Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/34352e3232342e3234382e302f32322d3332203d3e20323632353239.roa
File:                     34352e3232342e3234382e302f32322d3332203d3e20323632353239.roa (raw, json)
Hash identifier:          k/EfMoS0xU6NgaK2ST5zCO34iouWFhB11EHJNMFs1Bc=
Subject key identifier:   73:64:87:BB:C6:15:A8:C5:43:78:D0:9F:5F:D5:80:9E:52:F3:3B:42
Certificate issuer:       /CN=46ABF77F47951897670C5BFDCAA35BE06D8F47F5
Certificate serial:       3065DDCEA4DA6CD981C3BDA35304283F9376933E
Authority key identifier: 46:AB:F7:7F:47:95:18:97:67:0C:5B:FD:CA:A3:5B:E0:6D:8F:47:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/34352e3232342e3234382e302f32322d3332203d3e20323632353239.roa
Signing time:             Fri 30 Aug 2024 20:58:30 +0000
ROA not before:           Fri 30 Aug 2024 20:53:30 +0000
ROA not after:            Fri 29 Aug 2025 20:58:30 +0000
asID:                     262529
IP address blocks:        45.224.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.crl
                          rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 20:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:dd:ce:a4:da:6c:d9:81:c3:bd:a3:53:04:28:3f:93:76:93:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ABF77F47951897670C5BFDCAA35BE06D8F47F5
        Validity
            Not Before: Aug 30 20:53:30 2024 GMT
            Not After : Aug 29 20:58:30 2025 GMT
        Subject: CN=736487BBC615A8C54378D09F5FD5809E52F33B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:01:29:9d:37:24:f4:e2:70:9b:c5:fa:4b:
                    25:91:3e:30:54:6a:e6:b6:e7:64:2f:96:ec:d8:cd:
                    9a:5f:ef:f5:c4:aa:4e:fa:06:ce:7c:c4:fb:ec:f3:
                    57:45:ab:ae:e4:17:46:2f:ef:c2:fe:5e:65:84:6a:
                    15:13:78:b5:8f:d9:c9:53:1c:fc:f7:02:f5:8e:12:
                    30:01:97:2a:e9:f1:bd:07:86:b8:8d:30:5d:b0:06:
                    c1:24:a8:14:ad:f6:c1:89:ac:e4:e8:77:9c:e0:13:
                    a3:68:3c:cd:b4:dd:28:99:56:51:d8:78:0f:8c:9e:
                    7f:a9:6d:79:96:0d:6a:45:e5:0d:df:3f:c3:12:2e:
                    c7:60:1a:2e:f3:71:e4:6c:7f:3b:02:e1:f3:73:f7:
                    e1:43:79:81:0f:bc:d3:fe:88:8f:a6:5e:4a:f0:51:
                    f7:cb:4f:a3:5d:c5:16:7f:67:4b:62:ec:02:f3:3a:
                    62:7d:88:14:9e:7b:6d:54:c8:c4:e6:20:76:1b:f7:
                    66:c3:1f:ac:13:bd:97:42:ca:71:b7:c6:e4:60:90:
                    55:18:71:1d:d5:0c:f9:c8:df:54:b5:03:3a:06:c7:
                    47:e3:c1:e9:83:23:51:67:9f:61:1e:7c:ab:cc:65:
                    bf:06:a2:3b:a3:12:d4:27:8a:15:bc:22:9a:bc:05:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:64:87:BB:C6:15:A8:C5:43:78:D0:9F:5F:D5:80:9E:52:F3:3B:42
            X509v3 Authority Key Identifier:
                keyid:46:AB:F7:7F:47:95:18:97:67:0C:5B:FD:CA:A3:5B:E0:6D:8F:47:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/34352e3232342e3234382e302f32322d3332203d3e20323632353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:f8:59:6b:13:2f:a9:c9:cf:a5:2a:90:e6:0a:15:22:69:3a:
         b4:dc:e2:a3:8b:79:42:9a:b5:00:e6:3b:89:24:3b:77:4b:ec:
         75:72:f4:b1:6c:df:dd:03:8b:72:a8:2b:dc:84:c4:0e:bd:16:
         a3:0d:df:fb:eb:13:0a:dd:4b:df:23:f7:16:a4:f7:e5:8e:5e:
         54:a7:6f:2b:fe:c7:47:4f:64:d3:d8:22:3b:05:35:77:29:a8:
         ca:71:05:8b:8d:d9:ed:b6:b4:97:a0:5d:5c:b1:2a:c5:89:c4:
         09:bb:db:d0:e6:f6:f7:99:64:96:7b:37:27:dc:26:5f:5b:be:
         a2:72:8d:02:f7:8f:9c:8f:ba:d5:51:4a:c7:84:ba:12:b6:a6:
         27:7a:9e:8e:63:d4:1a:fd:a4:1b:ec:19:76:09:e7:a5:b8:48:
         3c:8b:86:09:66:8f:f8:fc:df:3d:76:b0:0e:12:59:b5:ab:67:
         79:77:bf:31:83:d2:ed:bd:d4:85:f4:c9:c2:57:03:dc:ab:28:
         da:10:e2:5f:52:1e:2a:cc:58:e6:71:a8:1c:6c:b8:2e:ff:ae:
         5a:71:8d:35:85:bf:0e:c5:6e:35:39:8b:76:3a:59:0b:2f:37:
         99:b1:fe:b3:d0:37:b2:16:f9:af:14:9a:49:b4:1e:62:f4:a6:
         66:fa:17:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:47 2025 by rpki-client