Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e3137342e3135362e302f32322d3234203d3e20323636313330.roa
File:                     34352e3137342e3135362e302f32322d3234203d3e20323636313330.roa (raw, json)
Hash identifier:          dOXTdxC0yBo7216PHOhiDgd5dP3DNEK/EQl3guPVxSA=
Subject key identifier:   45:BE:4C:CE:44:6A:9C:E9:69:EF:60:73:34:6E:80:BE:56:D1:35:43
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       24808F2D7A8E57DE27D9C91755EEB504BF5255F9
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e3137342e3135362e302f32322d3234203d3e20323636313330.roa
Signing time:             Wed 29 May 2024 18:27:52 +0000
ROA not before:           Wed 29 May 2024 18:22:52 +0000
ROA not after:            Wed 28 May 2025 18:27:52 +0000
asID:                     266130
IP address blocks:        45.174.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:80:8f:2d:7a:8e:57:de:27:d9:c9:17:55:ee:b5:04:bf:52:55:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: May 29 18:22:52 2024 GMT
            Not After : May 28 18:27:52 2025 GMT
        Subject: CN=45BE4CCE446A9CE969EF6073346E80BE56D13543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:17:48:5b:04:49:b7:69:81:57:d4:29:06:2a:
                    77:03:53:99:81:6d:21:e5:b4:3f:79:b3:27:3b:84:
                    36:f2:7b:6e:fc:9d:b3:84:88:e6:0c:17:4b:9a:14:
                    bc:f7:56:6e:c9:f0:85:b6:4b:96:65:e6:75:a5:1d:
                    39:32:6e:59:f2:3b:c8:72:e0:0c:bd:fc:c0:4c:82:
                    c8:df:fa:db:6e:63:42:8e:80:0e:ca:da:76:d0:b9:
                    0c:ab:be:91:f9:d9:fe:13:28:59:7e:2e:56:4b:2d:
                    9c:8c:f8:a8:9c:13:18:88:b9:72:a3:96:78:d7:f5:
                    a8:ad:18:36:85:8a:c7:bb:cb:a9:d7:73:b3:2d:51:
                    71:6d:e5:92:bc:f5:c0:0e:6c:b3:42:66:77:9e:1e:
                    5c:5a:b0:42:20:92:d7:39:04:ba:db:70:f8:2a:8a:
                    44:dc:a1:2d:c9:21:d8:53:cc:47:0b:01:7d:74:65:
                    a2:ff:09:82:a3:cf:f6:ac:5b:8d:d8:0e:f6:9e:3d:
                    ad:43:4b:ab:35:86:4d:c8:51:00:eb:c7:63:fe:14:
                    71:4f:48:aa:61:0c:a8:38:57:b4:09:be:59:ec:eb:
                    b7:db:3d:f8:f3:04:a5:22:b3:dd:b6:af:cd:1f:c1:
                    4b:ff:c7:a8:e6:23:26:b6:70:08:23:4e:06:75:03:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:4C:CE:44:6A:9C:E9:69:EF:60:73:34:6E:80:BE:56:D1:35:43
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e3137342e3135362e302f32322d3234203d3e20323636313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:df:9c:79:f1:68:dc:32:82:3d:ae:90:cb:aa:49:2f:27:64:
         19:ff:d0:71:49:81:96:a2:64:e1:95:af:5d:5e:ad:07:f1:18:
         9b:b9:b4:6e:19:b5:a6:c7:f4:54:0c:13:33:e4:fa:65:b6:bd:
         3d:da:63:2b:ef:1c:46:79:28:e9:bc:ff:ba:52:f7:08:78:a2:
         8c:aa:d7:75:f7:61:8e:46:40:16:2c:68:97:8b:f5:8e:4a:ac:
         82:06:ae:5a:25:cf:b4:c3:84:3b:9a:18:8c:7f:02:05:54:28:
         f0:c5:b2:20:87:4f:55:70:2a:cc:80:d3:03:6b:86:43:3d:e8:
         e1:84:1d:78:a2:ba:74:fb:f7:83:2b:5a:05:17:5e:6b:15:5d:
         46:32:b7:41:6a:5b:91:fc:9d:b8:48:6f:20:66:a9:92:20:01:
         fa:5c:68:f2:d0:a0:c0:ae:c9:d8:af:81:f0:5f:8b:96:02:9f:
         56:ba:a5:60:f0:69:cd:a4:ee:ae:1c:51:a4:70:fb:84:12:4b:
         63:d9:6e:52:11:88:f7:b0:43:ed:bd:6d:a9:e0:a0:aa:bf:b9:
         dc:83:e9:71:94:cf:7a:a7:b1:46:bc:4d:1d:0c:4f:a8:79:cf:
         e5:92:58:ef:32:12:a3:3c:ff:15:95:4f:fa:70:17:5d:4d:a5:
         b7:40:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org