Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35312e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          yMK4yeUw2AhtBRNU68G/3xtbOVMFayv8ThpUCu2UTbI=
Subject key identifier:   0F:A1:BC:AA:3F:30:4C:0B:F4:C5:14:08:9B:F9:51:08:51:20:CB:2B
Certificate issuer:       /CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
Certificate serial:       2BB77078F1374091ED2F0C043B669B23BD9A3F47
Authority key identifier: 93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
Signing time:             Mon 14 Apr 2025 18:42:01 +0000
ROA not before:           Mon 14 Apr 2025 18:37:01 +0000
ROA not after:            Mon 13 Apr 2026 18:42:01 +0000
asID:                     267256
IP address blocks:        45.232.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b7:70:78:f1:37:40:91:ed:2f:0c:04:3b:66:9b:23:bd:9a:3f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
        Validity
            Not Before: Apr 14 18:37:01 2025 GMT
            Not After : Apr 13 18:42:01 2026 GMT
        Subject: CN=0FA1BCAA3F304C0BF4C514089BF951085120CB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:b2:f3:fb:ed:e4:1d:ef:80:96:9f:26:15:
                    3d:78:6a:96:3c:57:65:c0:33:c5:40:51:66:c7:ba:
                    01:14:4b:4e:30:a7:4c:44:e9:1b:b6:25:63:21:34:
                    1f:ab:b3:34:fd:90:01:49:1d:d4:63:2f:37:7b:6e:
                    7a:e2:be:78:ec:ee:31:00:bf:e8:af:05:86:02:bf:
                    a4:58:08:20:7c:14:f5:f7:b0:b7:e2:1b:2f:31:b7:
                    4a:87:52:a9:80:47:d8:ba:5b:12:9c:ee:2f:8e:0a:
                    71:10:96:dd:e7:f6:cd:f2:90:f9:29:d0:2c:89:a4:
                    ca:75:dd:68:7f:2a:6d:0b:b7:1a:45:d7:22:81:40:
                    79:f4:1b:ce:4f:e2:b2:a2:3a:5f:6b:fa:0e:0d:dd:
                    2e:06:8b:ad:e2:09:b6:17:87:82:39:b6:b7:d6:82:
                    1b:a2:d2:f3:91:7b:33:a2:0b:14:79:75:57:af:29:
                    88:7f:13:72:d7:02:7c:12:24:1f:66:0c:12:a6:e9:
                    f0:f9:9c:c4:f1:ff:9e:1c:67:a3:08:e0:10:7d:38:
                    eb:56:e9:4d:13:77:49:06:00:7b:f7:21:36:c0:10:
                    26:14:42:1f:ed:13:fb:45:bd:30:5f:a4:ee:fb:d5:
                    71:6c:c7:e2:af:35:0b:7b:f9:98:20:4a:25:4a:b4:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A1:BC:AA:3F:30:4C:0B:F4:C5:14:08:9B:F9:51:08:51:20:CB:2B
            X509v3 Authority Key Identifier:
                keyid:93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:84:c7:f4:9d:2f:50:e2:5d:d9:9f:90:75:dd:27:5c:1c:
         80:33:52:7e:3f:7a:4a:42:8c:92:f2:f1:32:a8:f9:e8:c9:50:
         0b:42:49:74:dc:f5:9e:7a:00:7b:49:bd:20:46:4e:69:b8:d7:
         e6:7f:3c:49:64:0d:83:a0:ea:40:a4:01:e2:99:c0:92:b3:53:
         4a:e5:e5:4b:68:89:b3:e9:44:6f:5e:22:96:ae:f6:cd:c8:ef:
         0f:39:5f:6a:76:db:68:da:de:b7:43:cc:49:1d:d7:51:f0:02:
         cb:68:ee:e7:3e:23:61:52:9e:69:71:02:95:5a:a5:ad:f5:b9:
         75:8f:07:37:c3:02:7f:8c:cf:16:02:58:45:81:85:71:50:2b:
         fa:62:4a:53:d1:6d:92:e7:cc:5e:1c:bf:9f:53:bb:08:bd:1d:
         09:08:b7:69:bc:75:e1:52:4c:05:0e:95:11:f6:64:d6:5a:87:
         09:d9:ec:75:12:ba:0f:bf:41:fa:e7:37:07:d8:3d:c5:e0:f0:
         80:09:c9:88:92:48:4f:6c:94:e7:9b:be:af:ee:dc:2c:05:85:
         68:d7:6b:a9:a4:d8:2f:01:24:a4:82:d2:3b:7a:66:e1:d5:3f:
         14:90:39:88:bf:56:75:d4:64:54:7b:42:cf:c7:6b:8c:44:c8:
         24:2c:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:16 2025 by rpki-client