Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133392e302f32342d3234203d3e20323639323239.roa
File:                     34352e3138322e3133392e302f32342d3234203d3e20323639323239.roa (raw, json)
Hash identifier:          l3R9R3DE20wHvjTbyUoyY45WtUJLA5IGebpKkCX1IxI=
Subject key identifier:   F8:94:9F:03:84:C4:DC:7C:FB:0C:69:3C:B8:44:16:B0:89:DB:38:07
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       7FE170EAAAD0581249C43BB955E1B9A0FB4B4E57
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133392e302f32342d3234203d3e20323639323239.roa
Signing time:             Thu 28 Nov 2024 17:22:47 +0000
ROA not before:           Thu 28 Nov 2024 17:17:47 +0000
ROA not after:            Thu 27 Nov 2025 17:22:47 +0000
asID:                     269229
IP address blocks:        45.182.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl
                          rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e1:70:ea:aa:d0:58:12:49:c4:3b:b9:55:e1:b9:a0:fb:4b:4e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Nov 28 17:17:47 2024 GMT
            Not After : Nov 27 17:22:47 2025 GMT
        Subject: CN=F8949F0384C4DC7CFB0C693CB84416B089DB3807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:77:59:0b:3a:19:aa:9c:eb:c5:6f:5a:aa:
                    21:37:7a:a7:79:c2:cd:7f:18:b6:fb:26:49:c6:e4:
                    00:d1:ac:00:39:89:5e:bf:fd:23:1a:66:b1:8b:42:
                    93:d4:b9:2a:69:70:3e:a8:3e:81:0b:66:50:cf:f4:
                    21:15:b9:24:0a:73:e0:c9:d8:38:f7:37:71:11:c3:
                    09:c7:49:1d:06:df:80:65:a1:b8:77:2e:91:66:a1:
                    41:50:33:7e:0b:a8:83:dc:55:79:85:f7:a0:bd:91:
                    b5:a6:2e:f6:a0:f6:cc:6f:93:d2:61:58:25:0d:89:
                    90:c5:2c:5f:27:9f:30:88:07:82:dc:1d:87:0b:a7:
                    82:c1:1e:ad:a4:6b:51:cf:ce:ce:6e:98:9f:4e:f3:
                    bb:a5:8d:8b:39:bf:92:07:1a:db:0b:e0:8b:65:f4:
                    57:b6:43:3b:77:39:0b:0d:3d:ad:ed:4c:0b:2d:7a:
                    ba:33:b3:ca:08:62:df:36:5a:e4:83:00:1b:37:76:
                    28:35:06:3e:4f:4a:fd:5e:1e:a2:fa:de:e9:ae:9f:
                    94:f1:a4:ed:ed:48:3a:81:7a:9d:9a:a9:a7:5f:f1:
                    29:3d:00:9a:d4:db:be:2b:0f:10:9e:fb:4e:0e:e3:
                    3d:e3:84:11:ab:35:19:86:9e:60:c1:d7:3a:66:30:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:94:9F:03:84:C4:DC:7C:FB:0C:69:3C:B8:44:16:B0:89:DB:38:07
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133392e302f32342d3234203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:43:2e:81:38:92:3b:1b:8b:5d:8f:52:a9:52:f6:55:58:12:
         2f:60:df:2e:30:df:9c:f3:f3:ca:83:0b:5d:f5:60:dc:0e:12:
         e0:76:d4:49:66:9a:38:3d:ab:8d:39:4f:f0:4d:fa:3d:21:cc:
         90:01:fb:c8:26:6a:ca:e2:31:ee:1d:89:6c:d6:8d:57:a0:8b:
         6f:e6:5c:15:83:a8:63:e3:40:c2:01:79:12:75:cb:da:9e:57:
         1b:ee:2f:41:5d:fd:ff:e4:3e:f0:b3:0c:e8:6c:f2:d7:cb:86:
         8f:8d:4a:21:7b:90:af:56:8b:09:f5:b4:f2:3a:c7:fa:04:56:
         f7:18:7e:54:b8:d9:2e:ba:19:3c:63:73:18:f7:88:61:3d:77:
         96:cd:3d:bb:28:fa:73:e5:ef:08:53:71:10:10:f0:3a:ec:51:
         08:4a:92:74:d5:f4:76:b4:50:13:17:7d:0d:1a:7a:bf:51:1b:
         78:6f:91:fa:42:af:ae:56:d2:b5:da:49:8d:06:ee:93:af:e8:
         48:5a:05:52:d5:7a:75:f6:7d:1d:2a:c2:a6:68:0f:20:8d:27:
         bc:88:05:6d:4c:23:99:b2:6e:c0:ee:33:53:91:d0:17:62:36:
         3c:25:8e:a5:51:06:d8:d1:41:e0:b8:5a:45:8c:01:51:e9:7e:
         78:17:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:46 2024 by rpki-client on console-ams.rpki-client.org