Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39372e302f32342d3234203d3e20323638343633.roa
File:                     34352e3136312e39372e302f32342d3234203d3e20323638343633.roa (raw, json)
Hash identifier:          39ABjEDitAiBev8i3tZqb4p1eLr1gWgxoXDZRTyYjsc=
Subject key identifier:   D3:F6:01:03:9D:88:07:39:70:B1:88:06:87:F1:3D:28:8B:91:37:96
Certificate issuer:       /CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
Certificate serial:       684CAE776DEB020D9FE4DD2A674C194F2F0BE48A
Authority key identifier: B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39372e302f32342d3234203d3e20323638343633.roa
Signing time:             Fri 01 Nov 2024 18:05:58 +0000
ROA not before:           Fri 01 Nov 2024 18:00:58 +0000
ROA not after:            Fri 31 Oct 2025 18:05:58 +0000
asID:                     268463
IP address blocks:        45.161.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4c:ae:77:6d:eb:02:0d:9f:e4:dd:2a:67:4c:19:4f:2f:0b:e4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
        Validity
            Not Before: Nov  1 18:00:58 2024 GMT
            Not After : Oct 31 18:05:58 2025 GMT
        Subject: CN=D3F601039D88073970B1880687F13D288B913796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:7d:21:b3:6e:40:29:bb:1f:62:16:7f:34:
                    ab:1e:74:a2:32:45:4b:74:7d:47:c5:5d:77:39:c1:
                    2e:7e:56:23:8f:2f:a6:72:fe:80:9a:8d:eb:6c:86:
                    07:ea:b1:71:fc:8e:82:24:15:d2:c8:80:6f:56:34:
                    48:08:45:35:26:38:77:1b:90:35:9f:a3:a5:78:9a:
                    fb:f5:74:c0:0f:15:a4:8f:4e:3d:1f:dd:dd:e0:76:
                    5d:3b:9c:81:a3:10:b6:07:45:92:7f:67:e3:fc:07:
                    6d:67:b2:83:60:f8:d3:f3:53:ce:17:71:b0:8b:1b:
                    a1:e5:1b:96:ca:19:20:09:e7:96:5c:99:13:71:f2:
                    ea:7a:66:6b:d4:80:c0:96:dc:a4:5f:19:7a:11:42:
                    85:a4:f3:90:75:fc:16:bb:e1:b4:f3:1f:9f:17:4b:
                    29:a2:b5:20:54:ce:06:8f:e6:0e:de:e6:de:a5:9d:
                    b1:2a:93:05:d9:d6:41:73:a9:13:99:61:11:5e:5d:
                    61:d4:bb:7a:da:a2:89:87:04:7d:74:f7:75:08:fb:
                    7c:38:8f:c1:d9:11:12:8d:a2:d7:a7:25:2f:00:2f:
                    26:1f:c1:69:e3:e3:8d:a2:01:fb:c3:69:38:ef:06:
                    7d:5e:e1:3c:b9:35:93:32:9d:0c:4f:78:1f:f1:03:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F6:01:03:9D:88:07:39:70:B1:88:06:87:F1:3D:28:8B:91:37:96
            X509v3 Authority Key Identifier:
                keyid:B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39372e302f32342d3234203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:c4:3e:ab:09:ec:12:cb:88:3b:0f:3f:91:73:2b:47:47:12:
         b6:ae:5e:61:f9:96:9b:44:5c:03:0b:70:6a:c1:cf:0a:dc:95:
         d4:21:a8:a5:33:c1:dd:86:6b:79:3e:b6:eb:f5:2b:81:92:99:
         8c:9f:fe:ae:db:21:df:e0:45:29:21:5e:ba:7a:b0:38:f4:3d:
         99:de:44:67:87:21:f3:1c:59:c5:f9:bc:77:00:29:85:17:9e:
         d7:74:c0:5a:35:57:35:d3:af:81:48:0b:25:32:81:9f:84:b0:
         bf:e2:09:2c:58:da:9c:4d:e5:8d:03:3d:6f:8a:4b:3a:45:57:
         14:50:90:7b:35:cf:8b:fa:b5:18:6d:aa:bf:c1:e6:2c:4d:99:
         29:3b:e4:80:90:08:da:cf:6a:8e:21:29:d4:6c:b4:c9:67:b9:
         b7:f5:8b:f4:92:75:3a:98:3e:e2:73:a9:87:99:36:9c:5f:53:
         de:84:21:dc:3d:53:4c:23:03:80:5b:94:7a:b1:00:c6:a5:28:
         ba:3a:17:09:4e:d3:6a:a9:33:c1:9d:6f:a2:e8:e5:e0:19:e7:
         fe:70:c9:d8:fa:92:cb:1b:fc:d9:f7:b3:e7:ff:38:d8:05:54:
         a0:cd:6c:97:b9:48:1b:66:00:f5:3a:83:ab:5b:26:aa:3e:65:
         31:12:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org