Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa
File:                     3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa (raw, json)
Hash identifier:          V/+xdocYN3/e4zvN1Lyz6J6KdEaTFlgPbgpdW/IbBHw=
Subject key identifier:   3B:78:27:16:AE:86:CA:32:67:8B:45:82:75:CE:B8:37:65:AE:65:63
Certificate issuer:       /CN=45A824BE3AB3681275CCCDCBCFDBD96A825082AB
Certificate serial:       70942B99D1396347546C1E78BCDFB28A56BE3C82
Authority key identifier: 45:A8:24:BE:3A:B3:68:12:75:CC:CD:CB:CF:DB:D9:6A:82:50:82:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa
Signing time:             Thu 04 Apr 2024 04:02:45 +0000
ROA not before:           Thu 04 Apr 2024 03:57:45 +0000
ROA not after:            Thu 03 Apr 2025 04:02:45 +0000
asID:                     265358
IP address blocks:        168.181.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.crl
                          rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:94:2b:99:d1:39:63:47:54:6c:1e:78:bc:df:b2:8a:56:be:3c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A824BE3AB3681275CCCDCBCFDBD96A825082AB
        Validity
            Not Before: Apr  4 03:57:45 2024 GMT
            Not After : Apr  3 04:02:45 2025 GMT
        Subject: CN=3B782716AE86CA32678B458275CEB83765AE6563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:bf:34:39:33:86:1b:16:5d:16:0c:a2:4a:
                    8f:1b:78:06:40:3c:7d:0e:01:84:6e:b6:16:58:94:
                    94:e1:c8:1e:91:54:42:4a:3b:7b:92:32:93:aa:21:
                    d0:56:ea:4d:0b:72:5a:0e:fe:80:ec:ba:5e:1f:d0:
                    f9:36:8b:4c:71:95:5e:d2:c2:bf:bc:0d:e0:61:88:
                    9f:16:0c:e5:e8:72:90:7b:57:5b:4a:ad:79:e8:d3:
                    d9:4d:65:b9:3c:f6:81:ed:d7:1a:6a:81:08:4d:2a:
                    b1:1d:3e:28:16:bf:b5:3a:d3:ed:68:d7:8a:ce:33:
                    7c:8e:7c:2e:71:73:c6:9a:3c:2b:b4:4e:8d:50:9b:
                    5a:d2:53:38:15:08:48:c7:fa:3a:50:fa:32:aa:29:
                    3d:db:b8:84:c1:27:1a:09:ad:c5:11:05:f5:21:c3:
                    23:e9:e1:33:ff:78:e0:dc:5d:fa:4d:97:d4:31:ea:
                    0a:89:90:fb:65:a5:bc:cf:0c:0a:22:66:32:3c:2d:
                    3b:e0:24:c2:78:29:4a:a6:b6:49:5c:5c:f3:63:fc:
                    a6:05:64:be:5c:87:55:65:78:15:05:4c:da:88:c9:
                    5d:5f:8b:76:92:63:3d:9b:33:b4:d7:fc:f8:47:fe:
                    14:12:58:d9:fb:30:53:92:97:22:42:5f:50:a6:95:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:78:27:16:AE:86:CA:32:67:8B:45:82:75:CE:B8:37:65:AE:65:63
            X509v3 Authority Key Identifier:
                keyid:45:A8:24:BE:3A:B3:68:12:75:CC:CD:CB:CF:DB:D9:6A:82:50:82:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:11:07:bb:94:a6:cc:87:75:a8:60:b2:f7:c8:ab:ae:f6:56:
         02:00:6e:29:a4:a7:33:f6:76:60:fe:04:6a:81:97:96:a2:3c:
         0d:da:5c:b1:68:7a:dd:7c:21:17:6b:76:be:e1:f3:c2:ce:1c:
         37:95:57:e0:19:30:36:cc:68:57:22:4d:25:c9:a4:a5:f4:ae:
         50:db:d7:2d:0e:b5:d3:93:45:17:f9:ec:b0:ca:42:36:75:12:
         01:70:f9:bf:e6:10:81:ce:67:76:e4:64:a3:84:c9:d0:58:82:
         21:47:53:b5:9c:22:60:fa:fb:44:14:1a:59:b4:72:99:f9:2a:
         62:29:fe:7a:a1:09:c5:20:77:e2:51:82:0a:3e:e0:7b:d3:10:
         35:75:85:b2:ed:d1:49:10:47:1f:8f:cf:be:f7:ff:47:6e:be:
         89:b3:d3:15:25:13:25:b5:2e:e4:9e:61:4a:b8:8d:72:fb:ef:
         c7:fa:6e:92:6a:9c:5d:f4:76:64:9b:41:1e:7e:44:45:84:c9:
         e1:0f:1d:0e:e1:16:a3:ef:b3:d3:db:00:af:64:90:d1:5c:7c:
         45:55:56:cc:60:f6:ee:08:56:ea:f9:54:1c:80:70:70:f1:d6:
         05:c0:3b:4d:95:27:f0:34:70:6a:71:59:e7:b8:21:b3:74:fd:
         c0:87:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:10 2024 by rpki-client on console-fra.rpki-client.org