Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa
File:                     34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa (raw, json)
Hash identifier:          v1hzPHvOImjNUzH27E+furYliwbc+HCzrF08tgLX4X0=
Subject key identifier:   BF:14:8B:AD:42:91:DB:5D:66:D0:76:E2:0B:7B:09:38:23:C6:0E:81
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       047DF5C5C11A89B9D5D9E57E37EADC0BA0B7A276
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa
Signing time:             Wed 03 Apr 2024 18:31:02 +0000
ROA not before:           Wed 03 Apr 2024 18:26:02 +0000
ROA not after:            Wed 02 Apr 2025 18:31:02 +0000
asID:                     268070
IP address blocks:        45.167.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:f5:c5:c1:1a:89:b9:d5:d9:e5:7e:37:ea:dc:0b:a0:b7:a2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Apr  3 18:26:02 2024 GMT
            Not After : Apr  2 18:31:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:70:b1:79:d1:84:99:2b:a2:a2:fb:ae:03:
                    8c:16:7c:ab:a6:17:03:fb:4f:bb:0b:ac:c1:1b:81:
                    84:cf:02:64:96:49:38:44:70:8e:a5:67:94:97:39:
                    6f:b3:00:b2:e0:c9:aa:d8:c0:73:e9:ea:f9:29:bf:
                    e2:b9:42:36:37:fa:50:40:50:7e:b1:b6:55:b1:d1:
                    dc:28:a4:25:b5:0c:e7:36:56:3c:b5:59:17:c8:05:
                    23:5c:d1:c1:8f:e4:8d:fa:29:ef:33:59:3c:45:5e:
                    33:56:9f:14:2e:e7:3d:3a:5b:e9:2c:ba:02:3c:61:
                    e0:0e:60:01:18:fa:b7:b3:f9:fc:63:9a:51:57:b0:
                    ad:94:87:15:a7:cc:e4:1d:2e:58:89:25:d0:a1:3c:
                    89:ba:e5:93:0d:36:c8:5b:cf:8b:45:c2:68:46:bd:
                    f6:a1:f8:13:af:e4:30:4c:df:c3:d5:ba:94:94:91:
                    a4:10:07:be:1f:2c:59:8c:0a:e3:89:44:fd:29:6a:
                    9f:d3:de:25:41:68:20:b9:42:c5:b8:92:3f:5f:35:
                    92:d6:86:56:a0:07:ab:c3:21:c2:3c:51:1d:24:45:
                    23:14:e6:f4:6d:18:86:31:c1:21:43:03:94:02:0b:
                    37:cb:d7:10:b2:d9:c9:4b:46:4f:ca:e8:75:42:34:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:14:8B:AD:42:91:DB:5D:66:D0:76:E2:0B:7B:09:38:23:C6:0E:81
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:91:66:fa:cc:56:1f:cf:b6:76:5c:46:0e:de:e6:49:91:a1:
         1c:bc:24:8b:79:a1:97:f9:b2:48:c4:27:4a:ad:32:18:14:3d:
         3d:b6:e3:1e:d9:09:47:fb:48:0f:08:2f:ee:fd:6e:8c:8e:ee:
         a3:53:d1:de:67:8c:b1:97:99:28:34:36:1f:db:26:2b:e2:7b:
         6b:39:c8:b5:0f:48:27:18:d3:b8:77:ea:9e:66:64:af:e1:97:
         a0:ec:d5:f1:fd:25:2f:d1:8c:3d:94:f6:1a:8f:50:06:27:12:
         ce:a3:0f:82:62:79:96:ad:cb:b2:fa:8e:91:4a:5e:d9:ef:58:
         93:48:41:ad:48:93:af:72:03:65:d3:b7:de:c1:64:11:c5:9e:
         09:1b:22:69:65:92:3b:e5:64:e9:b5:e6:e1:6a:80:30:5b:bf:
         85:f0:69:62:95:64:70:1f:f8:d1:fa:90:05:32:81:7b:e9:84:
         ee:39:8d:7d:a5:d3:77:db:67:83:96:a9:fb:9d:d2:1a:23:c1:
         0c:05:44:5e:e4:94:26:5c:ec:65:03:1f:eb:df:9d:15:a3:7b:
         32:15:51:a3:37:da:41:35:4e:ce:b9:aa:66:aa:22:6f:ea:e9:
         b5:02:e8:df:0b:da:bc:1c:45:e4:90:9a:3c:2a:e2:6b:c8:20:
         ab:b4:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 11:04:23 2024 by rpki-client on console-fra.rpki-client.org