Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233382e302f32342d3234203d3e20323639353134.roa
File:                     34352e3138362e3233382e302f32342d3234203d3e20323639353134.roa (raw, json)
Hash identifier:          6BxIz9IhPM7GaI/ih/fAMP69sB8od6q0dKrojX9pjW8=
Subject key identifier:   85:C4:4E:5E:B5:1F:E5:15:5A:EB:6A:07:70:B4:D6:F2:53:F3:CC:15
Certificate issuer:       /CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
Certificate serial:       79CEA889FAF25BDA698C4D350B553785A86D693F
Authority key identifier: 05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233382e302f32342d3234203d3e20323639353134.roa
Signing time:             Fri 08 Nov 2024 01:22:36 +0000
ROA not before:           Fri 08 Nov 2024 01:17:36 +0000
ROA not after:            Fri 07 Nov 2025 01:22:36 +0000
asID:                     269514
IP address blocks:        45.186.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl
                          rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ce:a8:89:fa:f2:5b:da:69:8c:4d:35:0b:55:37:85:a8:6d:69:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Validity
            Not Before: Nov  8 01:17:36 2024 GMT
            Not After : Nov  7 01:22:36 2025 GMT
        Subject: CN=85C44E5EB51FE5155AEB6A0770B4D6F253F3CC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:5a:5f:d6:e9:b9:ad:2d:1a:09:6a:10:70:
                    5e:4e:b2:5a:95:0b:c3:47:74:93:5a:b2:e3:10:41:
                    01:6d:05:5a:75:d5:0c:54:5e:f5:41:01:e1:88:dc:
                    4e:2e:9a:8d:57:11:3e:7d:0a:af:a1:80:9a:e3:26:
                    a1:40:60:09:bc:4b:41:d1:1b:c7:40:a4:f1:94:7a:
                    e5:f9:93:61:52:a6:00:37:40:21:e1:2f:e1:d4:31:
                    89:fd:9f:cf:5e:70:10:22:97:51:17:28:5a:09:1c:
                    ff:a5:8c:e2:79:96:73:23:80:8e:e2:2a:6b:f8:86:
                    78:9c:69:f7:8d:bf:34:ea:c7:f3:7f:1e:f2:99:83:
                    9f:86:f6:58:37:3d:f7:fb:e1:e4:b4:a9:4d:97:ca:
                    b5:d5:38:0a:62:b1:0a:22:44:dd:4a:59:a5:d7:aa:
                    a1:47:5f:cf:60:7d:d1:25:6f:3d:01:0c:80:1a:34:
                    a4:aa:5a:3d:d7:1e:07:b9:a6:db:bd:b7:12:2a:da:
                    e0:2a:c9:20:27:51:e0:11:af:c9:a3:0a:9f:8f:03:
                    32:67:da:73:3d:12:4a:f2:f7:20:0c:d5:29:1a:66:
                    5e:ad:cc:34:3c:e9:e9:8b:4c:c8:c7:6c:7f:61:3a:
                    79:54:26:0b:8d:b8:ee:4c:24:1b:1e:cf:2a:fb:9e:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C4:4E:5E:B5:1F:E5:15:5A:EB:6A:07:70:B4:D6:F2:53:F3:CC:15
            X509v3 Authority Key Identifier:
                keyid:05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233382e302f32342d3234203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:44:53:27:20:c7:b4:43:42:da:7b:6d:7c:a8:83:d1:5c:
         00:65:0e:e1:e8:dd:62:ba:49:d8:89:09:a1:93:79:c1:62:c8:
         61:c1:85:da:ca:d3:f8:2c:87:53:ea:31:a5:b7:09:f6:ed:9b:
         98:18:6f:dd:de:5c:ea:81:c9:ec:80:98:e8:22:d2:73:39:77:
         5b:c6:c8:b6:8e:ad:aa:9c:7a:27:96:14:3b:e6:7c:96:c4:90:
         0d:f2:b7:38:f8:41:29:2f:ba:3a:a8:e2:69:73:1e:00:ed:a1:
         d8:e3:bb:be:b8:af:d9:e8:98:2f:06:3f:73:41:41:e1:b2:89:
         92:de:78:34:cc:9d:ec:85:79:15:c1:d9:79:17:20:a0:13:a8:
         5b:df:61:e2:90:6e:6b:72:10:19:72:97:61:6a:0c:03:06:73:
         f2:aa:1a:f7:c2:e4:0a:8c:46:66:b1:9b:79:49:67:9e:e8:03:
         72:c4:29:f8:8b:6c:14:54:17:c8:d7:38:f0:81:c6:0b:34:3c:
         63:9e:6b:28:c7:1a:ca:9c:11:4c:56:36:d1:f0:9f:2d:a1:ea:
         f6:e3:a4:96:7c:04:a9:83:60:44:66:2d:30:3e:2c:79:3c:90:
         b2:95:65:dc:40:5a:0d:0b:e6:ba:ba:7e:ca:fe:83:12:95:d1:
         7f:f1:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org