Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31392e302f32342d3234203d3e20323638303837.roa
File:                     34352e3136392e31392e302f32342d3234203d3e20323638303837.roa (raw, json)
Hash identifier:          ANm1vloZ/GVGasSy5bSLcy3HmWbvMW+BoTC5Z5dqTKg=
Subject key identifier:   23:D7:2C:56:55:AD:8F:5C:07:77:A6:FB:CE:35:9F:29:9B:B7:6A:97
Certificate issuer:       /CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Certificate serial:       32D745BB905FAB890C7110BB1AF91C057230F1BF
Authority key identifier: 45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31392e302f32342d3234203d3e20323638303837.roa
Signing time:             Tue 18 Mar 2025 14:38:43 +0000
ROA not before:           Tue 18 Mar 2025 14:33:43 +0000
ROA not after:            Tue 17 Mar 2026 14:38:43 +0000
asID:                     268087
IP address blocks:        45.169.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl
                          rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d7:45:bb:90:5f:ab:89:0c:71:10:bb:1a:f9:1c:05:72:30:f1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
        Validity
            Not Before: Mar 18 14:33:43 2025 GMT
            Not After : Mar 17 14:38:43 2026 GMT
        Subject: CN=23D72C5655AD8F5C0777A6FBCE359F299BB76A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:90:b1:08:fd:ab:be:68:88:76:b3:8e:54:
                    16:23:4e:2f:00:75:9a:45:b7:c9:9a:71:0d:6b:5a:
                    dd:7c:c1:ce:7d:06:39:b3:d7:68:db:17:e6:a6:84:
                    a9:8d:73:dc:47:9f:d7:4f:f2:03:95:b0:d6:27:42:
                    e4:3b:ff:df:5e:3d:e7:e2:e4:b7:97:a3:e6:ec:43:
                    c1:c0:7f:a9:36:7f:ab:08:e9:0d:a4:03:01:91:70:
                    5c:40:62:02:cd:cd:4e:30:5c:51:35:6b:b9:02:26:
                    84:39:85:2d:ce:c7:20:c8:7b:75:0b:6c:b7:72:34:
                    ee:bf:6e:8a:55:c9:d4:4e:9f:05:45:13:d1:6b:61:
                    f9:ef:43:be:a3:03:cf:d5:be:e6:11:5a:8d:16:1c:
                    23:e1:d7:5c:7c:bb:db:88:e7:e5:70:a7:82:11:e9:
                    27:1d:89:7e:b9:13:89:7f:37:aa:fd:f8:e3:f8:3f:
                    dc:ad:ec:65:f2:6a:14:b4:28:eb:26:b9:a2:c6:9d:
                    70:9c:92:d9:ef:05:b4:be:cd:80:cb:e4:7a:ec:94:
                    cc:83:5f:4d:79:79:9b:57:7a:50:4b:1c:c7:f2:94:
                    76:da:fb:5b:23:c0:1c:8e:76:a4:ca:16:2d:11:5b:
                    64:4e:76:b8:6e:50:2e:85:c9:ad:3f:73:6e:04:8b:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D7:2C:56:55:AD:8F:5C:07:77:A6:FB:CE:35:9F:29:9B:B7:6A:97
            X509v3 Authority Key Identifier:
                keyid:45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31392e302f32342d3234203d3e20323638303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:f9:36:33:cb:f6:5f:e4:e6:49:6b:d6:ae:41:52:fe:06:
         b2:b3:7c:55:ac:d9:54:98:d8:6f:9d:34:00:ce:c9:08:5a:8e:
         26:fe:29:6b:00:6d:d5:df:8e:5e:a9:4b:52:38:76:fe:40:8a:
         00:b9:76:05:86:2f:90:77:87:fd:9d:d5:87:d5:d6:09:05:a3:
         b4:4f:4e:d6:76:5c:4f:be:26:49:fd:2c:83:c3:85:ff:3f:25:
         25:ec:8a:ac:1b:fc:c6:f4:79:59:53:af:63:3b:8f:10:6f:5c:
         6b:d9:c0:5c:c2:00:eb:6b:25:83:71:0c:95:97:67:03:22:ef:
         a3:4e:49:f6:21:ff:fa:cf:fe:3d:88:cf:6e:fb:31:72:3e:aa:
         05:79:95:7d:cd:54:d1:10:e2:1c:5c:86:c4:7a:16:1b:15:c6:
         d6:4b:fd:d7:98:62:9c:33:80:34:3a:2d:3a:d6:80:70:40:96:
         00:5a:63:33:98:c0:80:d4:9f:44:37:ca:a0:63:6d:a8:0b:fd:
         cd:38:7b:41:e5:b7:f9:f8:b5:1f:c7:8a:9c:90:5c:0b:2c:ec:
         ec:82:13:ed:7d:7c:5b:1c:c3:47:2a:02:ea:7d:02:b5:2f:02:
         bd:d0:8e:60:21:2a:3b:e8:fe:c7:3f:06:a4:b0:97:d6:89:96:
         99:df:cc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:51 2025 by rpki-client