Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e342e32302e302f32322d3234203d3e20323632343539.roa
File:                     34352e342e32302e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          Ws/ep9nB5+aP5mx1f8+MUDwD9JVywnsa593M6llvdA0=
Subject key identifier:   56:0F:25:BE:B7:2B:07:03:B2:CF:40:7E:B1:EE:BA:08:E1:11:23:2F
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       7447BB01B40FB06E5C2E3FEE639E794E2C13F587
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e342e32302e302f32322d3234203d3e20323632343539.roa
Signing time:             Thu 06 Mar 2025 03:04:08 +0000
ROA not before:           Thu 06 Mar 2025 02:59:08 +0000
ROA not after:            Thu 05 Mar 2026 03:04:08 +0000
asID:                     262459
IP address blocks:        45.4.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:47:bb:01:b4:0f:b0:6e:5c:2e:3f:ee:63:9e:79:4e:2c:13:f5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Mar  6 02:59:08 2025 GMT
            Not After : Mar  5 03:04:08 2026 GMT
        Subject: CN=560F25BEB72B0703B2CF407EB1EEBA08E111232F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:f4:37:a3:d9:97:45:bf:4d:00:ca:a7:77:
                    51:2e:9c:0c:d0:c5:36:3b:79:f8:cd:3c:e6:cc:51:
                    48:9f:1a:d2:a3:fb:e2:d7:76:50:da:4b:74:c7:3b:
                    86:4a:72:29:66:cd:ef:4b:84:3c:a1:d4:6b:9a:77:
                    91:83:67:31:08:ac:4a:88:9e:7e:3c:bb:9c:11:b4:
                    d4:b9:db:9f:17:44:ab:4a:1a:db:ce:57:6b:ea:a2:
                    a2:56:05:38:4f:25:37:38:a3:7a:84:6e:c5:f5:b1:
                    d3:66:64:4b:cd:4b:4f:35:bf:f4:f3:18:65:b5:88:
                    c4:b5:f8:c9:a6:7e:85:4c:1b:65:3f:aa:2b:9c:9d:
                    72:e6:8d:74:1c:78:50:fe:ed:2d:55:e0:f7:59:0d:
                    ed:c2:1d:73:7d:da:cc:1c:d3:f3:d7:be:71:1c:c3:
                    af:96:88:05:b5:e4:e8:ef:f2:cc:0b:b8:eb:80:bf:
                    ab:3a:a1:c1:eb:6d:4b:d0:2f:c5:87:a7:3a:7e:76:
                    4c:9f:f7:f8:e1:c2:ae:82:c5:02:c0:5a:d3:73:cd:
                    a1:69:26:c0:8c:02:2a:05:6a:14:8a:cf:ba:33:5a:
                    49:7a:66:6d:35:2f:a2:a0:30:56:11:f3:a7:75:df:
                    90:fd:9b:a2:df:6c:b7:42:d7:71:44:21:69:6f:c7:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:25:BE:B7:2B:07:03:B2:CF:40:7E:B1:EE:BA:08:E1:11:23:2F
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e342e32302e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:6f:21:c5:c1:ea:3b:39:11:7a:7d:64:9f:65:1d:92:02:
         72:37:44:85:10:b0:34:eb:84:a5:f5:eb:0a:da:c2:b2:d3:57:
         19:38:cf:7c:08:9d:11:d0:05:f5:11:7d:ab:2c:ab:0a:28:bb:
         49:6f:24:ba:60:67:72:f8:49:54:27:c4:7b:6d:8a:d0:2e:3f:
         c4:52:f2:cc:07:7f:a6:6d:a1:49:8d:91:d2:fe:89:df:1d:f9:
         d4:f1:f0:9e:f6:cc:1b:6e:8b:f3:2f:56:31:48:84:99:ad:36:
         50:aa:6e:ed:ff:7d:58:41:b0:fc:f6:0c:08:ff:c5:8a:d0:9b:
         76:f3:0c:80:32:14:78:c1:07:4f:eb:e1:90:e0:a7:38:f8:51:
         a1:7b:52:4d:b6:7b:bb:f5:2e:ad:8f:4f:0a:84:3c:34:5c:5f:
         af:d1:61:49:f2:c3:7c:da:b0:11:d2:f2:85:02:91:5b:c5:1f:
         61:04:50:50:01:ab:3c:b0:be:0d:da:e5:91:3d:52:5d:e0:46:
         32:31:95:04:c1:b1:54:63:44:f7:12:00:75:0d:ef:be:8d:46:
         38:2a:e1:1e:72:81:b2:01:85:02:99:46:61:02:47:fe:8c:b1:
         38:a4:17:5c:ad:00:1a:a1:18:a3:a7:8e:b1:c1:2f:72:a4:90:
         e7:93:d4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:35 2025 by rpki-client