Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa
File:                     34352e3138312e39362e302f32322d3332203d3e20323639313739.roa (raw, json)
Hash identifier:          Ng+DMblolXPk7dNt/2mvEtRunJay3nISE4/N1wcATE8=
Subject key identifier:   26:4C:47:29:A3:FD:E2:D1:B8:5C:8B:8B:C3:03:BD:76:99:B5:1D:F1
Certificate issuer:       /CN=F8F98CA5340788709739B7A6B75EDBD7FCEA06ED
Certificate serial:       5FD2B7E0CF208F0B4A1BCBBB1092A573FAE2D8B8
Authority key identifier: F8:F9:8C:A5:34:07:88:70:97:39:B7:A6:B7:5E:DB:D7:FC:EA:06:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa
Signing time:             Thu 04 Apr 2024 17:19:12 +0000
ROA not before:           Thu 04 Apr 2024 17:14:12 +0000
ROA not after:            Thu 03 Apr 2025 17:19:12 +0000
asID:                     269179
IP address blocks:        45.181.96.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.crl
                          rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d2:b7:e0:cf:20:8f:0b:4a:1b:cb:bb:10:92:a5:73:fa:e2:d8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F98CA5340788709739B7A6B75EDBD7FCEA06ED
        Validity
            Not Before: Apr  4 17:14:12 2024 GMT
            Not After : Apr  3 17:19:12 2025 GMT
        Subject: CN=264C4729A3FDE2D1B85C8B8BC303BD7699B51DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:a7:e4:d1:f7:02:bc:a4:af:5d:51:4b:ef:
                    f7:58:ef:ab:9c:66:3f:c6:1d:b4:8b:2b:ef:de:c0:
                    37:b8:2a:3a:a6:9d:57:dc:2a:d2:fd:5e:26:7b:89:
                    ee:c5:95:33:55:30:c9:c4:a6:f8:f5:42:8e:e1:97:
                    cf:5d:27:cc:7b:96:8f:b6:df:c9:32:2b:d8:43:60:
                    f0:7e:12:3f:fd:a6:61:ef:8e:49:be:04:3c:ae:fc:
                    72:e7:fc:f2:ca:41:83:24:b9:b7:2d:52:d3:57:80:
                    19:65:06:95:81:db:c1:a8:95:65:9e:ae:c2:c6:88:
                    95:38:6d:63:87:38:a4:c1:ec:03:b0:05:b4:97:47:
                    eb:1b:0c:08:19:1c:4c:f4:04:47:11:70:83:41:95:
                    4b:0a:7f:dc:f9:97:69:39:1c:35:9d:fa:1c:c1:fe:
                    66:15:35:10:17:39:70:bf:1c:46:16:74:b1:3d:4a:
                    59:69:28:ab:b1:97:52:2a:eb:e3:2b:55:51:1e:e4:
                    db:5a:78:21:17:6d:34:db:9b:47:85:bb:a2:ea:66:
                    ba:5d:d7:54:b2:31:a9:82:8d:ad:99:23:1d:bc:e7:
                    ba:56:39:a5:b5:5d:f1:53:ee:c6:83:17:15:10:43:
                    14:0d:ae:50:b9:b4:d0:4f:2d:2d:a3:5c:22:60:2c:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4C:47:29:A3:FD:E2:D1:B8:5C:8B:8B:C3:03:BD:76:99:B5:1D:F1
            X509v3 Authority Key Identifier:
                keyid:F8:F9:8C:A5:34:07:88:70:97:39:B7:A6:B7:5E:DB:D7:FC:EA:06:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:ed:97:e3:85:1f:81:38:07:ee:bb:59:59:78:93:35:b3:b2:
         fd:78:e1:c9:d7:7e:18:fe:90:fd:52:05:64:72:1f:f4:55:64:
         92:74:46:3a:a3:66:5b:e5:f8:0c:14:3a:7c:41:07:e9:8b:88:
         a3:bd:f8:57:33:8e:9d:18:2e:d9:b7:4a:d2:9e:b4:bd:12:46:
         91:e2:29:f6:8a:9d:47:39:38:e8:44:57:b4:67:49:e2:47:86:
         a4:0f:0b:aa:cb:f0:26:ff:03:ad:10:fb:fa:9d:be:93:01:09:
         23:bc:da:8a:84:6e:e0:9d:d3:81:77:61:41:66:6e:18:31:e6:
         a8:d2:5f:0c:7f:dc:28:4e:97:5a:bf:50:49:8d:9c:78:73:5a:
         00:49:d2:0b:03:1e:b1:62:a4:c0:dc:e3:71:2b:d5:81:fd:89:
         3d:c0:30:7a:83:2c:e9:af:ff:7d:b4:bf:c2:74:d6:d0:c8:c2:
         9d:6e:39:3d:a9:da:5d:d2:16:ff:0d:32:ae:3d:43:25:d2:31:
         b8:19:33:ba:6c:a4:68:31:72:7f:e7:b7:17:60:ce:e6:b5:73:
         4a:3a:07:8a:52:ea:7e:6a:e2:22:b0:b1:94:2a:85:2b:96:78:
         17:14:a8:4f:d8:35:a4:66:5d:76:9e:49:dd:a1:e3:45:71:38:
         88:01:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:27 2024 by rpki-client on console-ams.rpki-client.org