Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa
File:                     34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (raw, json)
Hash identifier:          zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=
Subject key identifier:   D0:9A:FD:2E:F2:DD:77:D4:61:66:6F:92:AB:3A:37:04:F0:A2:87:6F
Certificate issuer:       /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial:       0A48A126C71DF544D0F452DE8E6FAC1A36F0DDE0
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa
Signing time:             Thu 19 Dec 2024 23:08:07 +0000
ROA not before:           Thu 19 Dec 2024 23:03:07 +0000
ROA not after:            Thu 18 Dec 2025 23:08:07 +0000
asID:                     269707
IP address blocks:        45.191.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
                          rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:48:a1:26:c7:1d:f5:44:d0:f4:52:de:8e:6f:ac:1a:36:f0:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
        Validity
            Not Before: Dec 19 23:03:07 2024 GMT
            Not After : Dec 18 23:08:07 2025 GMT
        Subject: CN=D09AFD2EF2DD77D461666F92AB3A3704F0A2876F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:cf:3c:92:ae:c5:74:e1:2e:f9:af:17:f9:
                    ba:8c:76:89:d6:9c:77:ad:3f:90:dc:ba:ec:a6:4e:
                    43:b9:8e:67:45:9c:ec:0f:bb:0e:c9:17:7c:1d:7a:
                    ee:0a:33:8f:35:a4:28:0e:6c:da:32:62:8d:4c:4c:
                    ac:e7:f6:47:bd:46:55:2e:46:6d:5c:69:69:17:ae:
                    93:8f:ba:ab:d5:fe:ac:3d:fe:94:dd:59:f4:31:b5:
                    7b:15:16:62:4b:f4:33:2e:7a:c9:73:bd:91:23:f1:
                    40:54:11:c4:a0:8a:fc:a5:fc:35:d8:2f:2a:96:de:
                    08:bb:f3:80:cf:9d:66:71:68:51:33:38:a3:35:d8:
                    e1:ee:dd:44:2b:18:56:56:50:5d:30:40:52:5a:3e:
                    98:cb:2a:94:7c:b0:e4:a5:94:f1:45:d0:d7:83:23:
                    e9:91:6f:0c:78:52:b3:47:90:cc:56:fe:b8:6d:95:
                    62:21:ae:5e:c0:6d:0d:8b:be:9a:c9:1a:ee:56:45:
                    df:3d:a2:c4:d3:ac:c2:1b:49:2d:e6:ff:10:0b:df:
                    3e:63:18:5e:0e:09:6f:fa:9a:2a:7a:6c:f4:c6:c0:
                    e2:e6:84:2b:f9:df:95:d7:11:72:91:73:ba:b8:e2:
                    09:2f:9e:66:bf:ec:2d:5e:32:54:52:9e:a7:33:80:
                    96:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:FD:2E:F2:DD:77:D4:61:66:6F:92:AB:3A:37:04:F0:A2:87:6F
            X509v3 Authority Key Identifier:
                keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:1b:a7:94:e4:3e:9d:b3:2c:50:5d:2f:0a:f1:d3:0e:bb:28:
         ee:8b:c8:1c:8b:60:be:22:8e:d6:14:0b:cf:b4:35:be:81:37:
         45:8a:f0:03:59:7a:ce:d9:12:a1:e5:c4:e6:45:ba:40:0f:d7:
         5b:e4:0d:bc:3d:42:82:95:f3:e0:c5:90:47:66:e4:d5:59:4b:
         33:69:c4:09:02:88:72:a0:99:a2:32:d4:1b:88:3a:ad:79:a4:
         c4:2c:7c:19:fa:e4:6c:b4:72:98:ee:14:11:03:0d:8d:3c:e8:
         d8:b5:b6:e3:5c:61:95:13:2b:51:00:c3:a3:3b:12:be:44:61:
         16:c1:09:25:26:35:95:26:0c:e7:32:90:3b:78:bc:dd:a4:e8:
         a1:eb:2f:6d:d7:23:0d:7c:74:3b:09:dd:d7:53:d0:d9:05:89:
         7d:e6:ea:a4:7d:04:84:08:36:8f:a6:40:80:f2:2b:63:0a:c2:
         b0:82:e9:cc:28:b7:9a:9a:6e:98:20:4e:e9:b5:b6:f8:b1:6e:
         8b:0d:69:da:df:cc:6d:7a:b9:64:58:5a:b3:db:ed:ee:5f:e0:
         5d:13:f8:fc:1c:71:ff:b7:d3:6f:78:ae:6a:fc:04:28:69:7d:
         c5:5f:35:02:51:d2:c1:c3:5e:1c:82:43:0c:dd:9e:00:e9:c4:
         82:6c:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:55 2025 by rpki-client