Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa
File:                     34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa (raw, json)
Hash identifier:          mBBLHsNiDUScfZPZBF00pbGRuH04ZIxsjMo8MGTbJmI=
Subject key identifier:   2F:4A:4A:62:87:91:51:01:B9:46:95:63:29:51:C8:9A:3B:38:48:C3
Certificate issuer:       /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
Certificate serial:       26F37A6D2C976623656B7C186C746BA053A199C0
Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa
Signing time:             Fri 20 Sep 2024 19:50:43 +0000
ROA not before:           Fri 20 Sep 2024 19:45:43 +0000
ROA not after:            Fri 19 Sep 2025 19:50:43 +0000
asID:                     268564
IP address blocks:        45.162.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl
                          rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f3:7a:6d:2c:97:66:23:65:6b:7c:18:6c:74:6b:a0:53:a1:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
        Validity
            Not Before: Sep 20 19:45:43 2024 GMT
            Not After : Sep 19 19:50:43 2025 GMT
        Subject: CN=2F4A4A6287915101B94695632951C89A3B3848C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:71:c1:ca:08:0e:9d:e1:d1:cc:37:8c:9a:f8:
                    7a:8c:ae:09:fa:3d:a3:61:4c:91:fe:28:47:7e:06:
                    ba:6e:aa:a3:95:3a:83:5c:11:49:37:7d:6e:6b:5b:
                    53:22:1a:41:24:09:bf:a9:12:1c:13:a7:a4:a2:59:
                    83:e3:52:8d:e9:aa:59:10:98:2e:bd:72:06:54:bd:
                    bc:41:81:1c:df:9d:ce:e0:ae:ba:e1:cc:49:bc:72:
                    a2:44:97:91:7d:f0:49:c8:7a:27:34:b0:19:fe:b0:
                    ab:ec:44:fd:a1:b7:e5:7c:db:4d:01:c7:04:c6:ac:
                    81:69:21:88:db:14:e4:a3:c1:9c:3f:a6:34:02:26:
                    fa:92:5a:3c:aa:d1:76:28:f0:ed:a9:b7:57:22:fe:
                    72:bf:81:b5:40:fe:b9:41:f6:72:c2:90:d2:64:06:
                    b4:1f:4e:7a:ac:aa:f6:22:b4:07:fb:f7:81:be:4d:
                    1a:e0:cb:28:24:8c:c1:9d:89:c7:95:72:1f:eb:07:
                    6f:ed:0d:38:c5:41:17:62:ee:1f:63:63:f4:85:e5:
                    bd:2a:b0:a0:8e:a3:bc:2d:06:aa:1b:03:1d:1e:f4:
                    21:72:82:d8:b1:5e:bf:e6:36:91:d9:41:ba:d5:30:
                    e2:99:c3:89:e0:f7:44:e4:45:f2:f6:2d:42:bf:46:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4A:4A:62:87:91:51:01:B9:46:95:63:29:51:C8:9A:3B:38:48:C3
            X509v3 Authority Key Identifier:
                keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:cf:a7:e5:07:84:9f:b9:bb:8f:9d:b7:16:4a:16:d8:07:b2:
         e9:09:16:4e:0a:53:5a:b6:81:71:63:96:fb:ae:09:5b:88:a0:
         4f:ad:61:fb:e8:e1:f2:8a:94:b8:77:a4:0b:a0:77:37:47:92:
         85:12:6c:a0:13:cd:f6:72:58:9e:5b:b5:a3:4a:ce:d7:a8:7d:
         16:ed:e3:40:25:b2:a3:5e:24:55:e5:33:39:a5:e6:65:a4:9b:
         93:ba:2b:35:2d:51:61:05:8f:53:f0:52:00:06:e9:6e:96:d1:
         96:b5:26:ce:ea:81:25:1c:1c:08:14:8d:8d:51:29:7f:71:e6:
         31:a3:6f:80:1c:25:49:06:a6:a4:ea:80:c1:b4:85:3b:95:09:
         72:6f:0e:b7:8c:b3:3a:71:81:95:1d:7b:ac:dc:34:af:fd:c6:
         2c:8a:49:9b:a5:aa:a0:53:f0:d8:62:ad:e0:53:08:9c:be:73:
         21:45:fe:71:21:c4:a5:75:6e:d0:59:78:5d:f6:5b:73:d3:0c:
         ae:5c:3f:d0:32:f0:d8:48:54:76:c6:44:86:e8:d7:17:1a:e9:
         95:8e:7f:cc:65:df:fd:24:53:1e:32:6b:b1:73:e0:e9:da:2b:
         e4:d1:1c:2a:00:2f:64:84:a8:7a:4d:d2:2c:0e:8a:a1:f2:30:
         a4:77:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org