Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa
File:                     34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa (raw, json)
Hash identifier:          KkYxC2jk3npjs5eib3sH4bgZjE1tsvKtTbD766Tjdro=
Subject key identifier:   7E:92:68:AC:6F:0B:12:6D:9A:83:8B:17:FA:E2:0B:62:B3:02:22:74
Certificate issuer:       /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial:       141D822A0FDDEC5EBAF9FAF109827B8209E38190
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa
Signing time:             Fri 10 Jan 2025 13:56:00 +0000
ROA not before:           Fri 10 Jan 2025 13:51:00 +0000
ROA not after:            Fri 09 Jan 2026 13:56:00 +0000
asID:                     267093
IP address blocks:        45.228.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl
                          rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1d:82:2a:0f:dd:ec:5e:ba:f9:fa:f1:09:82:7b:82:09:e3:81:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
        Validity
            Not Before: Jan 10 13:51:00 2025 GMT
            Not After : Jan  9 13:56:00 2026 GMT
        Subject: CN=7E9268AC6F0B126D9A838B17FAE20B62B3022274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:a4:1e:71:9c:54:9c:7e:74:1b:d2:16:59:
                    de:d8:b7:cb:82:44:cb:8f:29:3c:b1:9d:a2:d4:ed:
                    29:29:c0:27:8a:3d:0d:87:df:28:d2:b0:22:67:5c:
                    cd:b7:f0:ee:b5:fe:47:f7:45:b6:ea:2d:5a:51:5e:
                    0c:81:42:2f:0c:2d:f2:83:f1:22:6f:22:be:60:f4:
                    9e:df:2f:01:bf:e7:cc:e9:af:2c:bc:b4:41:e6:68:
                    9b:b9:e1:76:3f:ba:4d:4c:fa:af:ba:a0:1b:87:e3:
                    5a:45:a6:88:34:33:3d:c0:0b:c6:21:e5:20:c6:01:
                    91:d9:3f:6b:69:81:e0:f5:23:c1:7b:46:e4:aa:63:
                    3c:80:c7:f3:ef:11:e9:35:1c:46:1a:d4:d5:96:ac:
                    58:ac:bb:cc:79:1c:a4:94:2c:3d:2f:cc:c0:9a:50:
                    17:a1:f6:87:8d:4a:bd:87:c9:5e:f5:d9:22:c9:c6:
                    b7:bc:b4:4a:9b:d3:03:77:39:35:df:18:d8:b0:4e:
                    40:6b:1b:dd:3a:a7:9c:12:57:49:30:d1:8a:c7:3a:
                    a6:aa:3c:67:e8:ad:4c:dd:0a:f0:89:3a:ed:d0:02:
                    10:0b:b3:12:85:9d:6e:64:18:db:71:0f:95:65:5c:
                    e2:21:c1:e1:5b:9a:11:86:7c:e9:ed:b1:95:51:89:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:92:68:AC:6F:0B:12:6D:9A:83:8B:17:FA:E2:0B:62:B3:02:22:74
            X509v3 Authority Key Identifier:
                keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:bf:f9:2a:5f:12:bb:b8:b8:2f:7b:60:57:2c:98:17:74:23:
         55:46:f7:89:09:08:8d:3f:93:b8:e9:36:16:4a:90:1b:8f:d1:
         a8:2a:bc:fd:70:ef:64:a9:b2:7c:f3:13:a3:da:74:f5:b4:10:
         4b:37:d8:d5:29:ea:f1:aa:05:c0:88:31:b5:99:f0:99:97:b1:
         ee:aa:6c:7c:06:ce:77:8c:50:5a:af:ad:d5:f3:f2:00:2f:10:
         9b:0c:dc:25:b2:62:bd:5e:56:44:cf:52:94:e4:73:08:1f:dd:
         8e:95:09:b2:eb:31:ca:03:6a:db:45:b9:54:7e:1d:f4:20:84:
         a0:4a:a5:c1:99:49:35:e2:39:ef:58:24:6f:82:13:95:85:4e:
         98:f7:fc:84:c3:9b:39:49:54:35:e4:06:ad:d6:3c:06:be:bf:
         e5:3f:b6:31:b1:66:0c:08:dd:7e:26:00:f8:23:1c:58:fb:70:
         d7:3a:c0:91:aa:13:0b:41:7a:c9:34:da:03:ba:69:df:fa:47:
         ac:16:15:fb:51:c6:8c:2e:8a:b5:69:66:d6:92:ec:27:f1:f0:
         a3:c6:e9:5d:d6:c4:0b:fa:fb:88:ea:83:60:77:c6:6a:8c:12:
         91:c1:c0:1a:3a:96:23:6e:e9:3e:88:96:75:6b:ab:97:8f:b8:
         92:0c:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:20 2025 by rpki-client