Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32342d3234203d3e20323638383736.roa
File:                     34352e3137312e3132322e302f32342d3234203d3e20323638383736.roa (raw, json)
Hash identifier:          iOshgJBkW/EYqm06dcwQ+arAidl4ht5kuBjoPmoDsnA=
Subject key identifier:   55:F8:94:4F:3E:92:F6:37:A3:FB:BB:92:87:8E:28:D0:91:7F:AF:D2
Certificate issuer:       /CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36
Certificate serial:       6AC11BCCD16EBF3B99D775E6E2829F2CE28F5AD8
Authority key identifier: FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32342d3234203d3e20323638383736.roa
Signing time:             Tue 19 Nov 2024 12:43:52 +0000
ROA not before:           Tue 19 Nov 2024 12:38:52 +0000
ROA not after:            Tue 18 Nov 2025 12:43:52 +0000
asID:                     268876
IP address blocks:        45.171.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.crl
                          rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c1:1b:cc:d1:6e:bf:3b:99:d7:75:e6:e2:82:9f:2c:e2:8f:5a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36
        Validity
            Not Before: Nov 19 12:38:52 2024 GMT
            Not After : Nov 18 12:43:52 2025 GMT
        Subject: CN=55F8944F3E92F637A3FBBB92878E28D0917FAFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:ab:26:fc:b1:c7:b8:5e:f6:82:06:a2:99:
                    3f:01:fc:f5:d0:ac:a8:3c:35:6a:c6:29:1c:db:e4:
                    29:3f:84:84:60:dd:4f:b9:81:1f:0a:99:17:d5:fd:
                    62:ef:18:60:9d:e5:ac:ae:d5:d1:ac:32:1a:50:7b:
                    b9:54:55:85:ef:00:d9:53:a7:c1:03:b8:d7:f1:3a:
                    0f:82:1a:23:df:bf:8f:86:7b:40:b0:df:ae:b7:44:
                    32:39:4d:84:20:c2:cb:7b:db:39:72:b0:bc:92:28:
                    ed:b6:0f:a1:2e:9b:0f:d7:44:f4:ea:9b:15:da:db:
                    db:d1:b1:16:e4:d4:3f:8e:b1:90:32:b4:a6:65:c0:
                    23:a5:ca:4c:76:81:02:a0:69:15:1b:64:92:d6:7e:
                    cc:e2:12:20:cc:d7:c6:9e:f6:9f:51:ba:9f:76:ed:
                    ee:c4:01:0d:d2:59:d2:3e:57:38:ab:96:c6:aa:5d:
                    f1:74:ec:4e:79:a1:85:8d:f4:d8:d7:a8:9e:6c:71:
                    c4:fe:73:d6:b9:fa:06:6c:7c:bc:0b:da:e0:88:3f:
                    23:62:c1:3c:df:cc:9e:c4:9a:af:a6:23:3b:48:3d:
                    e9:9a:91:f4:b9:64:b6:46:94:25:99:6e:1f:97:e2:
                    c0:fa:af:37:92:72:c3:cc:54:40:cd:78:41:fd:bc:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F8:94:4F:3E:92:F6:37:A3:FB:BB:92:87:8E:28:D0:91:7F:AF:D2
            X509v3 Authority Key Identifier:
                keyid:FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32342d3234203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:83:a3:64:61:d2:0b:2a:4d:2d:98:1d:d3:bf:31:f0:8d:
         6c:ac:af:31:6c:c8:30:03:c7:9a:bd:a5:3c:41:28:ba:53:c8:
         3f:d9:ad:a3:97:de:fd:b8:74:f7:63:ee:ca:45:95:de:74:47:
         11:57:7c:60:22:16:07:67:1e:68:9e:3d:43:fe:33:fc:a8:91:
         fb:33:c8:2f:da:07:fc:ab:9a:94:53:35:f3:73:f1:ce:b5:62:
         2b:3f:69:06:75:eb:e1:ae:93:db:07:f9:59:f0:56:6d:ad:14:
         4f:d0:71:6e:ac:97:b1:d5:d9:a2:f9:68:a7:31:8e:f1:7d:34:
         26:47:b0:f1:38:f3:6b:7b:aa:8e:aa:34:96:b6:4b:d1:b7:89:
         dd:de:b7:d0:2f:5e:c7:5e:e1:a2:91:73:89:86:ce:51:40:7c:
         0e:55:51:0b:29:27:90:f7:b5:9f:9a:2f:34:e3:42:62:cc:68:
         80:6a:6c:65:0d:45:8f:cf:5a:24:e5:32:ec:6a:4c:6c:be:f3:
         a2:99:d9:5c:e1:ec:0b:8a:7c:1a:b5:3c:3a:21:63:5d:40:80:
         04:88:15:63:a3:38:bb:4d:dc:73:af:28:5e:9f:7e:4f:c4:37:
         96:26:3f:44:07:fd:28:47:75:fa:87:6c:f1:d5:24:d8:b8:04:
         d1:90:3f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:21 2024 by rpki-client on console-fra.rpki-client.org