Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa
File:                     34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa (raw, json)
Hash identifier:          9pBDmAf3PAel+GYKHkZr9bjoL5K4u6l5W7u+4vyziFE=
Subject key identifier:   AF:44:A0:4B:47:08:09:06:2D:D3:58:0F:00:8C:11:3D:2C:E2:F2:64
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       2F9B4FDBAD697666B86899A5F4A132CDF977B4C4
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa
Signing time:             Thu 04 Apr 2024 14:07:29 +0000
ROA not before:           Thu 04 Apr 2024 14:02:29 +0000
ROA not after:            Thu 03 Apr 2025 14:07:29 +0000
asID:                     268134
IP address blocks:        45.169.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 10:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:4f:db:ad:69:76:66:b8:68:99:a5:f4:a1:32:cd:f9:77:b4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Apr  4 14:02:29 2024 GMT
            Not After : Apr  3 14:07:29 2025 GMT
        Subject: CN=AF44A04B470809062DD3580F008C113D2CE2F264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:c6:30:ec:c2:10:9f:92:4c:9e:c1:31:8d:
                    58:70:da:1b:f5:ce:78:75:f2:9f:c7:1d:44:bb:fb:
                    d3:28:d4:16:1e:69:4a:00:d0:d9:06:ca:17:0e:67:
                    5f:9b:a1:73:ae:55:33:05:28:7e:db:7c:86:d4:92:
                    01:77:7e:0e:4c:28:3b:db:c6:36:0d:f1:6d:47:94:
                    1c:f9:e1:16:8a:12:50:4f:91:eb:3f:4b:e8:d8:18:
                    87:1c:8d:08:a4:a1:90:5e:72:7c:cf:52:a2:1b:89:
                    0a:82:6f:38:07:d7:41:e4:7e:4e:fe:00:1b:d8:3a:
                    a3:91:bb:a8:7c:b2:c7:6a:8e:04:bf:55:43:3c:29:
                    6a:d3:f9:b5:6f:dc:e4:79:03:fd:f7:90:1c:f1:fa:
                    b3:dc:8f:7c:73:a1:f3:82:e6:69:72:e3:a2:71:f7:
                    32:ea:13:20:c3:a6:92:92:45:99:1b:8a:37:0c:9a:
                    63:96:b8:0f:47:cf:f9:73:60:a5:aa:88:56:b4:c4:
                    ca:1c:f6:e9:a2:c3:d1:ec:71:bb:b2:49:11:e0:6b:
                    57:bc:51:e0:82:ff:d4:5e:88:c6:ab:e3:8f:d1:30:
                    ba:7f:78:98:5b:4c:06:5d:a6:de:bb:96:89:aa:9e:
                    b0:27:28:99:0e:0f:87:ba:2a:8d:3c:85:37:bb:79:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:44:A0:4B:47:08:09:06:2D:D3:58:0F:00:8C:11:3D:2C:E2:F2:64
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:d3:d1:9e:b0:7a:04:93:1f:7f:d7:f2:2b:da:8d:09:00:
         12:f8:bc:9b:9c:1a:7a:70:3e:b0:db:7b:9a:06:5c:6e:d9:1b:
         ac:4a:d6:24:12:bb:c4:b0:dd:73:5a:e9:da:5e:a7:05:33:00:
         93:b3:cc:82:66:bc:4c:e8:7e:5f:aa:bb:b7:c9:7c:d3:18:ff:
         fe:c2:4f:a1:d2:73:13:96:a1:3e:fa:3e:e3:14:68:53:7d:39:
         63:81:73:0d:c8:d7:14:f9:38:e8:de:c8:08:00:1a:62:c4:5d:
         a1:23:10:bc:c6:34:79:d7:ec:6a:a7:df:a5:30:59:26:0a:2f:
         ca:2b:84:a5:f4:72:fc:85:60:96:36:d1:7f:ed:c3:ec:5d:69:
         70:5d:8a:12:47:48:c8:27:e0:ff:64:6f:ef:a5:b4:1f:fb:db:
         12:80:e1:7f:ec:ea:43:aa:9e:78:27:a9:f3:8e:f1:2d:74:ee:
         df:0b:a2:e2:02:24:5f:71:b1:6e:fc:d9:9b:c1:21:53:fe:fb:
         45:77:22:44:33:06:2b:85:3d:68:ec:41:4f:fe:eb:00:1f:31:
         39:a3:79:f0:6d:9e:e6:76:13:8f:d8:3d:0d:62:1a:5c:4b:68:
         d7:88:a9:b3:0f:de:65:f5:14:08:86:ab:4c:51:f2:00:47:66:
         a9:31:18:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL5tP261pdma4aJml9KEyzfl3tMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJFMzUxRTA0Q0VCMjU0MEQ4ODI5NzU1NUVENzZFODBC
OTFDNTJGNzAeFw0yNDA0MDQxNDAyMjlaFw0yNTA0MDMxNDA3MjlaMDMxMTAvBgNV
BAMTKEFGNDRBMDRCNDcwODA5MDYyREQzNTgwRjAwOEMxMTNEMkNFMkYyNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeycYw7MIQn5JMnsExjVhw2hv1
znh18p/HHUS7+9Mo1BYeaUoA0NkGyhcOZ1+boXOuVTMFKH7bfIbUkgF3fg5MKDvb
xjYN8W1HlBz54RaKElBPkes/S+jYGIccjQikoZBecnzPUqIbiQqCbzgH10Hkfk7+
ABvYOqORu6h8ssdqjgS/VUM8KWrT+bVv3OR5A/33kBzx+rPcj3xzofOC5mly46Jx
9zLqEyDDppKSRZkbijcMmmOWuA9Hz/lzYKWqiFa0xMoc9umiw9HscbuySRHga1e8
UeCC/9ReiMar44/RMLp/eJhbTAZdpt67lomqnrAnKJkOD4e6Ko08hTe7eWptAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUr0SgS0cICQYt01gPAIwRPSzi8mQwHwYDVR0j
BBgwFoAU8uNR4EzrJUDYgpdVXtdugLkcUvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlFa281RTJ6TTc2MVRkWmVTVFRRVFFxUXRnVDFwOFdGbUFEaTdUc0dp
b0YvMS9GMkUzNTFFMDRDRUIyNTQwRDg4Mjk3NTU1RUQ3NkU4MEI5MUM1MkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyRTM1MUUwNENFQjI1NDBE
ODgyOTc1NTVFRDc2RTgwQjkxQzUyRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZRWtvNUUyek03NjFUZFplU1RUUVRRcVF0Z1QxcDhXRm1BRGk3VHNHaW9GLzEv
MzQzNTJlMzEzNjM5MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqfAwDQYJKoZIhvcNAQELBQADggEBAIzb09Ge
sHoEkx9/1/Ir2o0JABL4vJucGnpwPrDbe5oGXG7ZG6xK1iQSu8Sw3XNa6dpepwUz
AJOzzIJmvEzofl+qu7fJfNMY//7CT6HScxOWoT76PuMUaFN9OWOBcw3I1xT5OOje
yAgAGmLEXaEjELzGNHnX7Gqn36UwWSYKL8orhKX0cvyFYJY20X/tw+xdaXBdihJH
SMgn4P9kb++ltB/72xKA4X/s6kOqnngnqfOO8S107t8LouICJF9xsW782ZvBIVP+
+0V3IkQzBiuFPWjsQU/+6wAfMTmjefBtnuZ2E4/YPQ1iGlxLaNeIqbMP3mX1FAiG
q0xR8gBHZqkxGDs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:52 2024 by rpki-client on console-ams.rpki-client.org