Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa
File:                     34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa (raw, json)
Hash identifier:          oZ/ouuDf7kS8Q16ME/BGlgEMYhRuJZSkxJHK6Yno9Ls=
Subject key identifier:   E4:FF:31:07:06:CA:B4:08:CD:D3:4A:61:A8:86:11:89:E8:B1:03:26
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       2A9886F0AFABE35EEA940A98BA9E0A0F1B8D0E91
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa
Signing time:             Wed 10 Jul 2024 16:09:36 +0000
ROA not before:           Wed 10 Jul 2024 16:04:36 +0000
ROA not after:            Wed 09 Jul 2025 16:09:36 +0000
asID:                     268452
IP address blocks:        45.160.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:86:f0:af:ab:e3:5e:ea:94:0a:98:ba:9e:0a:0f:1b:8d:0e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Jul 10 16:04:36 2024 GMT
            Not After : Jul  9 16:09:36 2025 GMT
        Subject: CN=E4FF310706CAB408CDD34A61A8861189E8B10326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:eb:48:79:ab:7a:74:42:97:3c:5a:e0:85:
                    fc:1e:2a:21:e3:d0:fc:af:4a:02:39:e4:82:d8:b5:
                    51:2f:77:f1:b9:19:6a:e5:d0:36:b1:7d:ab:48:23:
                    2b:8c:6a:8a:5c:d9:97:7f:0a:ac:13:14:19:57:2f:
                    1d:1f:6b:0a:e1:4f:44:aa:1c:94:64:fc:b0:fa:f8:
                    c6:3e:ef:5c:de:84:e7:5e:9e:44:18:01:31:a9:f3:
                    20:d5:3b:45:62:00:bc:9d:a2:49:3a:be:28:35:72:
                    f3:b2:40:d3:6e:4f:ef:a7:c7:5c:1d:4c:91:f1:5e:
                    e0:3c:69:dd:d4:81:41:1a:73:69:f0:b7:54:88:53:
                    74:5a:ec:0a:dc:39:38:8c:e2:f3:26:65:bf:91:0a:
                    7f:ee:82:03:80:cd:bd:f2:54:cf:71:41:f5:3e:a1:
                    db:90:5d:56:1f:1d:ed:8f:f1:c7:15:20:59:a6:db:
                    d8:f7:2b:ba:d5:b8:51:c9:d5:60:b6:ce:54:12:c0:
                    7b:18:9d:36:5f:55:bd:5f:8e:22:f5:ec:52:50:32:
                    3a:a0:cd:57:ed:ee:56:e8:0d:bd:00:08:c4:3b:d8:
                    53:ae:bc:27:88:42:9b:b8:1e:b9:9f:fa:2c:33:54:
                    d0:21:ca:bb:5b:06:8d:60:52:a8:bb:a7:a7:b2:23:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FF:31:07:06:CA:B4:08:CD:D3:4A:61:A8:86:11:89:E8:B1:03:26
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:e2:a1:2f:2e:73:da:7c:30:dd:56:db:ea:17:00:85:16:72:
         6b:31:be:4f:58:c1:93:5d:31:e4:0d:30:7a:60:cc:72:5d:b5:
         a0:dd:b0:07:86:5f:f7:46:47:4f:48:24:fa:b8:79:cd:5c:ad:
         d8:f7:3f:5b:3d:f1:9d:4e:36:24:6a:55:04:d3:67:bf:8e:7d:
         27:a0:fc:34:e0:6e:27:e3:50:b9:d7:16:5a:76:26:f1:57:bd:
         35:65:69:f8:bd:4b:ff:30:3c:ec:a7:9b:ff:16:13:84:6a:bf:
         8c:48:22:b9:76:ff:a8:60:50:1a:17:89:fd:b2:c2:1b:95:fd:
         c5:17:72:e4:20:ba:ea:6a:d0:80:81:90:de:33:07:08:5a:0b:
         ff:df:a4:94:a5:f5:c9:75:3d:4c:74:b4:58:c9:b5:42:07:23:
         38:67:33:cf:e9:8c:3f:95:5c:5a:fc:a5:a4:3f:44:97:5d:57:
         f5:68:42:fe:ba:da:8e:f9:25:6c:3a:df:b6:7f:93:8a:77:56:
         26:8c:92:65:f5:dc:86:8a:b0:57:71:c8:d1:7d:b2:b9:ce:ec:
         1b:ec:f1:49:9e:29:8a:f1:00:b4:66:48:c9:09:29:5c:0a:84:
         ab:84:47:12:c3:bc:80:e0:97:75:29:be:56:44:10:48:c7:69:
         8f:38:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org