Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139342e302f32342d3234203d3e20323638343731.roa
File:                     34352e3136302e3139342e302f32342d3234203d3e20323638343731.roa (raw, json)
Hash identifier:          pnb5Mve0Ctax3Vgze8hwtLWpWJNQl/bDClqKtg5/+3Y=
Subject key identifier:   C1:F6:9D:39:EA:0F:BE:39:FA:92:6E:15:06:96:22:FC:19:95:96:3D
Certificate issuer:       /CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
Certificate serial:       7184A670C5110E6D7FF568809170EBBA6357C310
Authority key identifier: 04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139342e302f32342d3234203d3e20323638343731.roa
Signing time:             Wed 20 Nov 2024 19:20:01 +0000
ROA not before:           Wed 20 Nov 2024 19:15:01 +0000
ROA not after:            Wed 19 Nov 2025 19:20:01 +0000
asID:                     268471
IP address blocks:        45.160.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl
                          rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:84:a6:70:c5:11:0e:6d:7f:f5:68:80:91:70:eb:ba:63:57:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
        Validity
            Not Before: Nov 20 19:15:01 2024 GMT
            Not After : Nov 19 19:20:01 2025 GMT
        Subject: CN=C1F69D39EA0FBE39FA926E15069622FC1995963D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:52:07:68:75:dc:f9:f3:cc:ee:38:17:95:
                    a5:a2:a4:2c:b5:74:4c:11:9e:0d:f2:5c:87:91:39:
                    e7:c7:13:7d:2e:96:f2:b0:01:06:92:61:12:9e:67:
                    75:5a:a1:eb:d1:4e:e8:7a:f9:97:d5:0d:d7:53:b6:
                    6f:9d:c3:39:65:f6:65:68:68:9f:56:d2:e2:20:4b:
                    1e:56:66:79:96:de:75:7a:29:93:bf:1a:a0:d6:78:
                    38:24:22:2f:0a:08:c9:df:0b:9e:42:0e:a6:e4:f4:
                    98:2d:29:3f:82:dd:0d:e3:9a:49:ad:3d:36:83:cf:
                    44:aa:b0:c6:1c:56:14:3f:4e:c7:c4:14:a5:70:9b:
                    72:40:99:20:2f:e1:12:ac:9b:a5:a9:45:7c:78:5b:
                    d0:a0:eb:0f:e5:ad:3c:88:8e:a8:ce:3a:8f:e6:fc:
                    fd:5c:24:9a:cf:d4:ea:9e:03:7a:5d:a9:47:90:26:
                    a8:8a:c5:7b:56:33:9e:66:17:ec:b8:ff:46:87:16:
                    d1:f5:93:45:05:90:65:1e:27:87:60:c5:d3:28:69:
                    9f:20:f5:92:46:57:1a:72:98:fb:47:43:00:e0:80:
                    10:12:cd:27:be:38:67:96:eb:a8:7e:47:5f:99:88:
                    ed:5d:df:fe:39:45:5d:34:81:e3:8b:a4:cb:20:10:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:9D:39:EA:0F:BE:39:FA:92:6E:15:06:96:22:FC:19:95:96:3D
            X509v3 Authority Key Identifier:
                keyid:04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139342e302f32342d3234203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:2c:a1:a1:06:a5:5b:da:f2:f8:ef:3c:a3:d3:81:96:80:8d:
         de:13:c8:42:65:3b:3a:c5:06:01:b3:59:ef:1d:72:cd:d8:a5:
         2c:b6:da:74:22:86:de:d8:89:3d:8c:3e:a5:75:c7:93:7c:94:
         1a:fa:54:0d:69:96:57:23:be:5e:d3:be:05:6c:ae:55:49:84:
         e3:6d:37:ae:cb:43:6f:4c:99:07:12:43:81:93:6a:9d:88:36:
         9d:65:99:1c:17:aa:ab:98:d4:9b:40:d8:4e:0c:cb:32:95:bf:
         92:c1:25:50:6c:45:c5:91:9d:29:be:1c:07:ce:d0:95:b9:87:
         33:a3:fa:a0:12:64:4d:60:24:77:c0:d9:9e:9c:76:02:5b:d0:
         ad:dd:a9:8b:95:51:6f:8a:7a:4d:83:b3:e6:da:e3:ca:9a:ae:
         be:af:c1:f3:75:47:73:93:00:8f:a0:00:53:dd:ea:39:76:7d:
         24:d5:0e:60:89:f2:41:05:ec:17:10:c2:6f:e2:3e:0e:0a:2b:
         06:9b:71:ab:7b:3c:be:0e:16:9c:ed:e9:fe:59:bb:9b:4b:29:
         14:78:f3:20:d8:cd:77:8f:e3:8b:b5:0d:32:06:cf:8f:fd:47:
         bd:51:bf:e0:88:f8:e9:d5:ac:17:ed:7b:c2:3b:65:bb:96:7c:
         36:94:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org