Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139322e302f32322d3232203d3e20323638343731.roa
File:                     34352e3136302e3139322e302f32322d3232203d3e20323638343731.roa (raw, json)
Hash identifier:          tKnBlsOMGbN+026zBxLKirMSEbDtCrau86b+vYI86aM=
Subject key identifier:   34:3F:50:10:89:1C:94:B2:45:12:48:79:2C:3A:D7:A5:BC:2F:72:C5
Certificate issuer:       /CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
Certificate serial:       53938C300BD831DE9D6C098B1F9E8988B1BEDB7F
Authority key identifier: 04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139322e302f32322d3232203d3e20323638343731.roa
Signing time:             Wed 20 Nov 2024 19:17:24 +0000
ROA not before:           Wed 20 Nov 2024 19:12:24 +0000
ROA not after:            Wed 19 Nov 2025 19:17:24 +0000
asID:                     268471
IP address blocks:        45.160.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl
                          rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:93:8c:30:0b:d8:31:de:9d:6c:09:8b:1f:9e:89:88:b1:be:db:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
        Validity
            Not Before: Nov 20 19:12:24 2024 GMT
            Not After : Nov 19 19:17:24 2025 GMT
        Subject: CN=343F5010891C94B2451248792C3AD7A5BC2F72C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:9e:84:31:80:23:41:fa:a3:1a:a2:63:87:
                    d2:df:56:1f:3d:27:d6:1e:c2:09:48:28:42:69:fc:
                    48:ea:5a:94:7b:c3:47:af:f2:2f:ec:59:96:57:51:
                    10:ed:bc:41:5e:b1:0d:a3:76:f7:0a:3c:6b:a8:4c:
                    9a:ac:77:e8:36:16:1c:c4:2f:fd:66:b9:d8:f8:82:
                    c6:54:80:cf:8c:20:03:4d:11:25:3f:aa:6d:ea:a5:
                    fd:f4:b3:d0:3b:40:0a:2d:54:98:6b:8c:dc:45:f5:
                    3c:ba:06:c0:ba:04:d8:0d:f1:52:04:3f:13:b6:be:
                    dd:58:08:d1:0e:0c:bb:f4:6a:a6:b5:84:8a:16:0f:
                    1f:cd:d5:4e:48:b5:31:ea:0a:08:26:39:3d:98:2d:
                    26:f7:e0:a2:1e:fc:a7:95:46:7a:da:df:7e:e2:f2:
                    c4:db:02:dc:53:c1:fc:54:35:1c:90:71:8f:25:4d:
                    37:34:41:c2:f0:22:54:3e:98:3b:e6:04:62:ec:6b:
                    0b:ad:9a:91:d6:b1:f4:9c:fd:09:89:85:d2:94:bc:
                    52:dd:70:52:da:8a:05:1a:70:48:b1:1f:6a:ed:aa:
                    ee:f7:11:1a:a8:e8:19:d4:45:13:ca:f3:4f:5e:d8:
                    8a:a6:5f:8f:f2:65:66:b5:33:dc:6a:15:13:4b:12:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3F:50:10:89:1C:94:B2:45:12:48:79:2C:3A:D7:A5:BC:2F:72:C5
            X509v3 Authority Key Identifier:
                keyid:04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139322e302f32322d3232203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:f8:67:9c:d4:5a:c6:41:c7:65:b9:b3:42:fb:2f:12:7c:
         92:36:d5:4f:64:6e:39:a6:74:30:68:61:c4:02:0d:50:17:82:
         37:0f:18:33:92:6b:97:86:61:80:24:18:ac:d9:cf:dc:e8:9f:
         56:f8:a4:4f:05:c2:0e:c0:24:c5:c7:cc:1d:96:05:c6:60:06:
         50:23:b9:48:98:3c:99:92:31:0d:c9:0e:11:c3:25:2f:52:6a:
         b8:5a:96:4b:df:ce:90:07:e8:1a:65:59:d7:fa:a3:2c:46:b0:
         c2:03:e9:bb:6d:4a:fb:2b:2b:71:76:7c:79:a8:db:78:23:45:
         fd:15:e1:97:a9:ef:42:cc:9a:59:2c:e9:cf:e8:a0:f2:c4:2b:
         a2:c2:df:6e:29:04:b6:86:a9:e2:63:82:6b:c4:07:33:6d:50:
         ae:0e:09:c4:f5:cd:a5:38:cd:2f:c3:6b:55:8d:bc:6e:f1:a9:
         b4:0b:dc:d5:ae:bf:53:c4:89:57:07:ff:16:fe:21:bc:b5:5c:
         22:ae:b3:c7:39:c3:3f:5e:de:d8:e9:4c:b1:42:11:72:75:78:
         56:2b:7e:63:e0:14:3a:01:b6:1d:a6:f6:8a:ae:a8:ae:3d:6b:
         95:bb:ce:f6:2c:3d:96:0e:e8:11:4e:ea:ea:36:63:10:07:38:
         ac:64:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org