Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa
File:                     34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (raw, json)
Hash identifier:          Swr3zUSynVKriES46fIeT7N7FMRUV22WemjMyEc1kc8=
Subject key identifier:   5E:79:B4:D7:78:C4:16:9B:91:34:A3:E1:95:4F:13:96:7A:3C:10:03
Certificate issuer:       /CN=9A72AC165710D3D2240950F90FF41932E5992CFB
Certificate serial:       7EB59998A47824A09E5BC30A401714BAE705C436
Authority key identifier: 9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa
Signing time:             Wed 03 Apr 2024 23:33:31 +0000
ROA not before:           Wed 03 Apr 2024 23:28:31 +0000
ROA not after:            Wed 02 Apr 2025 23:33:31 +0000
asID:                     269079
IP address blocks:        45.179.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b5:99:98:a4:78:24:a0:9e:5b:c3:0a:40:17:14:ba:e7:05:c4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Validity
            Not Before: Apr  3 23:28:31 2024 GMT
            Not After : Apr  2 23:33:31 2025 GMT
        Subject: CN=5E79B4D778C4169B9134A3E1954F13967A3C1003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:4e:04:b7:2a:21:95:a0:cc:ce:05:d6:28:
                    89:23:94:a6:63:c8:ce:14:82:36:e7:e7:08:fe:69:
                    4a:c5:01:ff:49:8e:b7:e2:f0:96:1e:b1:79:bf:a2:
                    c5:94:62:2a:d9:e3:1f:73:b6:50:f4:6f:ed:3d:cb:
                    22:dd:eb:6f:8e:98:e4:6b:f8:a2:46:34:fe:2f:6a:
                    f1:00:e2:c9:6d:f1:63:6c:68:f2:63:56:50:53:a2:
                    94:c0:39:4b:5c:21:ba:f3:59:0b:79:ab:bd:89:12:
                    f2:01:d1:54:86:00:d6:6d:8c:d6:81:f2:d8:62:fd:
                    82:13:5a:c3:70:89:fa:4b:a5:07:da:ba:d6:52:58:
                    5d:5f:bb:8b:02:c1:a7:60:f4:63:56:56:2c:04:d5:
                    5b:40:78:1d:2e:3b:2c:c2:be:31:87:da:25:1d:d4:
                    99:96:06:e2:68:31:3a:56:a2:84:d0:8e:5d:d7:e2:
                    55:dd:5c:6a:3e:33:98:07:91:81:60:80:ad:be:ec:
                    04:74:dd:2c:5a:a5:37:ca:76:2b:34:50:49:5d:5f:
                    12:d2:25:4a:22:59:e3:d5:4c:d3:c2:4d:f7:17:83:
                    d9:49:d7:8e:3c:9c:34:39:01:c5:38:3d:47:5a:d5:
                    73:3e:29:5a:d0:40:d6:02:1d:3e:6a:6d:03:10:d5:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:79:B4:D7:78:C4:16:9B:91:34:A3:E1:95:4F:13:96:7A:3C:10:03
            X509v3 Authority Key Identifier:
                keyid:9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:22:3b:0d:60:af:d4:ec:44:ca:4b:21:8a:d3:05:64:77:
         5b:97:b1:28:b9:ff:ab:10:90:62:94:85:78:d6:99:75:48:67:
         fb:87:92:6c:35:7c:01:37:85:b7:b7:ee:14:e2:bd:9b:ea:67:
         9e:41:9b:bc:89:22:c4:b2:a2:cb:73:48:00:df:8b:4f:0b:81:
         1f:09:c4:65:db:74:07:ce:93:a8:73:f7:b3:4d:50:9b:7c:bb:
         6a:8b:cf:0a:2d:a2:7f:6d:ec:0c:9e:67:1d:65:b3:ea:ff:23:
         72:35:66:7f:2e:d5:db:86:0c:4e:82:45:0b:1d:5f:9b:df:3c:
         9a:97:45:be:d3:33:b7:9b:05:3d:5f:30:41:fa:ed:81:f9:98:
         89:91:38:85:89:1b:c2:ba:00:15:2d:a3:b7:58:38:37:05:01:
         57:e7:4a:65:f0:9a:23:f7:61:b8:3b:18:c9:35:99:5a:92:9f:
         25:19:3f:4f:95:7b:32:02:6b:83:78:20:1f:9f:21:90:c3:72:
         b3:53:1f:f6:8e:5c:1d:50:72:30:13:46:f5:bd:2e:66:0f:57:
         6b:96:bb:b9:83:3f:4a:ab:cf:cc:cf:a7:26:ea:0d:84:9f:c8:
         8c:b9:11:61:e0:a3:24:81:31:8a:5f:23:be:22:16:8a:1b:01:
         fa:3f:1d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org