Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
File:                     34352e3136312e34382e302f32332d3233203d3e20323638343437.roa (raw, json)
Hash identifier:          s+RFv+kqDfvXnkiVLXL4eHK5YfMu/BZzoeaxcbVjkxw=
Subject key identifier:   FE:A0:F9:4A:49:6C:0B:0B:B6:9A:06:C4:44:6D:8D:60:6D:D7:98:C0
Certificate issuer:       /CN=94D61A37D7CAE2092F2562DEAAD1859AF3611C9D
Certificate serial:       0F489EEF30AE77A03E3EBC3234A37CED2F97C6DE
Authority key identifier: 94:D6:1A:37:D7:CA:E2:09:2F:25:62:DE:AA:D1:85:9A:F3:61:1C:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
Signing time:             Wed 26 Mar 2025 17:03:29 +0000
ROA not before:           Wed 26 Mar 2025 16:58:29 +0000
ROA not after:            Wed 25 Mar 2026 17:03:29 +0000
asID:                     268447
IP address blocks:        45.161.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.crl
                          rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:48:9e:ef:30:ae:77:a0:3e:3e:bc:32:34:a3:7c:ed:2f:97:c6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94D61A37D7CAE2092F2562DEAAD1859AF3611C9D
        Validity
            Not Before: Mar 26 16:58:29 2025 GMT
            Not After : Mar 25 17:03:29 2026 GMT
        Subject: CN=FEA0F94A496C0B0BB69A06C4446D8D606DD798C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:39:66:2e:57:84:d7:6b:16:6e:49:a4:8b:b0:
                    03:51:80:d7:23:bf:6c:43:80:23:53:54:db:50:e8:
                    da:05:ec:72:cc:03:57:0f:26:01:84:a2:c9:4e:55:
                    55:28:db:b1:60:45:29:a7:2a:46:a6:94:df:cb:70:
                    02:c8:b1:6e:e1:7e:35:8d:7a:a4:d8:d5:b8:24:27:
                    47:27:de:99:f1:12:43:71:4b:cb:e5:93:f0:54:32:
                    c0:99:ed:62:e9:be:72:6d:6d:c1:6b:fc:39:27:e7:
                    d6:aa:d9:29:14:85:44:63:f4:f0:d9:f5:b9:d5:1f:
                    6e:76:af:2c:06:2b:20:47:e0:8f:5d:ad:f7:a8:f5:
                    e5:01:9e:6c:86:6b:d5:13:cf:ac:42:16:05:3f:20:
                    3e:42:12:5e:59:6b:26:af:23:48:28:ab:d6:74:75:
                    47:5f:0e:7d:37:d7:00:87:44:82:2b:79:87:53:ef:
                    91:74:66:cf:c9:61:ba:ce:80:e8:ae:d8:9b:af:d3:
                    30:85:d3:62:61:9b:ac:f8:3b:6e:91:4e:12:81:32:
                    fc:0f:b5:7c:d9:69:d6:cf:61:76:3f:06:8b:3e:3e:
                    d6:80:c0:b1:40:9f:06:61:f8:a0:0f:97:73:73:a6:
                    c0:a6:37:9d:50:16:d2:68:2a:74:6b:57:3c:93:83:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A0:F9:4A:49:6C:0B:0B:B6:9A:06:C4:44:6D:8D:60:6D:D7:98:C0
            X509v3 Authority Key Identifier:
                keyid:94:D6:1A:37:D7:CA:E2:09:2F:25:62:DE:AA:D1:85:9A:F3:61:1C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:47:b5:c2:29:34:24:28:41:b3:85:d5:3e:9b:b6:34:7f:9b:
         dc:13:d4:61:fe:ac:15:cf:95:e3:c8:98:1e:4f:2d:dc:0b:b0:
         d9:0a:2d:f9:7c:ac:ad:8d:29:82:ec:c5:1d:6b:87:4f:84:85:
         71:b1:1b:a1:bf:51:ce:e2:7b:67:c5:e3:06:df:61:5f:48:62:
         8b:15:73:ef:65:98:7f:4e:8c:e3:83:85:ea:3b:5a:bd:39:64:
         ad:71:93:6f:e4:03:69:64:ac:5c:ab:0b:be:d9:6d:a5:8b:c0:
         60:43:e4:dd:25:bc:95:9c:b7:d7:51:4e:f3:2a:e3:19:60:13:
         05:ba:9f:5e:c5:59:11:0b:b2:53:25:f5:5c:e4:12:82:93:4a:
         e4:41:26:76:48:34:2b:f0:00:ab:12:82:f1:56:5d:54:ab:3e:
         c5:c0:9f:60:de:53:f7:cb:23:49:03:6f:c5:ad:27:ed:96:3e:
         d7:06:88:c8:e3:5a:92:d1:f0:3f:7b:72:1d:91:64:8b:13:df:
         98:6d:39:cc:c3:57:3b:78:be:13:ce:c9:9f:b8:d7:c2:df:bb:
         49:b4:fd:fa:a4:ff:ab:51:f4:1b:4c:20:45:45:35:ee:86:77:
         e6:78:d3:7f:33:38:42:fd:d6:eb:14:25:9a:bc:94:93:f4:a1:
         fe:f8:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:31:20 2025 by rpki-client