Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa
File:                     34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa (raw, json)
Hash identifier:          Zf0/jsHSGPCEjb4PNZA4e0Emvs9hSH2D/IT7MOvbuE8=
Subject key identifier:   73:C0:6F:06:34:1C:B2:A2:D1:0C:31:0E:89:03:29:DC:EA:D8:D7:43
Certificate issuer:       /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial:       3C4AB05B90AA54DC41DFDCF7CB62C942A8DB630C
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa
Signing time:             Wed 03 Apr 2024 18:32:00 +0000
ROA not before:           Wed 03 Apr 2024 18:27:00 +0000
ROA not after:            Wed 02 Apr 2025 18:32:00 +0000
asID:                     269192
IP address blocks:        45.181.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
                          rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4a:b0:5b:90:aa:54:dc:41:df:dc:f7:cb:62:c9:42:a8:db:63:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
        Validity
            Not Before: Apr  3 18:27:00 2024 GMT
            Not After : Apr  2 18:32:00 2025 GMT
        Subject: CN=73C06F06341CB2A2D10C310E890329DCEAD8D743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:80:11:32:74:26:f1:c8:29:5b:9f:f2:47:
                    ac:29:8d:d7:dd:7b:10:31:d1:a6:e4:61:33:85:59:
                    d5:aa:d0:16:79:55:40:7d:ca:92:9a:e8:25:17:94:
                    66:21:01:6b:cd:be:16:14:ce:97:18:41:56:b5:16:
                    b3:08:28:88:48:ad:27:ce:05:4a:bd:ac:e4:27:de:
                    dc:1f:31:1d:90:40:db:10:af:28:68:c7:8a:60:91:
                    e2:eb:b4:b6:81:4c:f0:db:0e:d7:3c:5c:9c:28:f3:
                    bb:e9:8d:aa:d2:0f:52:a3:0f:4f:c4:c7:ae:90:e2:
                    47:69:fa:4c:2b:6a:97:9b:8b:65:a2:23:80:9c:eb:
                    89:55:ac:00:d3:3a:a2:0f:7a:0b:0b:2b:50:3d:9e:
                    32:f1:d8:77:85:14:c3:1f:f9:43:76:95:0b:a7:19:
                    ad:a7:90:24:57:08:d8:7f:bb:3f:48:24:12:e5:52:
                    49:a6:25:0a:c6:6e:44:63:21:1e:fd:b2:30:ef:a2:
                    84:8a:ce:3d:6a:64:9a:64:39:44:bc:2f:cd:49:01:
                    29:5b:4f:90:c8:03:c1:73:24:9b:48:73:52:15:7d:
                    2f:ab:f2:1c:dd:1e:4a:eb:85:98:f1:92:14:2c:15:
                    90:20:2b:8f:c2:d0:f2:ae:02:66:d3:4a:58:e9:ad:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C0:6F:06:34:1C:B2:A2:D1:0C:31:0E:89:03:29:DC:EA:D8:D7:43
            X509v3 Authority Key Identifier:
                keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:c9:db:15:0e:70:8c:94:ef:ad:a1:68:46:29:ec:a4:73:
         7c:e1:4e:54:7b:3b:59:2c:1c:e3:6c:8d:ec:d6:cb:e9:76:79:
         1e:b8:c5:86:4e:94:33:2a:a5:1e:85:72:cd:df:9d:99:fb:f6:
         a7:6c:48:26:27:6b:25:fb:31:d2:2e:da:7f:07:16:18:7c:22:
         ea:5e:59:0e:9e:8d:25:1b:0c:7f:9c:c7:11:3e:9b:6f:20:4b:
         66:e1:2c:6f:91:6c:8f:35:7e:e4:14:15:8d:b9:8a:0f:d8:3a:
         58:77:6d:62:03:35:08:0c:e8:6e:d9:b5:2c:06:2f:40:c4:6f:
         d3:3d:76:59:4e:f9:63:6c:38:bd:b8:c9:f8:24:1b:0e:7c:8b:
         90:bb:6c:d6:68:e4:ed:85:15:e1:77:f8:75:b9:02:71:bc:74:
         cd:74:18:41:cd:0d:d2:29:0f:52:85:bb:92:bb:f8:39:36:10:
         36:d9:f5:b1:64:2a:77:97:a6:0c:8e:04:93:67:1d:80:7d:34:
         a3:09:79:dd:bb:ac:91:a4:d5:b3:66:aa:92:8b:2c:ae:01:e1:
         7c:ae:94:1e:e4:5d:76:f9:c3:e1:30:2f:fc:ba:2e:a3:10:fb:
         22:9c:d1:17:eb:81:58:e1:7d:46:09:82:0c:a9:d6:96:6a:6d:
         d9:72:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org