Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa
File:                     34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa (raw, json)
Hash identifier:          iDcHH2ZQekVFIshZfk1/VStm3PySsCZG89FV7aO0KMU=
Subject key identifier:   0F:5C:B9:F7:D5:BF:7E:52:2B:27:01:79:B0:CB:B3:88:26:A1:A4:F5
Certificate issuer:       /CN=99A78712ED297A370E4987A326F3177259C4BC40
Certificate serial:       630597DEBC116D2779634E37BAE3300E30B7892A
Authority key identifier: 99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa
Signing time:             Wed 03 Apr 2024 18:33:06 +0000
ROA not before:           Wed 03 Apr 2024 18:28:06 +0000
ROA not after:            Wed 02 Apr 2025 18:33:06 +0000
asID:                     268173
IP address blocks:        45.170.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:05:97:de:bc:11:6d:27:79:63:4e:37:ba:e3:30:0e:30:b7:89:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A78712ED297A370E4987A326F3177259C4BC40
        Validity
            Not Before: Apr  3 18:28:06 2024 GMT
            Not After : Apr  2 18:33:06 2025 GMT
        Subject: CN=0F5CB9F7D5BF7E522B270179B0CBB38826A1A4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:e0:fb:d3:ad:1d:d3:50:28:eb:12:90:ed:
                    1a:14:cc:67:33:e4:b8:aa:fd:01:da:81:88:32:db:
                    20:05:20:cd:7d:88:ca:ae:52:fd:0a:44:e3:5b:29:
                    01:95:23:4f:4c:5e:71:b5:b8:03:1e:bb:68:e7:9c:
                    85:d9:83:fe:ee:1d:75:6f:ef:7f:6d:31:55:5c:68:
                    c7:02:0c:28:d0:16:8a:e8:2a:22:85:22:e3:f3:b8:
                    34:cc:18:07:13:8e:9b:9e:e3:a8:f0:2d:e0:58:bc:
                    9f:95:c8:72:f5:be:5c:f2:e6:55:d3:b4:e8:bc:ce:
                    a4:13:80:bc:f6:81:5f:af:c1:4e:d2:f1:bb:d0:df:
                    8d:47:c1:80:82:d8:06:8d:a9:aa:8c:8a:28:56:23:
                    ed:1d:b6:c0:67:1b:82:8e:64:9a:20:29:0b:ef:e9:
                    ec:3f:64:9f:a9:de:74:25:65:ad:02:34:ec:e6:13:
                    f2:19:58:55:02:18:ee:9b:67:a8:0a:93:19:78:19:
                    b6:01:67:0c:4f:a0:18:e7:1a:34:1a:87:63:65:c0:
                    04:0a:ef:f5:b7:15:43:7b:8c:e6:aa:ad:ec:0a:57:
                    0e:6d:d3:ef:cb:b3:1a:2b:5b:18:e3:58:cf:91:00:
                    14:3e:fe:fe:76:7c:d6:f9:ac:52:bf:b8:66:ed:bc:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:B9:F7:D5:BF:7E:52:2B:27:01:79:B0:CB:B3:88:26:A1:A4:F5
            X509v3 Authority Key Identifier:
                keyid:99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:62:5d:6e:1d:a6:f9:b8:6f:89:3f:ea:2b:05:79:2c:c0:0b:
         2e:87:29:fd:22:b9:7a:31:53:0a:71:0c:5d:92:99:cc:c9:47:
         3c:bc:ee:a5:5c:fe:87:2f:9e:2d:1e:3b:ac:e3:49:fe:71:39:
         cc:13:7d:15:8d:32:76:6e:e8:c7:e7:6a:32:81:f2:56:8a:a6:
         56:ec:29:5e:f7:c0:e8:6d:5f:ff:f6:a8:e8:a7:d9:3f:2e:b6:
         c2:e9:ee:0f:9e:f5:8f:c2:33:dc:af:e6:68:b0:bf:58:c5:eb:
         7a:74:b9:90:90:bf:70:b8:dd:f7:ab:4d:24:55:ed:33:3f:cc:
         77:f4:92:4b:32:22:cc:d8:c4:40:63:4b:08:7d:a7:d8:0e:1b:
         29:4d:10:4b:47:c3:29:6e:89:63:9c:b8:c2:94:db:7f:57:93:
         25:1c:20:8e:97:c9:dd:db:6c:50:e7:d5:2b:0d:e7:89:30:ed:
         f4:8f:28:1c:fe:0d:9b:61:f5:29:51:04:3a:44:dd:65:7c:0c:
         f9:37:15:fd:55:76:2a:27:32:dc:f5:0a:e3:61:90:77:3f:4d:
         a1:16:1b:96:fb:aa:1c:6f:35:2c:09:30:79:83:18:67:55:8a:
         82:71:b8:04:5b:9b:15:a9:89:f9:59:50:23:c2:d3:41:db:2c:
         a6:f8:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org