Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa
File:                     34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa (raw, json)
Hash identifier:          9A/20jI7CjAW42XSeWaQ6dZzvEktDUfGDHe2/IdEx/k=
Subject key identifier:   A5:05:3B:6B:10:43:E8:B5:F6:90:56:53:04:EF:5E:1A:CB:D5:1D:EA
Certificate issuer:       /CN=2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0
Certificate serial:       1969CA32AB1C794C8CD07D2D5EECB40612AA459B
Authority key identifier: 2E:76:E9:05:C3:C2:C8:5E:3D:E4:63:5F:1B:C8:7F:1A:F3:13:FE:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa
Signing time:             Wed 05 Mar 2025 19:25:57 +0000
ROA not before:           Wed 05 Mar 2025 19:20:57 +0000
ROA not after:            Wed 04 Mar 2026 19:25:57 +0000
asID:                     269362
IP address blocks:        45.184.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.crl
                          rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 18:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:ca:32:ab:1c:79:4c:8c:d0:7d:2d:5e:ec:b4:06:12:aa:45:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0
        Validity
            Not Before: Mar  5 19:20:57 2025 GMT
            Not After : Mar  4 19:25:57 2026 GMT
        Subject: CN=A5053B6B1043E8B5F690565304EF5E1ACBD51DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:3b:62:e2:4c:e6:88:26:01:ba:a0:7d:ae:
                    f3:b6:21:19:bf:c1:99:3d:0b:a0:d7:7d:19:19:83:
                    0a:0e:eb:c0:9a:cd:c8:dd:c0:cb:a4:96:be:e8:7a:
                    dd:f8:42:0e:73:b5:6d:3b:74:39:db:96:79:c0:ea:
                    9d:aa:77:39:f5:e1:76:bf:7b:a1:02:77:54:36:65:
                    bf:2d:82:85:2e:0b:3b:ba:0c:6c:9a:ec:97:12:57:
                    c8:4e:d7:1e:96:89:6c:d9:5d:e8:15:ae:bd:33:cb:
                    12:9d:77:85:84:a3:8e:85:38:92:29:4c:b0:ad:c8:
                    3b:21:28:7e:ab:af:54:0d:8c:76:ca:52:87:f2:1a:
                    f4:ad:d2:02:f1:9b:67:a7:1f:d3:ca:09:f9:3d:76:
                    6b:35:97:5e:19:c4:ff:ff:2b:21:97:b5:3c:94:f5:
                    6e:6b:98:39:3c:96:f7:20:94:a6:0e:62:a6:4e:0a:
                    e5:ff:e2:d6:9d:fe:3e:ce:aa:84:3d:ec:28:79:66:
                    a0:96:d8:ac:5b:2a:12:21:ac:cf:c3:3f:89:56:a5:
                    3b:0a:b0:ed:cb:d5:46:40:26:58:2e:6d:94:ad:30:
                    04:b8:1d:c3:8d:04:47:5a:bd:09:70:21:2a:ef:c7:
                    bd:ba:4e:0f:66:eb:8a:f0:8f:e4:1b:90:8b:f6:67:
                    e1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:3B:6B:10:43:E8:B5:F6:90:56:53:04:EF:5E:1A:CB:D5:1D:EA
            X509v3 Authority Key Identifier:
                keyid:2E:76:E9:05:C3:C2:C8:5E:3D:E4:63:5F:1B:C8:7F:1A:F3:13:FE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:b4:d4:64:26:da:70:e0:ae:9b:01:43:f3:51:5b:c8:04:8d:
         7d:d7:10:34:6d:88:ad:17:0d:2f:ac:5a:a5:1c:27:e7:cc:7b:
         0c:ce:cc:95:92:4e:75:e5:21:68:f5:d2:f5:57:27:52:0e:4c:
         51:9c:e2:0a:4b:ec:d7:e0:fe:89:d0:b0:7c:24:a8:6f:c3:8b:
         35:e0:43:e1:19:a9:31:04:0a:a0:50:86:36:28:94:9d:07:3d:
         be:2e:24:13:c4:af:34:8b:f7:97:be:cd:ea:d1:9a:e0:64:36:
         32:a4:c4:68:a0:99:cc:0e:12:76:d4:fa:f8:4a:4d:80:5d:ca:
         02:f5:88:7c:07:04:62:e3:0e:14:83:63:91:0d:95:ab:84:7b:
         2a:46:ec:09:ac:aa:ff:39:ae:54:94:01:18:d0:29:d0:15:f3:
         1f:3a:d8:cf:41:45:86:55:3d:31:c6:83:86:5a:1d:12:80:6c:
         69:4d:f5:36:30:08:a5:79:64:3f:82:f7:57:cd:7c:0f:c7:97:
         9c:0b:78:45:31:9a:2c:e9:35:f4:ac:92:2e:68:19:65:f8:a1:
         57:9a:6a:63:3f:98:02:7b:1d:1f:f8:02:ad:7a:ad:d8:89:00:
         7a:d7:57:aa:7b:24:62:56:30:75:0e:20:32:1e:e1:80:05:81:
         f8:17:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:38:58 2025 by rpki-client