Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31312e302f32342d3234203d3e20323638353835.roa
File:                     34352e3136342e31312e302f32342d3234203d3e20323638353835.roa (raw, json)
Hash identifier:          T2K2agyEH6EHk1tSCNvQb4sBYhelDEcHcJqQ60VwW9c=
Subject key identifier:   32:A5:D9:68:12:66:0C:15:92:30:4B:BE:E7:7E:0B:5D:2E:1F:65:7A
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       4CF681102FA4BB095118C78CC71C5CC6FA1F9131
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31312e302f32342d3234203d3e20323638353835.roa
Signing time:             Thu 06 Mar 2025 22:52:52 +0000
ROA not before:           Thu 06 Mar 2025 22:47:52 +0000
ROA not after:            Thu 05 Mar 2026 22:52:52 +0000
asID:                     268585
IP address blocks:        45.164.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 04:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f6:81:10:2f:a4:bb:09:51:18:c7:8c:c7:1c:5c:c6:fa:1f:91:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Mar  6 22:47:52 2025 GMT
            Not After : Mar  5 22:52:52 2026 GMT
        Subject: CN=32A5D96812660C1592304BBEE77E0B5D2E1F657A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:71:1e:03:5c:ca:cd:a2:04:11:5a:2d:72:
                    00:01:b9:a8:60:ab:b8:1d:5e:86:e4:97:77:30:7c:
                    39:e1:cd:fe:43:b2:72:2a:b1:cb:6c:62:1c:e3:4b:
                    c7:ca:b5:47:bf:91:b5:f5:7e:86:5c:b2:ee:6f:53:
                    14:16:1c:e9:04:ec:54:7b:80:74:04:6d:37:e9:7e:
                    9a:df:39:34:62:72:89:46:04:49:30:20:ec:c7:48:
                    ad:01:36:7a:bb:88:d8:d1:68:74:ba:09:41:0f:d2:
                    04:a8:56:e9:2b:cd:e8:15:1b:f0:2d:76:3d:b5:79:
                    06:0a:37:ef:40:ee:4d:5b:fc:df:1b:d5:fe:82:cb:
                    3d:c4:ea:43:13:8f:e5:d4:45:3d:29:3d:d2:95:f8:
                    28:9b:ba:51:72:d9:de:5e:60:4a:7a:95:18:73:e5:
                    55:a9:6b:6d:9c:db:62:c5:ac:5e:87:0f:b2:16:a2:
                    f3:6c:68:22:d8:1d:e4:7a:a5:f3:13:3d:18:59:26:
                    15:a1:44:a2:8d:cc:71:0b:54:cf:3c:47:b2:bb:d5:
                    1d:84:b9:56:e1:7e:84:4f:7a:db:1f:0f:73:aa:76:
                    e2:b4:c0:1d:78:a4:a1:89:34:b0:ab:a9:a8:49:c1:
                    75:8b:3a:00:99:42:16:78:a6:ca:94:a7:ae:87:bf:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A5:D9:68:12:66:0C:15:92:30:4B:BE:E7:7E:0B:5D:2E:1F:65:7A
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31312e302f32342d3234203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:bf:54:fc:f8:38:53:31:e2:1d:62:6b:1f:61:02:c1:04:a4:
         a4:c5:90:83:d4:0f:91:d7:33:74:68:4f:9a:08:7a:2a:56:92:
         4a:15:2f:d5:97:a3:4d:57:eb:5c:02:dd:08:8c:b1:c8:01:c3:
         ac:ab:b6:ed:55:de:bf:78:64:4f:a5:18:bb:bb:0d:cd:87:a0:
         84:be:0e:33:9a:4b:59:ce:41:61:e7:a2:0d:6b:a0:e6:f6:98:
         51:b8:cf:fe:89:64:d9:f9:d8:9f:1e:0c:ea:ab:2a:e3:5b:86:
         f6:17:1c:5b:d1:23:e9:b0:c1:dc:e3:e7:d0:fc:64:39:9d:a9:
         27:e3:84:cf:82:0b:7e:34:dc:a7:5a:bd:70:f0:0b:b0:61:42:
         f6:01:8c:83:c7:ca:9e:05:f1:da:97:cf:d6:50:ec:49:54:57:
         d5:c1:78:05:c2:5a:37:47:76:98:46:7f:c2:a1:e7:06:02:ab:
         73:fe:d2:55:58:b2:95:36:91:32:9c:4d:47:0a:76:d9:b5:64:
         0c:61:53:98:36:b4:f5:3b:84:ec:25:75:98:ba:11:78:98:a2:
         20:7c:5e:54:fc:36:da:ab:87:78:59:60:97:cf:94:c2:06:54:
         e3:00:60:dc:dc:cc:0e:54:48:17:80:7a:c0:24:0d:39:b2:8b:
         51:df:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:53 2025 by rpki-client