Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/34352e3233372e3139362e302f32322d3234203d3e20323638323934.roa
File:                     34352e3233372e3139362e302f32322d3234203d3e20323638323934.roa (raw, json)
Hash identifier:          pRcg3mM183goNuU/3Ve105feGzHoXBv1IFNCED/d5xM=
Subject key identifier:   94:E2:0F:8F:C0:06:3E:F5:56:FF:F3:AA:C9:84:89:06:8D:22:51:09
Certificate issuer:       /CN=D486E78181EB5A2A2481151B9D21AD45CE11DD00
Certificate serial:       0E6F7837E7A344580EC9F9BB1A8EBDEDBC6759FE
Authority key identifier: D4:86:E7:81:81:EB:5A:2A:24:81:15:1B:9D:21:AD:45:CE:11:DD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/34352e3233372e3139362e302f32322d3234203d3e20323638323934.roa
Signing time:             Thu 06 Mar 2025 13:00:25 +0000
ROA not before:           Thu 06 Mar 2025 12:55:25 +0000
ROA not after:            Thu 05 Mar 2026 13:00:25 +0000
asID:                     268294
IP address blocks:        45.237.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.crl
                          rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 23:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6f:78:37:e7:a3:44:58:0e:c9:f9:bb:1a:8e:bd:ed:bc:67:59:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D486E78181EB5A2A2481151B9D21AD45CE11DD00
        Validity
            Not Before: Mar  6 12:55:25 2025 GMT
            Not After : Mar  5 13:00:25 2026 GMT
        Subject: CN=94E20F8FC0063EF556FFF3AAC98489068D225109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:8e:f6:85:3f:77:92:e4:09:cb:d2:3a:64:
                    78:41:5c:40:9c:da:49:34:14:50:3c:5c:fd:13:95:
                    2f:b8:f7:f6:cd:2e:93:01:56:ef:b1:1e:8c:2d:6f:
                    ae:c8:8a:04:c1:6c:bf:41:03:ee:cd:26:a2:4d:3d:
                    a1:24:a6:de:01:4d:30:b3:06:b9:75:73:d7:e5:85:
                    c7:6d:5d:b9:ec:d1:6a:d4:7c:25:f3:c8:cf:61:8a:
                    f7:ee:b7:1a:04:a0:ab:35:c4:23:c3:03:69:c2:a3:
                    c3:cb:b3:5b:ce:83:9c:6e:a8:3d:58:47:4b:e8:84:
                    b1:a9:0c:ff:0f:5a:8d:8c:1f:c6:7c:48:2e:66:33:
                    6a:5d:eb:0b:f0:04:a7:1b:7a:fd:18:64:48:b3:4b:
                    55:84:bc:c9:74:f5:26:0e:21:6f:15:48:a2:67:f1:
                    87:45:c7:38:2b:e2:3e:08:99:d8:d4:42:2d:3d:2a:
                    a5:d1:55:5b:53:a5:86:72:2c:ec:66:e3:85:92:26:
                    df:76:1a:04:72:3b:ad:fd:b1:77:7e:02:ad:44:40:
                    0d:1a:00:55:52:40:cc:4d:3c:3a:c5:2f:46:80:a8:
                    3d:22:3f:36:c7:c4:bd:bc:bd:d5:a4:0f:99:8f:0a:
                    2c:64:0b:a4:78:1d:40:77:f1:30:2b:0a:70:81:34:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E2:0F:8F:C0:06:3E:F5:56:FF:F3:AA:C9:84:89:06:8D:22:51:09
            X509v3 Authority Key Identifier:
                keyid:D4:86:E7:81:81:EB:5A:2A:24:81:15:1B:9D:21:AD:45:CE:11:DD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/34352e3233372e3139362e302f32322d3234203d3e20323638323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:05:1b:25:e6:42:fa:c8:a8:58:7b:67:7a:54:6f:ef:c5:37:
         f0:ab:a3:de:c9:c3:9b:f9:bb:a0:98:47:0c:34:f1:c2:25:dd:
         45:34:ae:3a:31:3a:8a:d0:d3:a8:fe:21:2f:69:80:e1:c3:a5:
         89:39:ef:71:14:00:73:a7:bf:1d:7a:2d:f1:33:62:ca:89:60:
         3b:31:85:18:28:96:00:dc:3d:1e:00:d7:ff:d5:51:67:e1:1b:
         a9:fc:40:e7:b5:1c:70:6d:53:02:40:6c:2c:85:36:51:c1:00:
         e3:d0:86:82:b0:32:ff:43:82:cc:2e:91:26:fd:74:57:36:b2:
         7e:83:90:02:24:77:d9:1d:53:6f:39:f8:7b:1a:b7:67:30:55:
         dd:c1:12:56:1c:90:02:1b:71:a8:81:6a:15:23:81:cd:fa:43:
         91:0c:21:61:89:78:c4:74:52:07:dd:96:00:c2:05:9e:43:08:
         c1:c1:c6:0e:cb:76:24:b3:a5:f0:de:b8:8e:e3:94:32:9a:62:
         1c:0b:61:2e:71:93:4d:d0:a8:be:e3:de:5a:56:80:93:6e:30:
         f0:99:8a:33:36:ba:08:bc:e8:42:51:d7:52:dc:cb:89:ff:88:
         20:fe:ab:fc:13:87:ab:db:ee:4c:37:66:7f:3b:cc:ae:87:bb:
         73:11:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:08:32 2025 by rpki-client