Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32342d3234203d3e20323638333732.roa
File:                     34352e3233392e3134382e302f32342d3234203d3e20323638333732.roa (raw, json)
Hash identifier:          mVkRDgSnWKtm/hqkpkCLFhY72dpcWzmFAwSKzxnX5B4=
Subject key identifier:   D5:0D:26:DF:3C:16:9E:8D:2F:C2:96:E3:08:42:A9:82:4C:94:02:17
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       5BB1813BA797208D409DFB3635939863046B6221
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32342d3234203d3e20323638333732.roa
Signing time:             Tue 10 Dec 2024 12:53:41 +0000
ROA not before:           Tue 10 Dec 2024 12:48:41 +0000
ROA not after:            Tue 09 Dec 2025 12:53:41 +0000
asID:                     268372
IP address blocks:        45.239.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
                          rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b1:81:3b:a7:97:20:8d:40:9d:fb:36:35:93:98:63:04:6b:62:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Dec 10 12:48:41 2024 GMT
            Not After : Dec  9 12:53:41 2025 GMT
        Subject: CN=D50D26DF3C169E8D2FC296E30842A9824C940217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:01:c6:1e:70:03:09:72:f4:3b:00:19:40:
                    f5:1b:1e:56:0b:2d:03:4c:99:c8:c5:cd:27:7b:b1:
                    74:bc:2c:b6:90:cf:30:00:6c:5b:ae:95:c1:be:ec:
                    a2:d6:83:9d:7a:b7:9a:98:d4:11:51:74:49:33:fc:
                    a1:9e:16:1e:96:b9:88:49:a2:95:f3:51:89:42:83:
                    1f:3d:ed:35:f3:65:2b:8b:4f:5a:c8:7b:f5:fa:a8:
                    40:cd:33:cd:18:98:6e:9c:95:12:e4:b1:6e:9d:a5:
                    56:a1:a0:54:81:81:e4:ba:54:4d:36:60:fd:dc:76:
                    2f:4d:f2:1e:1d:a0:4b:7e:91:1e:a8:c2:bc:6f:8b:
                    4f:a9:a1:bb:83:94:c4:3a:dc:09:24:3e:73:b5:63:
                    68:a9:e2:99:2b:b8:70:5c:6b:84:54:85:04:89:74:
                    cc:0e:fc:0c:47:3f:01:4a:3c:1f:f6:0d:af:16:e7:
                    54:3c:2b:cb:9d:9c:43:e6:7c:ff:fe:10:1d:5c:65:
                    c4:3c:f8:7c:0c:92:9b:de:d4:d8:41:3b:86:1e:ea:
                    d0:9c:8a:41:f5:e8:14:6e:7b:b1:d7:12:04:fa:2f:
                    b8:7a:d1:61:fb:15:f5:25:48:a4:0b:d8:8a:58:58:
                    11:21:d6:39:b4:fe:5d:1d:4b:11:29:7d:a0:79:bb:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0D:26:DF:3C:16:9E:8D:2F:C2:96:E3:08:42:A9:82:4C:94:02:17
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32342d3234203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:de:29:23:e7:9e:8a:cd:11:4f:f5:c7:80:14:de:7f:30:38:
         c4:94:a3:4b:42:38:9e:11:32:54:8d:17:72:bc:0a:ad:f3:70:
         5d:0b:e4:1c:69:80:61:eb:56:50:f8:33:55:8f:cf:6d:03:dc:
         30:3d:7d:7f:43:c8:2a:d6:49:82:06:81:39:38:5b:57:10:02:
         37:74:98:30:a5:c8:1f:5d:95:06:33:21:2f:72:64:64:1f:b4:
         c7:89:a5:74:77:d7:dc:ce:72:5d:7b:e9:06:00:28:aa:01:61:
         a8:58:af:f7:b6:37:2a:0a:52:14:8a:f1:29:99:55:7c:46:81:
         6d:c0:63:29:2e:0f:38:1f:4c:b8:50:1b:61:cd:38:e9:96:79:
         e5:0a:4e:a2:ef:53:2a:db:3a:e4:e0:8a:30:a5:4b:7a:a0:bd:
         9b:c9:4d:60:85:29:f0:46:88:56:4c:b5:07:26:d2:25:61:13:
         b4:b3:df:8f:35:85:13:9a:fb:41:05:59:ce:55:99:94:7b:db:
         fe:1d:43:b7:e0:d8:cf:33:2f:f1:69:23:20:d2:62:3a:81:54:
         ed:ce:ce:15:7c:e4:1e:44:e8:38:4a:c9:f0:20:84:e8:ca:4d:
         21:44:85:6b:f7:16:cc:70:47:60:c9:ba:92:f2:08:77:de:86:
         58:00:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:39 2025 by rpki-client