Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa
File:                     34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa (raw, json)
Hash identifier:          8wLqmwDIkzgTjXeZ0/B/hKgvrewB3sFvzZYXaf3QDnk=
Subject key identifier:   42:D1:90:0A:14:E9:83:EC:36:97:40:EC:D7:A5:93:6A:07:09:F7:AE
Certificate issuer:       /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial:       27435D9150E5DDCC50DE87B411CA7499F981F00C
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa
Signing time:             Fri 10 Jan 2025 13:55:58 +0000
ROA not before:           Fri 10 Jan 2025 13:50:58 +0000
ROA not after:            Fri 09 Jan 2026 13:55:58 +0000
asID:                     267093
IP address blocks:        45.228.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl
                          rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 07:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:43:5d:91:50:e5:dd:cc:50:de:87:b4:11:ca:74:99:f9:81:f0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
        Validity
            Not Before: Jan 10 13:50:58 2025 GMT
            Not After : Jan  9 13:55:58 2026 GMT
        Subject: CN=42D1900A14E983EC369740ECD7A5936A0709F7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:58:85:4b:11:8b:ff:e2:be:84:56:63:3a:
                    7b:d8:40:89:37:1a:7f:3c:4f:4d:6a:93:2c:18:09:
                    17:72:7a:e7:91:78:19:62:bd:da:6b:3a:51:5e:29:
                    3d:06:f5:e9:e7:c0:5b:9b:84:bb:e4:ae:74:e1:5e:
                    dd:b8:85:b4:af:1c:b5:f8:ee:ef:88:5a:27:9c:63:
                    69:71:ff:3a:bb:76:ff:35:c2:13:01:06:2d:a0:61:
                    f4:9b:79:69:9e:e7:21:5c:ad:ee:c8:a8:e6:b6:be:
                    ff:fe:71:9c:80:57:a1:99:55:ae:4c:49:01:18:77:
                    0f:e0:d1:3a:5f:ff:4b:cd:82:ff:59:b1:6c:84:80:
                    63:3b:a9:18:ba:8f:f4:65:7d:19:d3:39:5b:0a:e8:
                    a4:d4:f5:c0:6c:a6:09:ac:8a:51:29:f3:dd:55:96:
                    fe:8e:7e:cc:96:a2:a5:5d:10:87:f4:97:33:c9:f8:
                    66:ac:de:97:c1:c5:b3:3e:4d:a6:9d:05:a0:2e:08:
                    b0:a5:87:46:df:cc:99:f0:51:1c:ce:75:2e:07:38:
                    5d:41:e0:00:e0:c6:d8:4f:06:27:06:05:fe:d3:02:
                    48:2f:3b:5e:ff:04:a2:a8:67:ad:db:33:21:7a:9f:
                    a5:85:ea:0e:ba:ee:2e:cb:9f:dc:89:fa:fd:a8:f7:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D1:90:0A:14:E9:83:EC:36:97:40:EC:D7:A5:93:6A:07:09:F7:AE
            X509v3 Authority Key Identifier:
                keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:c6:93:04:de:63:52:f3:5b:f9:0b:55:6a:fd:a2:ab:c7:68:
         e7:b7:e2:92:74:a7:fb:0c:9f:61:1a:71:83:ee:e5:f3:d2:05:
         14:63:4c:29:c9:a2:d1:b9:ad:ab:22:a0:8d:74:4b:99:ff:a9:
         b0:71:c0:dc:82:3c:31:f0:c7:10:72:37:5c:f2:c7:10:c4:b0:
         fc:88:62:cf:8f:33:e3:8e:23:71:ed:e4:93:03:1d:cd:9a:fd:
         a0:76:07:c2:ae:9a:5c:67:bd:81:23:5f:87:79:88:4e:af:87:
         01:61:5f:5a:9c:ed:20:35:67:0f:8e:ae:69:59:e8:51:ad:6a:
         33:fa:83:9f:d1:b5:c5:d3:50:54:e9:75:16:01:ea:56:64:47:
         21:75:34:27:d9:d0:e7:ef:f6:39:ef:fb:9d:0e:49:d3:f9:9c:
         42:a9:dd:f3:aa:e8:86:08:61:f0:14:e9:75:da:1a:c3:9c:37:
         5f:92:23:26:50:d5:7a:b2:8e:d3:60:c6:09:dd:b9:4d:7a:fe:
         8a:ae:b3:4e:9d:b1:20:13:89:e3:9f:0b:32:11:d9:5e:e6:0c:
         8f:8d:f4:10:7f:0b:c5:ec:7a:e5:98:c5:10:9b:37:38:88:3f:
         43:41:10:fe:0f:5b:cb:82:5b:10:de:a7:6b:6a:79:40:23:a6:
         e6:cd:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:08 2025 by rpki-client