Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32342d3234203d3e20323638353038.roa
File:                     34352e3136322e32322e302f32342d3234203d3e20323638353038.roa (raw, json)
Hash identifier:          6nTdmS6Wv5/E6CUlq2CKJQ+3ZcgPzPAKOavzmv3k0ZQ=
Subject key identifier:   03:BD:AE:C6:C2:98:08:FE:81:B9:85:6A:DF:12:E6:26:F5:7E:1A:82
Certificate issuer:       /CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
Certificate serial:       61295892D56953C1ABA80D53C8773B761F04A57E
Authority key identifier: 18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32342d3234203d3e20323638353038.roa
Signing time:             Sat 15 Mar 2025 16:57:52 +0000
ROA not before:           Sat 15 Mar 2025 16:52:52 +0000
ROA not after:            Sat 14 Mar 2026 16:57:52 +0000
asID:                     268508
IP address blocks:        45.162.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl
                          rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:29:58:92:d5:69:53:c1:ab:a8:0d:53:c8:77:3b:76:1f:04:a5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
        Validity
            Not Before: Mar 15 16:52:52 2025 GMT
            Not After : Mar 14 16:57:52 2026 GMT
        Subject: CN=03BDAEC6C29808FE81B9856ADF12E626F57E1A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:cc:aa:23:79:65:72:ba:c1:26:36:46:0e:
                    80:cc:07:f9:c3:2b:d1:3a:ca:7a:c5:6b:40:0e:9e:
                    0c:fe:7e:d7:4f:fd:34:4c:c5:4a:9f:7a:51:85:55:
                    83:74:ba:94:a0:1e:ad:3c:13:6a:85:dd:dc:16:79:
                    4e:45:a8:ea:34:0c:b1:cf:e8:67:11:1b:74:6a:cc:
                    7c:a3:17:f2:96:86:df:c4:cf:57:a8:82:c3:09:78:
                    ab:4f:6c:07:75:4f:5d:f4:e7:1e:57:5b:ba:bf:e0:
                    e4:4a:d3:e5:37:de:7f:71:99:48:32:f1:f7:f2:a7:
                    58:7d:f8:8d:ec:54:cf:3f:a1:50:1e:9a:22:02:60:
                    0c:3e:0e:e1:1b:89:01:d5:07:2f:0b:0a:8a:52:92:
                    b4:63:d6:ba:08:33:7d:2e:4c:cc:fc:fe:10:22:fb:
                    a6:e6:36:84:dc:74:5e:9a:a7:7f:4b:0f:6c:55:61:
                    e9:cf:ec:7a:72:1a:37:2c:4f:d9:82:31:61:50:39:
                    40:0c:b4:86:38:09:7d:34:12:e0:f9:2f:1e:17:80:
                    e8:77:b9:7c:6d:01:63:bc:17:b8:0e:93:74:7e:ca:
                    4d:ef:76:66:92:8a:88:07:13:72:f8:53:2a:fc:60:
                    5e:f3:bc:92:93:12:5b:e3:d2:c9:27:a1:5e:f8:69:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BD:AE:C6:C2:98:08:FE:81:B9:85:6A:DF:12:E6:26:F5:7E:1A:82
            X509v3 Authority Key Identifier:
                keyid:18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32342d3234203d3e20323638353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:47:4c:7a:aa:b7:10:f9:27:e2:bd:d5:f5:d1:64:d1:05:c3:
         1a:46:90:c6:f2:c1:25:93:4b:50:c4:b8:04:e2:9d:de:e6:5c:
         50:ac:bd:98:5d:65:da:45:0f:27:38:b9:69:97:d8:11:d4:34:
         99:d8:e1:d9:96:b7:24:f5:41:55:9a:41:e4:b6:80:13:b5:b2:
         3f:09:95:4e:78:44:0f:a6:78:78:cf:91:e1:51:97:6e:44:40:
         2c:a4:9f:fc:03:c8:8e:a0:93:f0:76:95:15:50:b4:71:b3:8e:
         9f:37:0b:3d:c5:62:2e:b0:c0:b0:79:e8:37:d1:22:71:96:b8:
         09:bc:1b:bb:37:a6:e2:c3:83:46:d7:4a:25:e7:a6:df:5f:93:
         7f:72:e7:6f:18:f1:96:7d:71:4c:e1:ab:10:30:ae:50:61:05:
         c7:33:92:b0:50:ee:40:5b:07:05:bf:f3:86:a8:ac:39:35:cd:
         4e:63:bb:e6:6e:0b:7a:ae:58:bb:54:86:30:a6:5f:c1:25:f8:
         12:b7:f9:a4:2a:d2:af:62:6f:2f:89:c4:69:4f:1c:6f:ef:eb:
         a4:34:41:e5:7f:98:2e:29:ae:0e:24:8f:eb:3d:b5:94:cc:82:
         d7:d8:f2:b5:7b:c5:4f:4c:2e:f4:8c:9b:96:ab:b5:5f:fa:98:
         b1:7f:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:39:50 2025 by rpki-client