Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32342d3234203d3e20323637303933.roa
File:                     34352e3232382e3139322e302f32342d3234203d3e20323637303933.roa (raw, json)
Hash identifier:          SrbgBmmCCTwBSDFxp3Xe2PUFtH8tqOb/nphiiQw0Ujc=
Subject key identifier:   B7:8E:31:06:45:8E:06:D0:3D:D3:E4:FC:86:9C:46:DC:23:D9:55:DF
Certificate issuer:       /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial:       23EE68FE8AA4372B4D873C3A8A803E68EB9E2531
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32342d3234203d3e20323637303933.roa
Signing time:             Fri 10 Jan 2025 13:55:57 +0000
ROA not before:           Fri 10 Jan 2025 13:50:57 +0000
ROA not after:            Fri 09 Jan 2026 13:55:57 +0000
asID:                     267093
IP address blocks:        45.228.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl
                          rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 07:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ee:68:fe:8a:a4:37:2b:4d:87:3c:3a:8a:80:3e:68:eb:9e:25:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
        Validity
            Not Before: Jan 10 13:50:57 2025 GMT
            Not After : Jan  9 13:55:57 2026 GMT
        Subject: CN=B78E3106458E06D03DD3E4FC869C46DC23D955DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:3a:62:2f:25:f2:b5:af:bc:b6:44:4f:f0:
                    cd:98:c5:55:96:96:1c:5a:c8:8c:08:e8:22:1a:26:
                    cf:7a:99:02:6d:19:21:28:87:27:16:29:13:c2:02:
                    56:d7:26:2a:02:60:7a:ff:03:36:cd:02:52:39:81:
                    3d:55:56:1f:8f:44:bb:ff:04:15:dd:59:5f:d8:51:
                    c4:20:33:70:ef:50:4b:3d:81:2d:21:82:22:8c:7d:
                    4d:19:58:7a:24:93:68:05:c1:f6:74:a5:dc:ea:4d:
                    60:70:14:9b:99:8a:ad:3a:7b:e4:01:a5:86:5c:fd:
                    ab:5d:de:7b:22:c1:60:63:9d:28:67:04:52:46:42:
                    c3:eb:a5:57:57:9e:f0:97:ad:22:5d:3a:7c:5a:f8:
                    81:7e:fc:2c:1c:20:02:b7:b4:e0:c2:02:c3:f8:44:
                    7f:22:4b:22:77:fd:4f:75:e4:46:9b:90:41:7e:6b:
                    4d:9f:1a:cd:37:a1:3a:33:e8:3f:63:bf:b6:53:ef:
                    9e:22:eb:53:b7:17:4b:99:41:92:67:fd:03:24:99:
                    32:aa:27:6b:50:2e:83:c2:f3:aa:e2:df:75:6b:d1:
                    e8:90:9c:4e:27:b2:13:fe:b2:92:d5:47:6b:ef:88:
                    bb:44:db:05:c6:de:16:f5:bc:9a:92:ab:da:3e:90:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:31:06:45:8E:06:D0:3D:D3:E4:FC:86:9C:46:DC:23:D9:55:DF
            X509v3 Authority Key Identifier:
                keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32342d3234203d3e20323637303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:94:c7:75:b1:39:cb:81:58:aa:a7:b5:36:ba:74:0b:b5:22:
         b8:49:b2:17:91:6b:5f:b1:bc:10:f7:1c:a5:46:b1:58:6d:21:
         59:67:e8:c4:04:da:a9:3c:a6:a5:92:08:8d:45:8a:4a:3b:72:
         cc:f2:b9:6e:8f:df:7a:32:db:5b:7c:1a:f5:10:dc:df:02:2d:
         1d:aa:42:16:a4:2c:1d:63:50:bd:19:57:66:8b:95:8b:27:7f:
         6c:b4:7e:6d:2b:1b:ac:96:04:bb:68:8d:68:23:37:80:88:8d:
         2e:5b:d1:66:56:9e:e2:25:81:6f:c7:87:1d:67:0a:2d:c2:c1:
         f2:63:77:e5:df:c6:48:63:fc:9d:6b:e7:26:e3:c9:51:c5:bb:
         3f:a3:84:c1:0d:b0:9f:d0:15:67:14:0e:b9:8b:36:99:e0:32:
         6a:6b:14:d0:8a:b1:2b:4a:ae:61:2e:af:2c:5b:14:7a:29:36:
         e7:7f:21:d6:57:84:16:c9:b9:8f:48:24:8d:19:47:ab:0b:61:
         85:69:1b:27:8b:43:86:96:69:10:e2:24:0f:19:94:b3:0c:c4:
         26:15:cf:fa:b7:0f:fb:26:71:ae:3a:cd:1e:57:5b:03:19:81:
         65:23:55:cf:3c:a1:02:62:17:33:db:13:55:2b:be:a0:0a:d8:
         90:d1:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:49 2025 by rpki-client