Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/3137302e38332e3135382e302f32332d3233203d3e20323636343833.roa
File:                     3137302e38332e3135382e302f32332d3233203d3e20323636343833.roa (raw, json)
Hash identifier:          9MxV5yxOwp/02aPpqdwakoTJkr3otZPlUhMbfzvpBGA=
Subject key identifier:   FB:ED:63:EA:1C:1A:05:A8:E0:A8:F6:7C:56:53:75:72:C3:47:B2:30
Certificate issuer:       /CN=045C70D44AB71632AB16AA37E88D48AC51F08992
Certificate serial:       46B304265DFDF7204035E8CF552A20FD8540D2A6
Authority key identifier: 04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/3137302e38332e3135382e302f32332d3233203d3e20323636343833.roa
Signing time:             Mon 11 Nov 2024 12:22:39 +0000
ROA not before:           Mon 11 Nov 2024 12:17:39 +0000
ROA not after:            Mon 10 Nov 2025 12:22:39 +0000
asID:                     266483
IP address blocks:        170.83.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl
                          rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b3:04:26:5d:fd:f7:20:40:35:e8:cf:55:2a:20:fd:85:40:d2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045C70D44AB71632AB16AA37E88D48AC51F08992
        Validity
            Not Before: Nov 11 12:17:39 2024 GMT
            Not After : Nov 10 12:22:39 2025 GMT
        Subject: CN=FBED63EA1C1A05A8E0A8F67C56537572C347B230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:42:af:f5:1b:c6:b8:61:11:95:69:e1:0b:
                    23:9f:22:b3:3e:72:bc:28:8a:dc:93:3e:dc:c9:93:
                    d4:68:96:ea:f0:55:f3:36:1a:73:58:ac:3b:f0:b6:
                    d7:32:30:1e:48:8e:84:b3:6b:2e:c7:28:52:51:45:
                    51:d9:2b:3a:31:a5:66:49:14:d4:3f:c4:39:99:43:
                    f9:db:84:e5:3f:09:73:ac:78:4a:9a:58:d3:e3:67:
                    ba:5f:eb:4e:69:10:94:77:aa:31:e6:46:60:dd:aa:
                    40:4c:01:e3:c5:1a:8f:fe:bd:a9:d4:50:45:19:4a:
                    f2:de:4f:a8:d5:87:84:62:b3:a9:22:5b:0d:21:f6:
                    c6:10:6a:da:0b:e0:54:4a:65:5b:76:81:ef:68:5e:
                    19:54:e8:09:bc:b3:f0:39:e0:e8:1a:50:00:78:99:
                    8b:f9:0c:5b:02:db:b2:fe:78:11:63:7e:cd:d0:7d:
                    11:2b:d8:5a:76:f7:d3:cb:14:df:03:c8:f4:62:ce:
                    b6:31:cd:31:5b:78:a1:e7:db:0c:54:e0:38:c6:a9:
                    d1:f4:8e:b7:fd:88:ca:01:a8:df:b8:f4:93:5f:60:
                    75:18:14:89:6a:3d:f3:6c:aa:f8:c9:2a:87:10:1f:
                    58:2d:79:86:2f:89:c0:ba:57:2e:fe:5c:e4:e2:de:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:ED:63:EA:1C:1A:05:A8:E0:A8:F6:7C:56:53:75:72:C3:47:B2:30
            X509v3 Authority Key Identifier:
                keyid:04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/3137302e38332e3135382e302f32332d3233203d3e20323636343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:18:36:2d:66:ac:2d:93:cb:ca:71:79:5f:e1:74:97:6d:
         65:3a:ac:f0:a2:cd:86:53:d2:07:13:43:f6:a2:bd:d3:62:7b:
         47:5a:92:17:16:c4:e9:78:8f:a2:bc:b2:69:ea:98:5a:df:be:
         77:d7:ed:75:02:51:27:2a:02:49:73:dc:5b:f9:44:1a:34:65:
         9b:59:34:9b:5a:11:bc:ed:2d:56:b0:ff:c6:39:ed:a7:02:4c:
         03:a1:8e:b3:4a:1e:0b:3d:b1:1f:9a:e5:88:a5:a2:23:4a:12:
         f2:5e:1c:56:c7:c8:36:72:75:29:ed:d0:d2:40:1f:a0:88:e2:
         2f:f6:72:9b:8c:24:2f:e7:d2:5e:16:29:4a:f4:d6:c6:fb:94:
         8f:0e:31:b1:45:a4:1b:ac:6c:ed:98:e5:54:3d:96:b6:5c:83:
         c8:af:5b:b7:48:35:56:08:e6:65:3f:f5:f6:0c:6f:95:63:ce:
         1d:e8:c2:0d:c0:f0:d8:4c:74:89:41:5d:ab:12:4f:f7:a6:e5:
         14:17:92:4d:6f:32:35:e8:7a:df:fc:8d:3b:45:b0:8b:a8:ff:
         d4:a9:2c:0a:4e:7f:41:9d:00:ef:33:b6:89:71:94:fb:12:b1:
         bb:48:6d:6d:a0:f2:f1:48:10:a1:ae:86:b5:6a:7a:73:bf:ac:
         16:3b:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org