Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa
File:                     34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa (raw, json)
Hash identifier:          J0DjEA8KWxctCN72ug+/P1cnKqkoccU5fQWL5uIoRgA=
Subject key identifier:   C0:47:01:AD:DB:7F:1E:62:1D:11:ED:44:DA:C4:EF:42:03:16:6A:15
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       24F2809A9D3F383D564BDC16394DE7F664ADE42F
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa
Signing time:             Mon 01 Jul 2024 17:35:56 +0000
ROA not before:           Mon 01 Jul 2024 17:30:56 +0000
ROA not after:            Mon 30 Jun 2025 17:35:56 +0000
asID:                     268452
IP address blocks:        45.160.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f2:80:9a:9d:3f:38:3d:56:4b:dc:16:39:4d:e7:f6:64:ad:e4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Jul  1 17:30:56 2024 GMT
            Not After : Jun 30 17:35:56 2025 GMT
        Subject: CN=C04701ADDB7F1E621D11ED44DAC4EF4203166A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:3d:4c:df:4a:a2:b1:dc:d1:74:01:ef:e4:
                    7f:e2:7f:3b:64:58:04:f6:3b:21:c0:c2:3b:a5:3c:
                    41:ec:8b:e9:9f:06:63:06:30:b3:23:7e:a9:7e:4d:
                    cf:52:80:6d:23:e7:d0:54:7d:d9:d4:3b:82:43:1e:
                    41:58:f7:3b:3d:df:d2:c7:83:b2:ac:7c:97:87:b9:
                    a1:73:ba:54:74:2e:60:33:9a:77:e5:2a:f4:f5:ed:
                    e9:9f:01:74:92:d9:0b:4f:50:cc:12:1c:93:e9:c7:
                    ef:2f:74:d2:32:a7:46:4f:85:cd:e2:74:32:87:9c:
                    1a:7c:a9:38:e3:59:43:67:ed:47:cd:9a:58:13:63:
                    e3:fe:b3:22:1a:e6:6d:50:fe:67:9f:09:8e:60:13:
                    2f:2e:75:b3:81:66:e8:79:ac:d6:67:56:39:26:f4:
                    c0:e8:fb:e5:59:80:35:7a:6f:38:b6:96:1d:12:3c:
                    d6:4d:3b:f2:01:fa:e2:df:af:d2:4d:d8:2f:f9:f1:
                    d7:76:69:24:6f:51:fc:c5:33:91:eb:a1:bc:6b:05:
                    de:2f:80:94:27:d6:aa:39:6a:e0:35:8b:b2:cc:3e:
                    db:dd:dc:97:14:40:27:76:98:1e:f9:63:57:19:1c:
                    e5:a2:43:ca:ea:e3:2a:ee:55:bc:34:69:69:f6:6e:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:47:01:AD:DB:7F:1E:62:1D:11:ED:44:DA:C4:EF:42:03:16:6A:15
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:e9:bb:92:a2:9a:54:f8:1a:b8:d0:dc:85:0c:c2:dc:e3:
         91:6b:42:47:28:ea:28:87:8a:e5:0e:ae:6a:23:4c:2f:95:ef:
         12:45:f4:20:74:a4:c6:d5:05:6f:67:10:07:fa:c8:d1:b9:9f:
         12:e7:85:35:92:81:03:b8:40:92:aa:70:fc:8d:f0:67:fa:26:
         13:f6:d6:45:94:d1:68:f1:12:58:e0:1a:20:07:bd:1b:32:da:
         fb:26:df:94:67:59:03:8a:83:6b:0e:47:f5:a8:74:83:f1:9c:
         85:7e:a1:a0:22:85:84:c1:ab:cb:10:e3:d6:1e:17:f0:39:76:
         93:6f:79:c7:ac:ef:59:40:e1:be:b2:f1:27:da:dd:24:de:9e:
         b1:85:4f:bb:6d:2c:f5:0c:bf:ad:77:fd:b2:d0:28:8e:32:a5:
         76:8d:03:76:c7:5f:44:ad:75:ea:32:a7:aa:cc:50:d7:a1:77:
         ff:aa:12:e5:9c:bd:25:88:5f:7b:69:18:c6:c0:34:80:29:ce:
         65:da:c8:5f:d5:98:c3:00:ea:41:c6:81:30:8b:c8:dc:70:74:
         37:b3:f0:2b:a1:ae:c7:ad:b5:65:bc:49:c0:00:f5:68:00:34:
         43:06:a0:0b:7e:dc:99:9c:b6:11:fb:1b:d0:e6:1e:9f:10:d8:
         07:50:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org