Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa
File:                     34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa (raw, json)
Hash identifier:          fmZiBXaUv8DJxlxKS/BamVXup0emtS2hs6sE4oFViQU=
Subject key identifier:   1C:C8:E6:57:6D:C9:19:C5:17:E4:D9:49:3F:27:55:7E:4D:24:BD:0A
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       6B6CD1E3BA94645DA4F5F7A267ED8F9737F68EFB
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa
Signing time:             Sun 18 Aug 2024 12:15:12 +0000
ROA not before:           Sun 18 Aug 2024 12:10:12 +0000
ROA not after:            Sun 17 Aug 2025 12:15:12 +0000
asID:                     268134
IP address blocks:        45.169.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 10:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6c:d1:e3:ba:94:64:5d:a4:f5:f7:a2:67:ed:8f:97:37:f6:8e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Aug 18 12:10:12 2024 GMT
            Not After : Aug 17 12:15:12 2025 GMT
        Subject: CN=1CC8E6576DC919C517E4D9493F27557E4D24BD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:99:4c:8f:90:80:0a:c8:8b:be:0e:2e:9d:
                    cc:db:2c:54:80:a7:ba:f9:6d:da:05:cb:bd:88:e6:
                    03:ae:0f:1f:25:a5:39:3f:54:3b:c0:72:a7:fc:f2:
                    3b:85:1d:6c:1a:cd:29:e5:88:42:22:fd:b7:5c:5b:
                    b0:93:ce:4a:37:d5:16:61:e9:2b:af:e0:81:2c:75:
                    67:9e:ac:6c:63:a8:ff:99:ad:07:0e:3c:69:9f:09:
                    04:dc:c5:14:38:92:73:ce:9e:92:37:4e:37:19:6f:
                    8b:95:6e:2f:34:d1:ab:48:77:eb:66:2a:6e:32:28:
                    dc:d4:27:72:d5:93:ab:94:81:8b:d7:42:3d:9d:55:
                    26:e2:66:47:35:b7:83:68:a7:1e:4d:3e:b9:5b:ae:
                    d1:d4:43:d8:5e:76:65:1c:11:7a:16:ec:4c:ae:26:
                    d7:5e:58:7e:2e:13:52:e6:55:1e:6f:3f:4e:13:53:
                    45:90:b3:df:72:fe:aa:3e:c3:6a:65:d0:ef:06:7e:
                    94:09:6b:7c:b4:b8:ff:fa:bc:ee:b5:7c:5f:3d:43:
                    00:a6:7e:1d:08:f0:c0:8c:39:7e:62:5a:24:08:3b:
                    7e:d0:1a:b8:fb:2a:94:49:74:f1:99:b1:23:1b:9a:
                    08:4d:7a:6e:68:00:11:a3:fa:63:24:6a:04:c8:34:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C8:E6:57:6D:C9:19:C5:17:E4:D9:49:3F:27:55:7E:4D:24:BD:0A
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:f2:d7:fe:2a:09:1d:7e:37:ba:b1:ae:3a:dd:50:61:6d:
         07:71:d6:24:f7:af:5f:42:ac:4e:62:87:2b:dc:58:e1:d8:05:
         3e:1d:91:9e:4c:01:f6:05:a9:51:30:93:ff:6f:5d:90:97:c0:
         46:01:66:82:23:7e:07:e8:7b:7b:6d:98:60:a8:38:aa:c8:f7:
         37:8d:c8:35:e3:6f:6a:25:74:86:50:a4:ab:71:b7:49:c6:2d:
         9b:d4:5f:3c:09:dd:4d:f6:d2:2f:15:d7:83:db:30:22:e7:e2:
         b7:e7:6d:e8:35:be:f7:87:4b:68:b3:3a:2f:0d:ad:b7:b5:f7:
         18:4d:27:bb:59:e0:75:fb:60:61:96:ee:bd:20:8e:cf:0b:79:
         48:d8:3d:48:5a:c0:5a:df:2e:88:38:3f:04:c5:f5:3d:11:5b:
         c9:ae:2a:75:c4:03:05:04:34:15:69:8e:55:08:15:47:57:cd:
         f4:46:4a:ff:e7:50:72:12:4c:93:b1:04:81:59:c4:60:78:22:
         da:cb:bb:62:74:47:0e:84:fb:5a:de:3b:73:4d:6c:09:34:c7:
         90:03:6b:2c:fd:c6:c7:e8:0d:1c:92:6d:b4:5f:69:a2:9d:36:
         30:ef:0d:2c:1a:64:be:bc:aa:b5:4d:2e:b1:97:f9:ba:31:3d:
         b6:e4:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:19 2024 by rpki-client on console-fra.rpki-client.org