Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa
File:                     34352e3233312e31372e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier:          fvADmLTQiZprE4ys2HrO7xjJy+5C3ifrPZQNEB09WTs=
Subject key identifier:   15:22:09:D6:62:E8:2F:DC:D1:89:7B:24:AD:B0:50:5A:10:EA:DF:D5
Certificate issuer:       /CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Certificate serial:       3D29B04691852C87BD364FA3E16453EC6780F4AB
Authority key identifier: 60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa
Signing time:             Thu 04 Apr 2024 11:50:50 +0000
ROA not before:           Thu 04 Apr 2024 11:45:50 +0000
ROA not after:            Thu 03 Apr 2025 11:50:50 +0000
asID:                     267191
IP address blocks:        45.231.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:29:b0:46:91:85:2c:87:bd:36:4f:a3:e1:64:53:ec:67:80:f4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
        Validity
            Not Before: Apr  4 11:45:50 2024 GMT
            Not After : Apr  3 11:50:50 2025 GMT
        Subject: CN=152209D662E82FDCD1897B24ADB0505A10EADFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:a7:54:3f:9b:5a:eb:ec:3f:0e:96:9b:08:
                    15:29:5a:89:04:1c:dc:46:3a:e8:8a:bc:49:dc:3c:
                    cc:fa:64:0f:72:e4:71:1b:ef:9f:22:6e:20:78:d5:
                    ca:f5:b3:b0:08:d9:00:f3:c9:51:66:f3:e8:8a:0d:
                    79:bd:1d:f0:2c:fb:3f:29:ee:53:ff:1c:b7:62:b6:
                    b2:2e:89:36:6e:5a:87:58:6f:96:22:4b:9f:8d:78:
                    83:b6:80:07:e8:fb:88:bb:8d:e4:7c:d5:1c:8a:82:
                    82:71:c3:ad:80:9d:77:10:e9:a4:1e:a4:d6:d8:f7:
                    1a:95:2a:b4:e7:8a:73:97:c4:c8:98:15:0e:f7:ed:
                    2f:31:9d:9c:e3:e7:89:69:ce:19:50:f9:35:a6:01:
                    59:81:9b:1e:10:ba:06:af:f3:0a:fb:4b:42:e0:d7:
                    b2:3b:b3:7f:99:85:f0:91:c1:25:3f:45:34:de:85:
                    b2:78:4b:0c:1f:2e:57:74:9f:f5:da:85:c1:af:e4:
                    84:3e:a0:23:70:78:b5:cc:7d:eb:92:7a:c9:28:eb:
                    b6:b3:fc:0b:6f:6e:34:e7:8a:c4:91:cb:5d:4c:4b:
                    18:c9:78:5a:a0:2f:b3:03:e5:64:54:9d:ba:ea:13:
                    26:aa:05:28:35:a3:06:63:89:15:5c:d8:7e:c1:4a:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:22:09:D6:62:E8:2F:DC:D1:89:7B:24:AD:B0:50:5A:10:EA:DF:D5
            X509v3 Authority Key Identifier:
                keyid:60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:75:d6:7a:f6:d9:08:6e:7b:75:80:00:d1:10:ef:22:45:86:
         48:e9:1e:a6:31:84:20:16:e7:33:e5:eb:a1:fe:cc:83:a2:80:
         0f:47:ee:2d:06:1b:27:bf:46:0f:ee:c9:a5:72:d1:e1:9b:b6:
         dc:55:b6:5a:fc:ed:02:1a:75:ec:4f:21:bf:96:8e:33:ab:5f:
         2c:be:9f:71:8b:81:ac:db:96:79:8f:4e:37:5e:24:ae:2d:ef:
         0e:b3:a2:44:e3:1c:2a:c2:d9:7e:b0:28:2c:f5:c1:04:fc:e2:
         a4:c4:63:78:45:d2:b6:cd:48:0b:46:48:d7:90:db:52:45:76:
         18:57:8b:ce:78:f2:9e:c9:f1:7d:4c:14:ad:1a:49:fa:8b:75:
         3c:37:a4:8d:76:6f:9a:22:88:7b:b9:5b:a2:cb:04:27:d2:18:
         19:ca:e9:dc:e7:9f:0e:6f:06:76:a7:8d:62:42:b2:74:0a:6c:
         32:94:4b:27:98:5f:46:60:73:85:f8:ed:d8:e8:cb:eb:ad:51:
         e5:d0:3d:a6:e0:1f:16:23:77:64:1d:eb:42:a8:2f:4a:39:c9:
         c2:00:e2:db:9c:e2:e7:e9:b9:01:52:ac:c9:61:da:93:e0:2e:
         67:29:c8:73:09:56:e5:0e:db:29:3f:ac:10:dc:d6:9e:58:6b:
         b7:34:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:36 2024 by rpki-client on console-fra.rpki-client.org