Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa
File:                     34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (raw, json)
Hash identifier:          h7qCljiKDJ2F5sButZyRY8F5OHTajyA3Snt0Xm2yjfw=
Subject key identifier:   A6:B4:F6:E2:B1:DB:14:F8:B6:F0:0B:9E:4B:4C:39:29:0C:5D:24:F3
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       2F2356C45F1CAFDFE6DAF7928186E8646A27A55F
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     268137
IP address blocks:        45.169.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:23:56:c4:5f:1c:af:df:e6:da:f7:92:81:86:e8:64:6a:27:a5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject: CN=A6B4F6E2B1DB14F8B6F00B9E4B4C39290C5D24F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:ed:37:ba:cf:84:45:c8:42:0c:e4:2e:07:
                    65:72:77:29:4d:b4:94:1a:6b:43:43:c8:6f:1a:db:
                    3c:74:80:46:d3:e7:21:22:09:06:e8:1a:93:cd:54:
                    bd:bb:8e:39:ae:31:82:17:3d:f3:8a:3a:de:c7:24:
                    02:53:36:a8:5f:56:ca:ac:c9:29:bf:46:a6:34:ea:
                    da:30:16:cc:fb:c7:15:2d:78:ca:2b:e5:65:ee:3b:
                    f5:8f:d4:e0:74:9b:8d:22:1a:99:31:77:47:7a:45:
                    ee:ab:ce:12:e2:2c:90:e0:49:c5:73:0d:5a:4a:97:
                    c1:a2:ec:50:e6:cf:e0:fd:36:43:24:db:6f:ef:25:
                    ea:24:b8:14:d1:0f:c9:20:0d:28:61:af:cf:67:9b:
                    f2:0e:df:65:47:1f:f1:7e:a3:56:69:3f:57:20:a9:
                    cd:39:1f:44:18:94:14:03:f9:6f:7f:14:42:ff:59:
                    1a:36:22:84:82:1e:ef:15:6d:7f:7a:06:bc:1d:28:
                    05:f0:f0:e3:6b:6e:5a:27:4f:30:3d:be:fd:ac:76:
                    38:a4:80:0b:28:61:f8:18:50:7e:ee:30:04:b8:d2:
                    ac:c8:5d:4c:83:ba:0a:0e:78:a8:19:50:cf:fd:c2:
                    91:6d:f9:c5:08:60:fc:b2:1a:d1:60:1f:93:e9:e9:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:F6:E2:B1:DB:14:F8:B6:F0:0B:9E:4B:4C:39:29:0C:5D:24:F3
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d8:15:b0:54:6e:03:8c:ce:c7:6c:fa:f9:1f:6e:b8:61:cc:
         b9:cb:d8:7f:41:86:a9:0b:1b:f9:e6:78:93:29:3f:16:b3:af:
         9e:e9:31:63:40:72:64:15:e8:3a:30:7c:96:19:5a:9b:7a:ae:
         92:e5:42:75:9d:e3:9e:8c:b0:c8:99:d9:90:64:c1:67:00:52:
         eb:9d:50:86:f5:c1:d3:9f:9a:58:57:56:b6:b8:57:1e:4f:53:
         0b:53:7c:0f:96:4e:df:1e:35:08:e1:aa:42:ef:6f:c9:c8:aa:
         cc:74:e5:ee:55:fb:26:ec:ed:a8:d8:1a:5d:12:e9:c2:08:e3:
         4b:23:2c:05:4b:5d:c2:34:93:95:e6:5f:9b:05:55:ab:9a:d1:
         ae:e8:bf:3c:07:05:7f:72:01:f2:19:92:b0:2a:38:ee:c3:5d:
         c8:63:05:7a:2e:6a:39:28:71:f9:fc:38:ae:a5:f4:bd:23:95:
         b7:58:b9:b1:b2:b7:e9:c4:fa:32:e4:3c:b9:1e:ba:dd:56:8b:
         20:6b:a2:3f:85:9a:f8:71:48:ff:a3:ef:df:79:c5:00:be:b3:
         37:12:3e:66:14:a8:98:42:7a:ae:1f:ab:b0:15:9b:f9:f3:e4:
         fa:24:1b:c5:84:83:01:d2:3a:95:f0:f5:e9:48:65:f2:45:65:
         a5:f2:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:06 2024 by rpki-client on console-fra.rpki-client.org