Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa
File:                     34352e362e33322e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          XCPjS8fAz/FgOhcIca68SL9q63+ISNuKAkFHakksT6E=
Subject key identifier:   F0:D8:67:AE:43:68:8C:D9:36:EE:14:8C:7B:5D:EA:51:9B:02:F7:D7
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       598B95FB42DB21E81CCC787FFAD8180F2203CEBA
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 25 Nov 2024 16:50:28 +0000
ROA not before:           Mon 25 Nov 2024 16:45:28 +0000
ROA not after:            Mon 24 Nov 2025 16:50:28 +0000
asID:                     270814
IP address blocks:        45.6.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 10:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8b:95:fb:42:db:21:e8:1c:cc:78:7f:fa:d8:18:0f:22:03:ce:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Nov 25 16:45:28 2024 GMT
            Not After : Nov 24 16:50:28 2025 GMT
        Subject: CN=F0D867AE43688CD936EE148C7B5DEA519B02F7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:03:31:af:b9:8d:36:b5:1d:18:6f:87:ac:
                    d0:ff:74:f6:69:9d:09:2a:12:1f:b4:14:16:31:76:
                    2d:ed:5c:4d:a7:ba:c4:c9:7c:65:59:53:a0:19:2a:
                    21:8b:fb:2e:cd:a7:ce:d6:d6:c0:47:2d:19:60:93:
                    af:c8:14:ca:58:20:5a:ba:6a:46:c3:46:46:97:e1:
                    3b:83:be:3d:cc:a2:a2:20:cf:8f:f4:25:e5:94:bd:
                    04:da:e9:21:86:2e:dc:b3:fa:b5:b7:8f:b3:3a:03:
                    92:21:19:a9:2d:6f:bc:23:0b:8f:6b:64:fa:ee:90:
                    a7:84:e0:a7:94:cb:4c:3d:d6:eb:9c:ef:71:d4:bf:
                    30:7a:bf:ad:98:6f:88:6e:1d:d5:a5:04:71:fc:49:
                    a0:a9:ae:57:0a:c4:fc:f8:d6:2c:ac:d2:40:c5:81:
                    e1:bb:d3:73:5d:a7:1d:d5:cf:c0:08:97:ef:e1:2e:
                    05:f4:fa:0a:53:b3:5f:2f:ce:23:23:73:d2:cc:9a:
                    36:c7:1d:49:36:d2:1d:7c:8d:e4:7a:b3:07:87:e3:
                    66:8c:c1:23:58:d4:ce:f5:b4:d3:55:da:eb:d6:4d:
                    0c:f6:55:a2:05:ae:1d:43:6b:5b:17:63:e3:11:cf:
                    26:f3:05:f5:df:d4:b4:36:fa:b0:5f:5f:42:5c:2f:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D8:67:AE:43:68:8C:D9:36:EE:14:8C:7B:5D:EA:51:9B:02:F7:D7
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:2b:96:48:0c:81:1b:fe:25:7a:5b:51:ff:fd:09:12:c4:
         18:78:8d:f3:f7:6a:5e:e5:a0:56:0d:b9:75:f7:14:1d:37:e2:
         17:46:05:5d:10:d8:b5:be:0b:05:7c:d6:8a:3e:08:9c:35:1e:
         49:cb:e3:ad:fc:27:9c:e6:76:8a:17:cd:2a:8f:0d:8e:cd:7a:
         c3:c0:ae:bf:34:2b:41:34:86:37:79:eb:24:06:01:0d:2a:e2:
         8a:dc:48:98:33:07:6c:ec:f4:ba:78:bf:16:d7:40:94:a1:fd:
         b7:c5:0f:b0:74:2b:76:fc:da:ee:04:1a:68:44:50:19:55:49:
         de:48:e7:a6:99:4a:f2:be:77:4a:38:ee:07:c2:21:69:4e:bd:
         65:1a:eb:49:56:f0:00:c6:83:b0:c7:31:e0:cb:99:22:fa:94:
         d2:90:13:16:e5:33:9f:b9:c2:60:28:f3:3a:6c:84:7e:f7:ba:
         6d:a0:81:49:88:b8:fe:bb:50:96:ef:56:95:31:a5:4e:5c:99:
         32:28:03:b3:6e:9b:47:f2:73:e0:6b:f2:79:db:37:1b:6b:25:
         fe:2d:a8:e1:4b:38:99:53:10:de:e5:11:a1:e2:8a:60:bd:89:
         3e:34:43:e6:6a:7b:07:68:2a:5e:49:58:c3:88:11:2f:bd:11:
         2f:17:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 10:38:40 2024 by rpki-client on console-fra.rpki-client.org