Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa
File:                     34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa (raw, json)
Hash identifier:          fAGUQkwQZ83KmbMut2Psz75vAm5N7KV9UOrHGnDCRVM=
Subject key identifier:   21:44:71:04:45:CB:51:D5:37:4F:E4:8E:9B:19:9C:F7:D1:10:4D:A3
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       2506832EA0071619C4FECE4E104E7304D2A75DB1
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa
Signing time:             Thu 04 Apr 2024 14:07:30 +0000
ROA not before:           Thu 04 Apr 2024 14:02:29 +0000
ROA not after:            Thu 03 Apr 2025 14:07:29 +0000
asID:                     268134
IP address blocks:        45.169.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 10:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:06:83:2e:a0:07:16:19:c4:fe:ce:4e:10:4e:73:04:d2:a7:5d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Apr  4 14:02:29 2024 GMT
            Not After : Apr  3 14:07:29 2025 GMT
        Subject: CN=2144710445CB51D5374FE48E9B199CF7D1104DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:a4:a0:c8:50:01:34:01:6b:55:9f:b7:e6:
                    f5:4c:92:37:05:52:01:e5:66:4c:90:ec:f8:f4:17:
                    39:41:bd:25:13:d8:94:f4:23:47:f7:51:cb:3d:68:
                    02:ba:03:9c:82:af:6b:0a:2b:9c:7b:c3:1b:30:69:
                    da:b5:66:a5:fa:e6:fe:56:87:eb:98:71:f4:40:17:
                    d3:bf:49:28:6c:55:a6:78:50:0b:f0:d8:ab:94:3c:
                    1a:2f:68:64:1d:85:9e:9e:c3:e8:f7:0d:55:de:50:
                    b4:64:d7:0a:f9:42:ae:fa:f8:b6:f4:aa:44:0e:ef:
                    ec:31:7b:46:1e:ee:8d:58:c7:58:29:5e:32:aa:e9:
                    23:39:ed:bc:e3:84:f8:b5:07:95:8f:5b:9c:a0:e3:
                    aa:68:6f:a4:a3:2f:9a:11:6b:2d:ef:73:aa:1e:cb:
                    d8:01:69:c6:7f:3a:66:1e:d3:1b:dc:4a:25:12:d0:
                    a5:78:8a:8c:c6:90:9d:25:bf:ba:7e:28:cf:04:3a:
                    75:71:85:f6:5d:04:dc:01:bc:eb:0d:db:08:9f:9e:
                    f9:5b:e4:35:16:ea:93:1d:75:ac:b7:b7:f7:a3:7c:
                    00:f2:55:d1:db:bc:58:12:68:74:1b:49:20:b2:62:
                    e4:e0:77:21:7b:62:79:6e:43:cc:3f:7c:3a:1a:97:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:44:71:04:45:CB:51:D5:37:4F:E4:8E:9B:19:9C:F7:D1:10:4D:A3
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:cd:e2:19:4e:ce:e4:bf:30:70:d9:fa:84:36:cb:e7:6d:
         23:6d:4e:9b:99:a2:cb:8b:2e:b1:8b:5b:7f:98:8f:9d:b7:5a:
         54:82:31:51:6e:f3:6d:72:d3:05:7b:48:ff:39:ed:44:70:03:
         65:df:dd:69:d0:41:95:d1:80:33:b6:25:39:17:6f:fc:c2:fc:
         ff:ae:07:a0:92:99:0e:26:83:2a:cb:a9:5e:d8:63:54:f0:73:
         c1:d8:b2:27:08:14:95:72:f5:f4:7b:8f:e2:c9:fb:b6:5c:95:
         01:6a:ca:d8:01:1b:8e:13:cf:40:93:43:db:c7:ea:81:c0:16:
         34:8f:7f:56:ff:30:45:43:44:97:95:21:85:49:06:bc:89:39:
         8d:98:2f:d3:af:89:a8:a8:c7:97:d2:52:d2:cc:0d:6e:fc:7c:
         de:cb:b3:7d:cc:a9:b2:28:95:d7:16:20:47:a4:4c:42:94:c1:
         59:f5:d8:f0:f0:4c:0d:af:9d:25:67:5b:e8:51:02:ee:6c:87:
         7f:00:c7:ee:d0:37:bb:02:bb:d6:90:5e:dd:c8:a3:01:8b:a2:
         47:29:29:ad:65:85:a4:e0:b5:69:0a:d9:e9:ee:64:6a:8a:db:
         fa:bb:e9:95:e5:e8:c8:36:a2:98:7f:b9:db:b2:6a:8a:cb:c6:
         91:83:cb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:52 2024 by rpki-client on console-ams.rpki-client.org