Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31392e302f32342d3234203d3e20323638303837.roa
File:                     34352e3136392e31392e302f32342d3234203d3e20323638303837.roa (raw, json)
Hash identifier:          5xAMHVAwskgWVaNTbh3RjMAdmZfivTgpyRmTgP7eIeI=
Subject key identifier:   01:EE:0A:B5:A7:DD:B1:C4:B8:35:6B:AC:FF:24:4D:67:65:59:53:1D
Certificate issuer:       /CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Certificate serial:       62B61DFC48EC19C517462DD7D2825E81AD654D18
Authority key identifier: 45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31392e302f32342d3234203d3e20323638303837.roa
Signing time:             Tue 16 Apr 2024 13:53:51 +0000
ROA not before:           Tue 16 Apr 2024 13:48:51 +0000
ROA not after:            Tue 15 Apr 2025 13:53:51 +0000
asID:                     268087
IP address blocks:        45.169.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl
                          rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 23:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b6:1d:fc:48:ec:19:c5:17:46:2d:d7:d2:82:5e:81:ad:65:4d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
        Validity
            Not Before: Apr 16 13:48:51 2024 GMT
            Not After : Apr 15 13:53:51 2025 GMT
        Subject: CN=01EE0AB5A7DDB1C4B8356BACFF244D676559531D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:e9:78:6f:8d:dd:68:1d:d8:fe:37:96:15:
                    25:58:6f:8e:37:3d:5b:cc:e4:7a:ea:ea:dd:ba:40:
                    a8:c3:83:d4:cf:df:a7:3e:a8:c3:5b:ae:54:dd:7d:
                    b5:13:08:73:3d:23:25:2f:ba:35:4f:f3:51:92:04:
                    47:82:c2:3d:9d:68:4f:f0:be:01:bb:75:51:3c:6d:
                    1f:dc:52:8b:b9:3f:8b:1e:09:5b:d0:dc:08:e3:e4:
                    20:9b:11:34:41:13:5f:c3:02:56:a7:8a:52:9e:61:
                    c8:f8:09:3d:b0:7a:53:6a:6e:c6:b7:a2:1b:e2:05:
                    b9:70:5f:b4:b9:04:06:b1:86:cf:78:17:84:40:8f:
                    ac:1c:3e:6b:f1:9e:ab:44:ab:68:a6:d3:08:3b:80:
                    69:a4:1e:14:d5:13:fb:50:65:d0:ae:8e:38:95:00:
                    12:dc:bc:ba:b8:e8:ce:83:8e:6b:97:ea:01:35:6f:
                    8c:9f:cc:f8:d8:bb:49:5e:34:d5:2c:cc:97:4d:3b:
                    13:0b:cd:26:84:d4:11:e5:b7:56:4b:e8:09:33:e1:
                    d6:a5:6a:f7:ea:fd:77:36:95:16:13:dc:3a:85:31:
                    32:07:64:a9:bd:f5:1d:c3:e4:62:11:2f:be:54:69:
                    a3:1f:b5:05:ce:fc:b3:58:b8:a9:e2:f8:eb:ae:fb:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:0A:B5:A7:DD:B1:C4:B8:35:6B:AC:FF:24:4D:67:65:59:53:1D
            X509v3 Authority Key Identifier:
                keyid:45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31392e302f32342d3234203d3e20323638303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:90:16:7f:23:40:35:7b:c4:90:f1:9d:d7:08:75:bf:65:
         03:35:96:6c:fa:e9:cb:a6:a3:57:02:df:40:be:c1:e7:bb:a1:
         6c:6c:1a:5d:c6:33:50:05:e7:5b:8e:1a:5f:44:82:fa:ef:85:
         e2:1a:25:29:aa:df:99:cc:f0:93:75:a0:bd:65:3c:61:78:81:
         b3:50:a5:0b:ae:dd:5b:a4:60:15:13:cc:09:ec:db:ee:fa:50:
         89:e8:df:9c:ef:4d:20:9b:9f:6c:71:33:b3:de:a7:94:74:d1:
         5a:05:85:07:2d:3d:3b:7c:d5:6f:56:45:da:37:cc:5e:f4:21:
         15:1d:af:a2:37:39:b1:13:28:b0:f5:38:10:38:d2:6b:dc:cc:
         9a:99:00:2d:fc:3c:0e:31:c0:92:94:e7:fc:af:94:04:ae:9b:
         df:be:ff:c7:f4:a6:22:40:fa:45:f7:82:a8:fe:aa:60:db:ad:
         5b:17:06:84:2c:8c:0f:6f:6f:37:25:54:18:b1:61:2d:dd:89:
         3f:b5:87:09:0d:1e:80:67:48:30:d9:8d:18:20:bc:5b:0c:73:
         f8:8d:10:4e:08:af:88:6f:60:f6:42:1b:1c:81:47:cb:b8:21:
         e4:b7:35:a5:7f:40:2c:7c:53:34:f7:8c:30:1d:09:37:23:8d:
         ce:2b:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:02:07 2024 by rpki-client on console-fra.rpki-client.org