Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa
File:                     34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa (raw, json)
Hash identifier:          f4nM12AsxJ60l0jsm4DOXZcbZBhx28LRr0EpXCVfYSw=
Subject key identifier:   40:52:69:DC:02:CE:1B:64:E5:F1:90:DA:0D:FC:45:D6:69:98:2D:8C
Certificate issuer:       /CN=34D2D112FBB2360F44F9772873942AC8955FC4D6
Certificate serial:       0B6132DDE6721CCE47999D46471093EB8A47E89D
Authority key identifier: 34:D2:D1:12:FB:B2:36:0F:44:F9:77:28:73:94:2A:C8:95:5F:C4:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa
Signing time:             Fri 13 Jun 2025 00:07:53 +0000
ROA not before:           Fri 13 Jun 2025 00:02:53 +0000
ROA not after:            Fri 12 Jun 2026 00:07:53 +0000
asID:                     268234
IP address blocks:        45.236.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.crl
                          rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 19:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:61:32:dd:e6:72:1c:ce:47:99:9d:46:47:10:93:eb:8a:47:e8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D2D112FBB2360F44F9772873942AC8955FC4D6
        Validity
            Not Before: Jun 13 00:02:53 2025 GMT
            Not After : Jun 12 00:07:53 2026 GMT
        Subject: CN=405269DC02CE1B64E5F190DA0DFC45D669982D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:cf:6d:5d:0c:61:ae:f3:08:cb:c0:9e:69:
                    dc:a9:e8:df:9d:e9:9e:ce:c2:cc:f8:d2:6d:e0:08:
                    63:46:79:ed:97:fa:1a:2d:50:b3:db:0c:a9:8c:d3:
                    f2:3e:85:2a:c2:b1:e6:64:4d:3e:21:48:02:96:56:
                    9e:2b:ab:4f:eb:8f:c1:c5:07:d4:30:e4:5f:f6:4a:
                    d4:4d:d8:bd:eb:f8:50:4b:40:fb:36:08:0f:a2:43:
                    6d:ac:ac:26:d2:34:e4:80:a5:cc:d4:b1:1e:2c:e9:
                    86:06:7c:d0:66:a7:21:d4:44:94:1a:dc:fa:8e:1f:
                    57:d1:de:4c:6d:09:66:18:ef:b6:e9:e8:65:19:97:
                    e2:65:a0:50:09:94:1e:d7:0e:de:1a:59:d9:c2:04:
                    6a:fc:0f:d4:fb:53:b8:5f:6d:d0:18:1b:fa:7b:93:
                    ec:4d:4f:83:5a:39:4b:81:7c:55:71:e0:17:20:0d:
                    7a:72:ac:4e:83:0d:92:d3:a1:16:64:48:d7:b4:5e:
                    f0:50:ae:9f:a2:15:f9:c2:c6:ca:20:e5:ec:e9:a7:
                    28:05:58:da:6d:1a:bd:fe:31:24:8c:ac:5c:d2:b3:
                    a8:bc:38:da:01:9f:12:32:d5:c7:db:1f:08:b6:04:
                    c7:2b:96:41:d9:d7:85:36:0c:3b:96:75:70:84:29:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:52:69:DC:02:CE:1B:64:E5:F1:90:DA:0D:FC:45:D6:69:98:2D:8C
            X509v3 Authority Key Identifier:
                keyid:34:D2:D1:12:FB:B2:36:0F:44:F9:77:28:73:94:2A:C8:95:5F:C4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:92:57:37:dd:4a:72:56:0b:20:07:05:3e:60:ea:4a:75:a1:
         e2:20:0c:d1:9c:48:af:b1:d2:7b:ae:33:a1:bc:1a:9d:3f:81:
         8f:a7:2b:39:33:92:81:e6:56:fb:30:bb:5f:9d:dc:09:7f:8f:
         e1:b1:04:db:d5:bc:fe:1f:ef:e1:7e:c4:c6:fa:da:d5:9a:7b:
         d2:fb:6c:51:9a:9e:32:1a:1c:c5:42:c5:2e:6d:6d:04:79:a4:
         ca:b7:66:6e:25:81:43:01:e1:87:c2:48:47:dc:5a:13:68:14:
         62:57:61:a0:d7:05:d9:f9:8f:6e:d5:7d:2d:51:ba:39:26:5e:
         95:97:63:64:11:fa:98:0f:64:50:b3:06:5e:fb:cd:e8:61:af:
         5c:31:05:d5:39:cd:af:d3:7f:8e:bb:5e:9c:45:ca:6c:29:01:
         82:f4:83:30:24:a2:84:61:a9:d3:55:03:d1:e9:a0:db:da:1b:
         f4:63:a3:e5:d4:2d:b0:21:ea:5f:0f:79:99:bf:6c:33:c8:b2:
         d8:75:eb:0f:ad:b7:1e:4e:f0:85:e7:93:ca:6c:a1:7d:cb:79:
         b3:ac:9a:58:9d:7e:52:bd:83:d4:2e:42:c5:46:99:a0:61:28:
         cc:82:60:f5:c7:e6:b6:7b:76:1a:7b:20:62:38:04:fb:b9:0b:
         46:79:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:36:34 2025 by rpki-client