Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa
File:                     34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (raw, json)
Hash identifier:          sSG3wJyFL8pKoF+AOR4Hr1sk2uFFHlIWvnRnq/VgmLE=
Subject key identifier:   D7:AF:22:25:6E:81:F7:18:DD:A4:1E:63:28:43:D1:AF:4E:3F:36:B1
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       488BA8192F230E58437848ABE7B385D0F7B87183
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa
Signing time:             Wed 03 Apr 2024 18:30:42 +0000
ROA not before:           Wed 03 Apr 2024 18:25:42 +0000
ROA not after:            Wed 02 Apr 2025 18:30:42 +0000
asID:                     268137
IP address blocks:        45.169.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8b:a8:19:2f:23:0e:58:43:78:48:ab:e7:b3:85:d0:f7:b8:71:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Apr  3 18:25:42 2024 GMT
            Not After : Apr  2 18:30:42 2025 GMT
        Subject: CN=D7AF22256E81F718DDA41E632843D1AF4E3F36B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:c0:d0:f4:26:03:09:d2:b0:5b:20:fa:aa:
                    f6:d6:14:33:4a:9f:38:83:cf:51:e2:d5:87:6d:96:
                    cc:3b:2a:18:a1:0a:51:d6:fa:cc:60:7d:5d:ea:69:
                    ee:d0:68:98:43:7f:7e:5a:53:d8:94:0d:d4:7a:c1:
                    af:f9:82:cf:81:75:09:70:87:fa:59:55:e8:d5:7f:
                    3e:8b:e4:85:8a:50:57:41:10:87:ab:9f:02:ab:80:
                    cb:73:fe:0b:b0:df:42:4b:92:44:ab:67:73:af:af:
                    f8:64:1d:13:a1:03:e1:78:69:4f:bc:35:b7:7a:3e:
                    1b:82:22:80:25:e7:fa:bb:15:c4:32:21:0d:19:5e:
                    fe:a0:8a:6a:39:62:68:c0:c4:ac:5d:98:e1:4c:f1:
                    b2:49:ff:78:55:45:87:e9:31:97:2c:72:1f:96:26:
                    f1:1f:c8:d2:3f:91:87:bc:f2:0f:7f:e3:cd:b6:68:
                    5d:f2:eb:16:06:7e:b4:33:38:d2:90:a4:fe:f6:8c:
                    3d:e1:88:69:e5:51:4c:7a:c6:b7:8f:dd:a1:df:ef:
                    fd:0c:64:05:8e:76:d5:56:e2:e4:5f:8c:8b:9d:f5:
                    79:cc:6a:e7:0e:43:57:12:ea:e6:7f:c8:7a:29:86:
                    c0:02:9d:05:ba:a4:60:e3:4f:5e:82:cd:ae:17:9d:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AF:22:25:6E:81:F7:18:DD:A4:1E:63:28:43:D1:AF:4E:3F:36:B1
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e0:52:e4:1e:a5:57:fc:26:f9:32:48:1e:69:81:e4:a2:93:
         0c:8b:f2:a5:6f:41:b2:3c:85:df:8b:62:3e:db:b0:7f:4d:ee:
         0e:7b:28:29:a7:e4:76:c9:2d:dd:81:8f:a1:ac:3d:92:f0:9e:
         f3:69:cf:0b:5d:65:fa:28:61:34:4f:be:93:0d:1f:80:dd:4c:
         36:a5:14:df:a5:33:04:7d:2d:2f:ca:bc:f4:ef:ca:7d:1f:c7:
         8d:e6:c5:22:12:ba:48:12:73:41:80:f1:c8:34:1b:86:f2:da:
         0b:eb:f1:e3:0b:5f:bf:d0:65:03:73:89:46:2e:0e:18:89:dd:
         9f:db:06:43:94:47:81:2d:1f:d3:88:6e:2f:90:32:fe:ab:bd:
         ce:a2:08:0d:9c:ea:08:51:10:52:7e:72:40:d2:32:bc:09:68:
         03:e1:0e:d1:f6:26:61:13:22:14:ff:26:ff:7c:fd:4c:01:0c:
         f1:96:84:b8:5d:45:50:db:66:e6:41:90:80:eb:6a:29:b8:a1:
         3a:4a:69:8c:0d:3e:c9:71:18:44:ce:c4:b9:4c:5b:2e:50:08:
         6f:cd:8e:1f:88:ff:b8:a9:88:68:99:e1:74:e3:46:54:b7:5f:
         ef:a9:f2:60:11:a7:17:2f:0b:85:08:95:81:71:53:39:6b:54:
         ec:ca:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:06 2024 by rpki-client on console-fra.rpki-client.org