Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32342d3234203d3e20323636313239.roa
File:                     34352e362e39322e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          IchAqIBfET3oZG5/iemTnfX6QRsjnzK3F/ZNpUI+u2s=
Subject key identifier:   68:C7:25:28:47:86:0B:41:D4:81:84:AE:FE:9F:A4:E5:18:5C:E5:1C
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       76FB113FC50040E4581F8DF743DE8C8E5F9F46E5
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32342d3234203d3e20323636313239.roa
Signing time:             Wed 05 Mar 2025 19:00:15 +0000
ROA not before:           Wed 05 Mar 2025 18:55:15 +0000
ROA not after:            Wed 04 Mar 2026 19:00:15 +0000
asID:                     266129
IP address blocks:        45.6.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 12:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fb:11:3f:c5:00:40:e4:58:1f:8d:f7:43:de:8c:8e:5f:9f:46:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Mar  5 18:55:15 2025 GMT
            Not After : Mar  4 19:00:15 2026 GMT
        Subject: CN=68C7252847860B41D48184AEFE9FA4E5185CE51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:9a:3c:56:b6:5b:14:7f:4d:de:4f:88:42:
                    57:5c:fa:f2:06:67:ed:0c:22:03:a0:ed:65:47:4a:
                    30:79:8d:5d:f0:75:e2:a7:6b:50:e6:62:25:36:09:
                    cc:19:3b:7e:ea:21:9c:96:4f:6a:7b:2f:cc:cf:28:
                    19:69:e5:a2:31:45:06:c2:e6:4d:90:cb:c2:da:7d:
                    05:c9:7e:16:02:67:8a:a6:c2:a1:c8:02:30:9f:a0:
                    f3:c4:56:09:67:d1:40:a1:76:48:1e:ac:da:fa:6f:
                    d9:f8:25:05:10:72:5f:77:8b:4b:ad:25:3a:13:37:
                    b6:e5:2f:54:39:b3:9e:bf:14:67:fe:67:df:89:f6:
                    65:52:a7:11:fb:e0:83:61:ee:35:36:56:98:6b:1c:
                    c7:3f:4a:cf:e8:40:17:e8:fb:16:00:73:f3:c2:f4:
                    17:73:ca:25:33:c0:f6:d3:fb:4c:75:df:e1:d9:a4:
                    12:02:68:70:05:a2:46:db:dd:6f:a5:61:16:78:ee:
                    d8:c8:b9:11:98:99:01:d1:e9:a0:15:7a:e2:8f:a2:
                    23:59:57:d0:c7:3e:d4:77:90:72:5a:1e:62:02:6f:
                    b9:9f:e0:c5:da:3c:8b:f6:32:a7:d4:10:66:eb:96:
                    e5:49:78:b9:22:49:43:bb:89:6c:ab:28:e4:30:a9:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C7:25:28:47:86:0B:41:D4:81:84:AE:FE:9F:A4:E5:18:5C:E5:1C
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:56:8e:d8:f7:e4:7e:c0:54:22:0c:d3:d9:71:78:6e:ba:bb:
         97:80:0b:c4:1e:fc:de:df:2b:dd:44:81:f0:05:a6:19:4c:22:
         f2:87:80:dd:ac:35:03:3a:a4:c5:0a:58:bf:20:80:05:db:0d:
         ea:00:61:e1:02:38:88:a9:27:8a:cf:16:14:a7:b7:8b:bc:2a:
         db:03:01:4d:85:09:8c:ad:ad:86:b2:12:a5:a4:2f:4c:92:4f:
         63:26:91:9e:33:63:3c:9c:0b:eb:20:10:91:b8:30:da:21:b7:
         be:58:67:09:b9:51:9b:75:7a:c1:85:f2:f8:64:a5:70:5e:03:
         08:67:a5:46:ba:22:88:3e:8b:94:15:18:0c:ee:5f:f8:8f:a6:
         ae:43:ba:ef:48:e2:1d:0c:95:76:07:2f:dd:2a:c7:10:6d:8b:
         e3:7b:9a:91:28:05:7c:ec:81:db:3a:4e:a3:c7:9f:04:80:be:
         db:f7:da:a3:4f:97:5d:28:1a:06:65:88:a2:50:f6:1a:7a:aa:
         c4:b3:66:02:62:6a:68:28:95:a1:a1:79:36:79:7c:6c:fd:30:
         06:33:15:67:59:06:38:99:2f:d0:49:75:32:90:00:77:b5:cf:
         7f:c8:d3:26:02:5f:45:80:da:6e:58:59:10:1a:96:fa:1f:1e:
         3a:0f:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:39:11 2025 by rpki-client