Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa
File:                     34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa (raw, json)
Hash identifier:          +9XBEjPsIIoxE8uENyyLxxiTfY3NG/2OI2CUiWOC51A=
Subject key identifier:   31:62:E9:31:57:BD:32:51:FD:5C:9A:BB:50:5C:65:C5:4D:EC:EB:80
Certificate issuer:       /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
Certificate serial:       69BC62951045745B189F9F50C6604AF6A53477C6
Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa
Signing time:             Fri 20 Sep 2024 19:50:43 +0000
ROA not before:           Fri 20 Sep 2024 19:45:43 +0000
ROA not after:            Fri 19 Sep 2025 19:50:43 +0000
asID:                     268564
IP address blocks:        45.162.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl
                          rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bc:62:95:10:45:74:5b:18:9f:9f:50:c6:60:4a:f6:a5:34:77:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
        Validity
            Not Before: Sep 20 19:45:43 2024 GMT
            Not After : Sep 19 19:50:43 2025 GMT
        Subject: CN=3162E93157BD3251FD5C9ABB505C65C54DECEB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:ee:54:b6:e4:66:3a:51:f6:c4:ec:3c:c0:
                    ca:26:b8:92:8e:15:17:db:c4:db:de:0f:5a:fa:8f:
                    ef:48:d4:e2:8a:71:f2:b4:d7:12:03:e5:fb:de:5a:
                    68:45:3c:94:74:1a:57:e8:d5:af:cb:ae:64:16:b8:
                    4f:64:92:a7:66:92:63:1e:cd:14:c7:e2:4d:85:ac:
                    07:da:24:27:a1:b4:23:3a:29:0c:c2:2a:15:d9:56:
                    fa:2e:e3:3f:08:60:35:9b:09:21:ed:3a:1d:16:ac:
                    ac:4e:8b:81:a6:f4:ba:2e:bd:6d:c9:62:17:c5:22:
                    73:ff:bd:f3:5f:4b:fe:2a:bc:df:fd:f6:a6:1f:ff:
                    e2:e8:53:44:4c:6e:07:83:d8:a1:e3:6c:04:59:f2:
                    74:b6:79:c8:de:02:8a:57:ff:24:7a:14:4d:c1:1a:
                    5a:ee:79:61:a6:8f:d4:fc:53:21:25:9b:b1:09:cd:
                    72:b5:24:80:77:66:32:0c:78:bc:b6:df:a4:36:ae:
                    ab:db:fb:14:3e:24:58:a2:94:75:2b:b0:7e:13:25:
                    1b:98:3a:0f:30:78:2f:fd:04:2a:e4:74:9f:a3:a9:
                    03:9f:ef:2d:e5:ee:b8:66:4a:d6:a3:0c:60:4e:60:
                    3a:05:25:e9:3b:0f:7d:04:a6:cc:2e:e3:67:03:ac:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:62:E9:31:57:BD:32:51:FD:5C:9A:BB:50:5C:65:C5:4D:EC:EB:80
            X509v3 Authority Key Identifier:
                keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:cd:11:8a:e9:bf:1e:30:ab:83:c4:fa:df:39:4a:59:52:
         ee:dc:1e:8b:23:5f:e6:f5:71:f7:d5:d9:78:fe:76:14:fd:d5:
         72:18:04:ce:ad:16:82:fc:96:f4:97:1f:cf:52:4a:23:57:de:
         22:92:6d:05:98:ea:f4:0c:d9:12:2c:d1:c0:7c:9f:1d:a5:0e:
         43:08:93:56:87:70:1c:2a:43:dc:f4:55:86:36:1b:cf:5c:2d:
         c5:2e:64:86:4b:a8:94:8f:e6:46:ff:2c:35:b9:13:0e:07:82:
         b1:29:c2:2c:5c:e2:1a:54:d2:6c:4e:39:45:86:d8:7c:31:49:
         3e:e2:dc:eb:aa:f1:ab:af:d1:19:1a:a0:a9:9e:8b:d1:c2:94:
         a8:b9:31:11:e1:07:b8:6b:cc:b4:5e:2c:19:dc:da:e1:ed:93:
         f9:02:80:61:d7:e3:67:8a:a8:7a:ab:eb:08:de:26:71:03:1b:
         93:a1:73:ba:01:46:6d:fe:f7:22:87:e4:aa:3e:89:94:45:72:
         f5:8f:7c:55:2c:3c:fd:4b:34:9e:51:00:12:d7:be:81:15:a8:
         04:1c:20:ac:55:4d:eb:d0:09:66:48:25:9b:a7:3b:ed:11:4f:
         5a:90:a1:7c:8c:85:86:a6:80:3f:64:a0:5b:d4:47:f4:f2:da:
         a7:db:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:41 2024 by rpki-client on console-ams.rpki-client.org