Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa
File:                     34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa (raw, json)
Hash identifier:          39Zgtox7KVWDquxVCqREcAudTL9lpP8CtyehS8stJNk=
Subject key identifier:   5B:A2:36:A0:15:6C:1E:79:BC:96:2E:D0:A9:03:97:C5:F2:4C:D1:24
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       4C3277A5E5EABA91E5382B81E30AEAEB5AB7A062
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa
Signing time:             Thu 04 Apr 2024 14:07:30 +0000
ROA not before:           Thu 04 Apr 2024 14:02:30 +0000
ROA not after:            Thu 03 Apr 2025 14:07:30 +0000
asID:                     268134
IP address blocks:        45.169.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 10:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:32:77:a5:e5:ea:ba:91:e5:38:2b:81:e3:0a:ea:eb:5a:b7:a0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Apr  4 14:02:30 2024 GMT
            Not After : Apr  3 14:07:30 2025 GMT
        Subject: CN=5BA236A0156C1E79BC962ED0A90397C5F24CD124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:83:b2:af:13:58:8e:38:91:6f:2f:44:7c:
                    e4:62:7d:9c:74:48:42:92:56:ef:5e:4e:a5:9c:55:
                    7d:80:1d:c6:fa:71:13:0b:ae:71:69:fd:34:36:fc:
                    31:1d:55:ad:52:93:13:53:cd:91:a9:f9:c3:e2:51:
                    43:0f:13:cb:d5:cb:6a:1d:7a:c4:d7:05:cb:79:cd:
                    b4:b9:0d:82:a1:4e:c0:c7:df:bb:1e:1d:4d:0d:69:
                    41:69:0e:13:e4:c6:3f:69:a2:bb:69:a9:86:7b:3f:
                    b8:41:5c:2f:2e:70:6a:ad:cf:43:90:c6:70:18:af:
                    b6:7e:7c:7b:fd:96:f8:d2:c1:c0:55:42:09:a7:42:
                    5f:59:28:39:f8:82:f8:e6:fb:69:7b:7b:92:8b:8f:
                    a6:ca:cd:5a:12:09:ff:af:05:3b:b5:b9:3d:54:83:
                    47:27:6f:c3:ed:7b:3b:29:fb:4f:91:d0:f9:f7:c7:
                    07:ff:4d:df:cb:ac:fe:6f:5a:0f:65:05:19:83:e3:
                    6e:1c:6f:ff:27:e5:23:7e:fb:b9:57:76:88:43:58:
                    ee:42:af:14:69:a7:74:ca:8c:fc:51:46:44:a3:b1:
                    5d:10:dd:fa:39:c8:b4:b5:e6:5f:ac:9f:1f:de:6c:
                    69:6d:2d:bc:cf:5a:26:ad:f1:17:57:46:2b:6a:d1:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A2:36:A0:15:6C:1E:79:BC:96:2E:D0:A9:03:97:C5:F2:4C:D1:24
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:d6:5b:43:7f:08:6e:b0:89:94:92:72:4a:34:1b:c3:99:
         f2:10:ae:d0:c5:85:c3:5b:2b:f3:fd:19:79:69:e5:9a:35:e6:
         68:9a:ca:f0:5b:48:8e:e3:4d:a6:63:da:86:af:78:c4:b1:fb:
         44:d8:4b:57:55:9b:ba:b7:21:ed:24:b3:f7:6a:a1:cf:24:3b:
         9e:b5:f9:78:f4:e2:63:08:27:5e:21:2e:95:36:0c:0a:7b:93:
         ce:7d:db:2f:ac:56:f6:51:6a:ab:3f:68:ac:92:19:ae:22:89:
         8e:41:b0:f9:75:5b:2a:bc:6f:a1:07:3b:2c:ef:df:45:af:21:
         4a:82:a0:98:6c:22:fd:db:b8:bc:20:e6:b1:11:9a:4a:84:41:
         eb:bf:8b:e5:e5:70:e6:92:b3:8d:a4:e9:71:25:83:69:9b:ec:
         b2:96:8d:a7:ee:f5:9d:78:63:15:e1:e4:f0:ce:6a:bf:45:e1:
         fc:ac:bd:f6:ad:5b:c2:2c:c2:a3:82:2c:26:1a:5d:3d:01:a7:
         04:9d:ca:16:b2:5d:54:62:0d:3c:5d:b7:88:16:55:64:6b:9f:
         b6:38:35:db:27:48:7d:60:26:71:12:9d:35:73:f9:b0:a3:63:
         88:44:0b:14:b9:3a:b0:56:d5:61:43:f7:66:f6:10:c8:2c:49:
         c7:a6:9b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:52 2024 by rpki-client on console-ams.rpki-client.org