Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133372e302f32342d3234203d3e20323639323239.roa
File:                     34352e3138322e3133372e302f32342d3234203d3e20323639323239.roa (raw, json)
Hash identifier:          FcVffnif0rZv+D32N1s9owEyBEgsX2sFGoWPT4vUBaI=
Subject key identifier:   F2:9C:2A:3B:DD:93:CC:BA:23:58:93:4F:B3:5A:7A:7C:91:7A:9B:BB
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       1749F6AF8E0635420E519C0362F75CC48BF31B68
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133372e302f32342d3234203d3e20323639323239.roa
Signing time:             Thu 28 Nov 2024 17:22:46 +0000
ROA not before:           Thu 28 Nov 2024 17:17:46 +0000
ROA not after:            Thu 27 Nov 2025 17:22:46 +0000
asID:                     269229
IP address blocks:        45.182.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl
                          rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:49:f6:af:8e:06:35:42:0e:51:9c:03:62:f7:5c:c4:8b:f3:1b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Nov 28 17:17:46 2024 GMT
            Not After : Nov 27 17:22:46 2025 GMT
        Subject: CN=F29C2A3BDD93CCBA2358934FB35A7A7C917A9BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:42:e8:fd:8e:f1:df:40:6b:44:d8:0e:97:
                    bd:b5:9d:7f:bd:19:ea:5c:11:81:12:be:4b:95:f3:
                    4b:b1:ba:67:f2:90:1f:2c:2e:ca:5e:49:e3:65:63:
                    8e:36:c0:54:1a:27:be:86:27:81:3d:fd:1b:27:bf:
                    f8:4b:f9:43:f0:8c:5a:47:f5:ff:57:47:65:b3:ec:
                    2f:07:02:98:53:41:84:f0:f9:eb:7c:0d:04:a7:61:
                    9e:8a:3a:1b:b3:8b:aa:c1:c1:c0:6a:9f:8e:42:39:
                    71:5d:26:06:8e:6f:5c:53:dc:76:eb:f9:54:40:ee:
                    f3:80:7f:97:6b:3c:77:99:4d:1c:ea:cf:cb:64:a9:
                    5d:bd:0e:50:f1:81:0c:aa:40:7c:4d:02:4f:08:b2:
                    76:32:6e:49:b3:9c:18:06:a6:d7:28:eb:47:7e:d3:
                    9c:47:42:3d:95:92:a4:39:92:2f:eb:04:26:05:e4:
                    d0:23:c0:05:a0:bc:00:e5:d3:c8:d5:95:02:1f:a3:
                    f7:03:a6:c0:1d:2f:5a:3a:3c:22:65:59:82:eb:28:
                    20:ac:e0:9e:1a:a5:fb:94:72:d8:8f:3d:cb:bd:f0:
                    3f:10:97:ac:95:28:28:b4:af:3c:af:74:7e:89:65:
                    47:15:2f:52:df:15:a5:65:ac:62:e8:cd:7f:18:5e:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9C:2A:3B:DD:93:CC:BA:23:58:93:4F:B3:5A:7A:7C:91:7A:9B:BB
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133372e302f32342d3234203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b0:86:df:aa:5f:e7:15:c9:3f:fd:2c:6e:76:63:62:79:d9:
         f9:93:df:f7:37:13:37:e7:26:cb:19:02:dd:48:56:96:23:57:
         41:74:dc:64:cd:26:9b:c3:60:31:89:77:42:d5:fd:b5:c4:30:
         38:ea:26:e9:70:d2:f7:07:bd:6f:88:cd:90:33:b7:de:36:63:
         e5:08:6d:66:3f:fd:93:d7:ba:ff:7c:10:74:56:4b:eb:e1:ce:
         d5:a9:96:8e:9e:9d:14:67:b0:bb:55:c9:2d:82:3d:d5:71:57:
         73:de:0a:c3:e2:ce:55:0b:1a:81:ea:64:d8:9e:f7:45:81:6f:
         ff:60:1b:af:0f:44:02:25:a1:6d:1c:a1:97:be:b1:e0:55:e1:
         3b:48:c2:3b:fe:9e:b7:ff:e2:cd:fe:36:d6:de:96:2e:b5:68:
         e3:65:f2:58:5a:9c:20:f1:bc:2d:e6:64:f2:a8:72:8a:3b:4d:
         87:44:86:0b:0d:86:5e:f4:e9:c8:de:38:f4:f5:c1:a5:80:3b:
         8e:b2:44:9f:79:46:e6:79:b6:55:a6:df:6a:1d:be:b1:5a:76:
         12:11:4f:ea:5a:a8:cf:8f:26:46:10:9f:63:ec:c0:ed:9a:43:
         59:a9:ef:95:bc:6e:10:5b:47:08:c4:02:29:c2:70:b2:52:a8:
         fb:8a:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:46 2024 by rpki-client on console-ams.rpki-client.org