Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e3138322e3138342e302f32332d3234203d3e20323632343539.roa
File:                     34352e3138322e3138342e302f32332d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          4LTN/5a8K9Q7/x4aWyx+QLtFBnDUE+a8xc/Lu0jqEl8=
Subject key identifier:   40:38:2C:4E:2A:69:71:8D:94:52:57:70:BB:68:7F:FD:E5:D1:C5:76
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       7D41DC8FFEB2F5A2F3E755119074D827519D9B81
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e3138322e3138342e302f32332d3234203d3e20323632343539.roa
Signing time:             Thu 06 Mar 2025 03:04:07 +0000
ROA not before:           Thu 06 Mar 2025 02:59:07 +0000
ROA not after:            Thu 05 Mar 2026 03:04:07 +0000
asID:                     262459
IP address blocks:        45.182.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:41:dc:8f:fe:b2:f5:a2:f3:e7:55:11:90:74:d8:27:51:9d:9b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Mar  6 02:59:07 2025 GMT
            Not After : Mar  5 03:04:07 2026 GMT
        Subject: CN=40382C4E2A69718D94525770BB687FFDE5D1C576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:0a:85:7b:35:43:be:c3:0e:55:38:ac:41:
                    d8:67:23:1a:89:2f:85:f2:a9:0c:78:f3:3a:d3:6c:
                    95:d0:02:3a:1c:ee:f5:5e:b2:7b:90:aa:60:0f:63:
                    7c:08:b2:d3:ac:78:1a:2c:46:18:d5:58:15:97:fd:
                    d7:fc:db:d4:66:32:48:2e:a6:7e:5f:b7:89:d3:f2:
                    93:a0:62:77:c1:96:a1:ed:96:87:68:8d:5e:46:43:
                    2a:79:12:d0:d9:ad:55:de:25:5d:f9:33:f5:54:a4:
                    74:03:0a:58:39:fd:ea:06:71:1b:c2:cb:f3:78:3b:
                    ab:e1:7a:c6:74:ab:b8:9f:38:3b:13:32:fa:0f:3b:
                    ce:27:f5:0d:5d:7a:1a:54:5a:ec:c7:d4:60:0e:b8:
                    4d:c6:3c:7c:5c:72:18:bd:61:5c:40:06:c9:27:dd:
                    3d:b7:23:1d:fd:87:87:1a:f6:c0:57:79:e5:3a:86:
                    7d:fd:d3:1f:ba:b2:52:2a:b9:46:d4:1e:46:52:20:
                    47:08:54:8a:00:4f:35:05:31:dd:5e:5d:ba:34:5e:
                    ad:3a:92:b7:bf:1a:a7:1d:e8:08:41:31:be:c9:3d:
                    b9:11:18:31:a0:d0:b2:f7:bd:8a:91:59:8e:5b:78:
                    3f:b7:20:af:14:ad:0f:5f:b7:a1:9a:d5:df:63:83:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:38:2C:4E:2A:69:71:8D:94:52:57:70:BB:68:7F:FD:E5:D1:C5:76
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e3138322e3138342e302f32332d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:65:52:88:75:a8:09:14:c2:c5:d0:92:00:75:e3:b0:8f:d2:
         24:95:9e:75:5e:be:86:88:fb:16:20:1e:ee:7e:67:a7:d5:f8:
         d5:f9:6c:86:04:ec:8b:8e:c1:e0:f6:34:df:3e:07:7a:b5:fb:
         dd:60:01:2e:c0:b8:a4:b6:13:cd:4b:a0:f8:1f:44:0e:e3:31:
         95:ab:29:e9:87:f2:2a:81:2e:e3:af:d2:0b:17:ea:36:14:5f:
         51:6c:6e:a8:33:8f:b7:2e:2f:67:85:75:cd:14:4e:af:48:03:
         ee:3b:fa:b1:dc:08:0b:09:87:74:e7:b2:8b:39:90:91:ea:56:
         4e:da:48:21:a4:2e:c9:b1:f8:94:52:54:aa:a7:b6:2c:1c:e7:
         a9:2f:e5:09:ef:f5:55:27:cc:eb:79:b5:27:fa:39:c0:23:5c:
         9b:c7:b8:90:e5:e8:bb:62:b2:e1:a2:64:6c:f4:3e:fb:f6:0e:
         d3:0e:c5:75:87:bf:58:6d:ba:96:5a:c5:40:f2:96:ee:1f:83:
         80:c2:30:67:7e:ec:21:d7:3f:88:15:9e:c9:1c:65:df:ff:96:
         cd:10:ea:1f:30:24:c5:81:e6:73:91:56:9e:cf:d9:c2:bb:fd:
         b5:a1:b3:79:e4:fe:79:f6:40:2c:58:a4:f7:bc:ef:69:98:07:
         6c:f3:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:54 2025 by rpki-client