453013CE
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130332e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:24 +0000
ROA not before:           Fri 19 Jul 2024 16:54:24 +0000
ROA not after:            Fri 18 Jul 2025 16:59:24 +0000
asID:                     266181
IP address blocks:        45.6.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b1:89:b2:a0:22:d6:f8:81:f3:07:65:bb:8e:8e:95:45:30:13:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:24 2024 GMT
            Not After : Jul 18 16:59:24 2025 GMT
        Subject: CN=BBA94AAD0254021BC78CA1273277C34CAED3500C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:46:40:4b:3d:1b:a3:b3:2d:15:e3:4a:da:
                    ea:ad:68:67:76:7a:05:7b:59:f2:02:f1:bb:76:bf:
                    f5:b6:8c:e4:f8:c9:9e:30:78:28:db:6a:11:8e:4a:
                    e0:b6:2e:7d:9f:05:6e:d4:13:ea:dc:1a:2e:c3:13:
                    7b:72:bc:f0:53:6d:67:9b:53:d3:0f:e7:a4:c7:70:
                    cf:c6:7c:c3:90:04:56:66:65:f6:ab:88:30:2b:89:
                    0f:00:cb:2e:28:1f:35:11:86:68:5b:8e:f5:fe:8d:
                    55:f6:39:d0:55:89:24:06:1c:b4:26:a5:fd:de:b4:
                    b3:b1:f5:47:a6:fe:94:40:c8:6e:d8:36:1d:b2:b8:
                    db:1f:0b:a0:d5:2f:b8:17:9d:42:7d:05:c9:23:c9:
                    91:3b:9e:d3:57:60:1b:3a:b9:3f:12:fe:09:28:a0:
                    a3:7c:90:65:d1:b0:16:84:23:b5:52:6c:3b:e8:8c:
                    bc:cf:02:78:5d:8b:8f:aa:ea:3e:69:1e:70:46:96:
                    03:47:89:db:a2:7b:65:62:58:a6:8a:0a:7b:c5:15:
                    24:ce:03:a9:49:06:ad:06:56:e0:9d:c5:95:56:6e:
                    73:e7:2a:3a:90:bb:49:e0:72:cd:0b:49:b9:a3:53:
                    7e:45:c6:f9:1a:03:d3:33:bd:b2:fa:79:59:b7:f4:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A9:4A:AD:02:54:02:1B:C7:8C:A1:27:32:77:C3:4C:AE:D3:50:0C
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130332e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:61:67:7c:61:43:f2:30:8f:b2:2f:79:13:7d:f4:e5:4a:8e:
         c3:d0:e9:fa:09:81:c1:61:67:57:1e:c6:7c:bc:44:e6:b8:1d:
         cf:56:ee:cc:ee:dc:73:ae:4b:22:b5:65:1a:e5:e1:af:c3:f2:
         f3:14:75:1e:df:75:fa:75:c0:fe:1a:86:cd:e7:ff:ef:52:d5:
         3f:4b:5d:aa:f4:70:1f:3b:33:1d:59:7f:12:0d:9f:b1:9e:05:
         83:aa:75:61:7a:17:7b:79:e3:85:6a:f1:a4:9f:63:b7:d0:df:
         92:26:d2:65:0c:dc:30:9e:40:c0:ef:a4:5b:96:5b:81:2a:4c:
         f1:8e:92:0f:4b:5d:67:01:e2:13:5a:45:58:f2:5a:af:a2:a9:
         b6:9f:e9:0f:0d:9c:7f:1f:a1:4b:40:c0:70:e8:b9:22:ca:a8:
         55:2b:bc:1b:5f:2c:94:ad:79:a0:d7:82:9e:cc:80:c1:29:c3:
         c6:94:d3:04:23:bf:99:62:47:3b:2d:8f:05:43:2b:af:72:0c:
         22:94:6e:8c:4e:84:28:60:e3:97:c0:ff:cc:fc:4d:98:4a:53:
         91:f7:f1:44:67:60:07:2f:80:c1:75:21:89:24:d1:f9:32:fa:
         67:0d:51:d4:24:b6:6f:01:65:66:66:91:b7:75:31:89:42:88:
         43:d5:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org