Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32332d3233203d3e20323638343633.roa (raw, json)
Hash identifier:          YK6ZnRP73n4n+QC/S0DU8PbUttsZEH7Arc1HxTqWW7w=
Subject key identifier:   DF:5F:59:E7:B8:21:86:CA:4A:30:EE:20:17:70:42:AF:13:F4:D4:7F
Certificate issuer:       /CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
Certificate serial:       0D363F7F561266CE73C8D78BF762428D19647FA9
Authority key identifier: B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa
Signing time:             Thu 04 Apr 2024 10:14:52 +0000
ROA not before:           Thu 04 Apr 2024 10:09:52 +0000
ROA not after:            Thu 03 Apr 2025 10:14:52 +0000
asID:                     268463
IP address blocks:        45.161.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:36:3f:7f:56:12:66:ce:73:c8:d7:8b:f7:62:42:8d:19:64:7f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
        Validity
            Not Before: Apr  4 10:09:52 2024 GMT
            Not After : Apr  3 10:14:52 2025 GMT
        Subject: CN=DF5F59E7B82186CA4A30EE20177042AF13F4D47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:86:04:0e:a3:86:d1:b7:38:80:d0:81:6d:
                    05:03:a8:a8:8b:70:42:51:81:d1:7a:00:30:22:52:
                    98:d0:77:9e:6a:34:38:ee:dd:64:87:26:e9:d4:23:
                    ba:64:55:b3:92:d0:f8:9e:ed:ae:3f:be:4b:10:0f:
                    fe:52:37:d0:b5:58:9d:ef:c4:33:db:c3:90:ed:4a:
                    49:80:0f:92:0f:06:07:b0:52:ef:dc:8d:97:84:de:
                    ea:a0:06:d6:4f:bd:60:7d:c7:29:2e:77:29:93:da:
                    09:3a:64:15:d6:45:5b:9a:6a:7f:5e:d0:e1:f5:2f:
                    5c:83:3e:66:87:7e:00:02:05:0b:9f:bd:d5:3c:70:
                    bf:c7:e7:4a:a2:e8:05:3c:4f:21:ff:d0:0c:14:47:
                    fb:bc:47:45:b6:bb:6f:59:99:ec:96:1f:1e:ba:6a:
                    74:7d:2e:e8:9f:76:5f:c6:45:4a:6e:2f:de:e7:87:
                    3a:db:fe:b2:f7:12:61:35:5c:e6:c9:31:bb:9f:ce:
                    03:62:c1:7d:6a:5a:1b:d1:ef:01:34:68:1a:a2:8b:
                    87:d5:a4:30:4c:34:37:6a:b8:51:08:5e:72:dd:fa:
                    3d:d7:f4:3c:8a:d2:59:60:7e:2f:c8:ed:63:f7:42:
                    d9:4c:06:82:1c:62:c6:e8:6d:ce:32:c1:11:9d:d9:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5F:59:E7:B8:21:86:CA:4A:30:EE:20:17:70:42:AF:13:F4:D4:7F
            X509v3 Authority Key Identifier:
                keyid:B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:06:96:d6:d2:a1:bc:42:3f:cf:bc:82:6b:ed:c5:4d:86:b7:
         c3:1a:77:17:04:95:01:62:21:4e:49:78:44:8f:62:58:ee:a8:
         58:6f:19:44:fd:2d:0e:aa:7b:2f:a4:f0:09:7d:12:84:97:64:
         e5:53:34:50:75:be:85:21:9c:c4:20:1e:40:30:c5:ab:ef:af:
         f5:7a:a1:88:65:21:aa:4f:ee:0a:a5:f6:e9:ca:17:da:15:60:
         2f:56:16:1d:88:1c:c0:4b:dd:de:8f:79:e1:aa:5f:96:8c:ff:
         c3:2c:48:31:b5:f0:a3:96:df:45:19:d2:17:df:53:d2:30:44:
         10:8d:db:62:b8:c8:30:05:bf:f0:dd:93:25:9c:fd:00:ac:3d:
         ab:2c:65:d1:0d:b9:63:cb:57:a1:af:9c:b7:cd:25:4a:c0:77:
         65:84:a8:db:cd:14:66:73:24:de:5a:a3:08:ce:40:7a:01:3d:
         df:3f:33:83:e7:15:e8:f2:3e:fb:cb:3e:28:e1:19:2e:2a:73:
         ad:6b:fd:29:ae:cf:93:7e:22:6f:b5:c8:a4:97:78:fd:4f:8a:
         69:f9:f3:7a:cf:62:15:3c:82:93:48:a7:7d:7f:2a:56:39:e2:
         9b:94:91:a1:97:5b:1f:56:08:43:86:67:a4:3c:a5:0c:0e:0d:
         50:75:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org