Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/34352e3136372e392e302f32342d3234203d3e20323638303230.roa
File:                     34352e3136372e392e302f32342d3234203d3e20323638303230.roa (raw, json)
Hash identifier:          6rBs+ruTfT93P8bIwwm3lal8DSYjvKRkh3BMOQYlucY=
Subject key identifier:   FA:9A:74:01:F3:CC:64:9D:52:36:D7:F8:23:78:47:2F:CA:CC:10:8A
Certificate issuer:       /CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB
Certificate serial:       5692CB08FD895A918FB58E1538CC611DDCB5E7F4
Authority key identifier: BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/34352e3136372e392e302f32342d3234203d3e20323638303230.roa
Signing time:             Fri 06 Sep 2024 22:55:22 +0000
ROA not before:           Fri 06 Sep 2024 22:50:22 +0000
ROA not after:            Fri 05 Sep 2025 22:55:22 +0000
asID:                     268020
IP address blocks:        45.167.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.crl
                          rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:92:cb:08:fd:89:5a:91:8f:b5:8e:15:38:cc:61:1d:dc:b5:e7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB
        Validity
            Not Before: Sep  6 22:50:22 2024 GMT
            Not After : Sep  5 22:55:22 2025 GMT
        Subject: CN=FA9A7401F3CC649D5236D7F82378472FCACC108A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:90:e0:36:57:2b:15:cd:04:7d:5a:c3:bb:ca:
                    a0:9a:87:60:be:50:79:3f:a0:e5:1d:69:5e:38:c6:
                    e4:e7:08:07:79:fb:4c:43:f8:c9:65:2b:00:02:cd:
                    0f:47:70:fb:5b:cf:6e:94:eb:21:63:af:9f:f4:84:
                    1b:ee:6e:b0:93:06:39:ad:09:de:0b:e7:f5:48:27:
                    9a:6d:70:ca:b1:ea:d4:85:f5:c2:fe:a0:7c:eb:a2:
                    df:66:6a:d9:28:0b:bd:d7:7c:1b:c1:59:1c:02:c4:
                    ae:35:20:9f:b2:98:fd:7c:56:ed:c5:02:1b:04:46:
                    bc:9a:d6:a8:52:c9:67:2a:83:d7:f2:d2:ab:2a:76:
                    48:44:61:09:d7:06:c6:f6:83:fe:66:26:0a:44:e5:
                    2c:2e:a3:05:0d:52:a8:13:ab:52:75:08:2f:b8:24:
                    84:76:18:e6:33:ad:2c:ea:30:56:39:73:8e:83:6e:
                    c8:c4:78:2d:5f:71:ce:8d:5a:14:5e:03:95:2d:6c:
                    d0:29:7a:bf:6a:b3:98:8c:07:8b:96:56:9a:a9:53:
                    e0:b6:74:ba:40:c2:a0:2b:25:e4:91:48:55:b7:13:
                    17:a5:cf:e9:fa:23:2a:00:e5:4c:a0:00:3e:9c:e9:
                    4e:ca:ed:86:90:8a:c5:d7:30:e6:91:91:cf:57:1b:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9A:74:01:F3:CC:64:9D:52:36:D7:F8:23:78:47:2F:CA:CC:10:8A
            X509v3 Authority Key Identifier:
                keyid:BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/34352e3136372e392e302f32342d3234203d3e20323638303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:f2:01:1a:9e:8e:6c:58:21:f8:42:e6:f9:ad:37:d0:20:1c:
         b8:ba:ad:1b:29:f4:37:45:86:14:fc:b8:4a:1c:15:71:d0:e2:
         fa:f9:38:c3:57:36:94:84:31:f3:5e:b8:95:d7:25:ee:2b:e7:
         21:45:9e:c0:7c:03:e6:d5:92:40:d0:02:0f:97:49:98:83:25:
         46:d0:ad:12:a7:a4:37:e1:f2:75:a9:5b:db:31:05:ca:aa:38:
         60:86:a1:89:02:6b:c4:60:3b:c8:c3:9b:56:3b:7e:b2:8c:bb:
         b4:f5:e9:05:49:ba:57:a8:1d:e0:63:17:09:73:11:3e:ff:08:
         61:2e:27:fe:ac:f0:45:2d:71:de:33:ac:38:7f:23:14:14:16:
         e6:fa:a6:9e:43:9c:f4:3d:66:29:6e:46:b2:32:3a:d2:c7:14:
         a8:81:bf:ca:01:4b:6a:01:c9:c5:e6:50:1e:17:02:06:c2:af:
         25:99:6a:94:a7:d5:df:68:41:66:fd:94:85:5c:54:f6:f4:2e:
         81:74:eb:61:8e:bc:1b:f6:2e:66:2e:4a:c8:3b:b8:e0:a3:98:
         2b:ee:fd:f2:c1:c8:d1:3a:98:69:7d:bc:8a:ca:77:11:77:fb:
         ef:aa:a4:0a:83:1d:a5:4e:c0:54:a4:e2:09:db:7b:a8:7f:0d:
         d7:f0:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org