Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa
File:                     34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa (raw, json)
Hash identifier:          U/wRhR9juBoXSaf4r2zLU2FFNijYzVmd9Ies5H8AQqU=
Subject key identifier:   6E:AD:2A:C5:97:47:42:A6:E8:06:49:76:A6:1C:16:BC:12:08:63:3D
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       33024ABFC9B7C631C09E9C091F5E43016287F1CE
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa
Signing time:             Thu 04 Apr 2024 05:26:14 +0000
ROA not before:           Thu 04 Apr 2024 05:21:14 +0000
ROA not after:            Thu 03 Apr 2025 05:26:14 +0000
asID:                     268068
IP address blocks:        45.168.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:02:4a:bf:c9:b7:c6:31:c0:9e:9c:09:1f:5e:43:01:62:87:f1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Apr  4 05:21:14 2024 GMT
            Not After : Apr  3 05:26:14 2025 GMT
        Subject: CN=6EAD2AC5974742A6E8064976A61C16BC1208633D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:48:c8:ea:a5:3b:43:13:55:a2:8e:27:32:73:
                    92:df:24:f9:39:2f:22:21:37:d3:93:28:1a:26:50:
                    6e:77:78:7a:d3:5e:37:54:ac:88:18:71:30:56:fd:
                    38:04:fd:9c:e8:f8:99:f5:26:45:3e:27:a8:a2:95:
                    f3:b6:7f:e7:17:d7:91:85:e4:46:9e:4a:0f:d7:c3:
                    10:f2:ad:2f:32:c1:c4:08:16:5f:09:ef:fa:38:eb:
                    68:7d:86:dc:64:97:96:ec:6d:97:5a:3b:86:b0:cc:
                    9a:c3:d7:16:09:f4:2b:20:3e:a0:56:27:20:4f:bb:
                    7f:66:f3:d9:59:95:0a:50:66:9e:9f:9f:2e:a8:2c:
                    94:00:a2:31:f6:11:72:5e:5c:2f:e5:3f:20:93:4b:
                    43:9b:7a:91:a0:43:5c:a3:b1:95:93:8f:30:82:8e:
                    db:ae:b1:55:e9:98:a4:78:76:95:56:5d:7d:13:35:
                    f5:93:32:72:39:fb:01:31:4f:81:45:48:b7:c7:e8:
                    08:b8:54:dd:88:6f:89:1b:6b:b3:de:54:55:2c:af:
                    fa:84:74:99:f2:f0:3f:5a:01:71:91:e2:5f:3b:30:
                    1d:8c:10:e4:d3:1e:f0:4e:ca:64:ac:57:2f:4a:1a:
                    b7:d6:42:f2:98:93:a8:2d:b0:41:0a:b0:77:3f:9e:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AD:2A:C5:97:47:42:A6:E8:06:49:76:A6:1C:16:BC:12:08:63:3D
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:81:02:a0:a7:5a:ba:fa:93:a3:9b:c5:69:d5:8f:dc:40:30:
         c2:af:25:65:1e:af:ef:d5:e9:bd:13:32:59:90:58:a9:f8:bc:
         6b:54:c3:57:da:76:ff:05:12:8f:af:0f:76:d6:96:c9:d3:8f:
         28:0d:b7:f5:f9:73:13:94:1f:5e:fc:69:62:c8:48:33:22:60:
         a2:bf:ba:49:45:7f:92:b7:53:be:d9:ae:11:0b:19:c4:23:6a:
         f8:e0:ad:34:f0:a6:b4:be:7a:1d:1f:88:91:5f:8a:a9:a8:24:
         e7:d3:31:95:a5:43:cd:d5:9a:fc:2b:f0:b1:2d:d4:b4:72:7b:
         de:88:90:3c:47:30:9f:49:22:cb:0c:70:31:70:14:87:28:73:
         b2:b8:7f:72:80:b1:94:8a:fb:0f:55:73:08:6c:a0:7c:a0:45:
         3f:a0:ac:7f:12:d8:4f:3d:a7:8a:af:ff:c4:0d:c4:d6:83:c9:
         c6:40:8c:9d:bb:a6:47:1f:c5:2b:a7:21:d8:e1:67:c5:7f:54:
         fe:1f:d2:76:88:d0:c8:9e:d1:6b:7a:c2:75:5e:94:96:82:0e:
         77:71:ae:71:9a:7e:c9:a3:cd:f7:6c:3a:49:06:02:58:9e:5b:
         f5:a6:d1:15:75:7f:66:44:ea:13:05:87:75:56:ee:f9:46:02:
         6b:9f:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org