Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233342e302f32342d3234203d3e20323733363234.roa
File:                     34352e3233392e3233342e302f32342d3234203d3e20323733363234.roa (raw, json)
Hash identifier:          WC47rMKnTlE8VrdprHkNDrHtZb7QZNYPPyUmJ1T8lwE=
Subject key identifier:   A9:1C:7E:3B:14:FC:B8:82:17:D0:F4:69:CE:05:4B:EC:93:2F:3D:4D
Certificate issuer:       /CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
Certificate serial:       7C1B2B725E32DB231E11E4E2F98BA55C02D3CEAB
Authority key identifier: D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233342e302f32342d3234203d3e20323733363234.roa
Signing time:             Wed 04 Jun 2025 14:58:28 +0000
ROA not before:           Wed 04 Jun 2025 14:53:28 +0000
ROA not after:            Wed 03 Jun 2026 14:58:28 +0000
asID:                     273624
IP address blocks:        45.239.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl
                          rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1b:2b:72:5e:32:db:23:1e:11:e4:e2:f9:8b:a5:5c:02:d3:ce:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
        Validity
            Not Before: Jun  4 14:53:28 2025 GMT
            Not After : Jun  3 14:58:28 2026 GMT
        Subject: CN=A91C7E3B14FCB88217D0F469CE054BEC932F3D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:91:e5:ee:23:25:8c:f0:24:84:11:ff:95:
                    e3:c3:d5:4e:91:b2:9c:44:9b:e6:1d:24:26:52:08:
                    a0:61:1f:3a:de:92:2f:1e:71:3c:48:07:72:0b:62:
                    74:62:dc:81:7e:99:91:10:d1:f3:19:93:ff:61:f8:
                    6d:b8:04:a1:9c:0a:d9:7a:71:8c:a1:ef:d0:ea:c7:
                    d1:1b:60:fa:36:07:7e:80:90:35:97:e5:9f:89:0d:
                    88:32:e4:54:4a:ae:e4:82:a2:b7:ed:bd:22:ad:66:
                    91:00:ad:57:f4:e3:28:a8:1f:26:91:2c:be:6c:c2:
                    6b:42:f1:a5:a5:53:e5:a9:f5:9e:22:93:16:26:11:
                    05:6a:f2:29:35:f3:a5:8b:ce:22:77:2d:48:65:34:
                    c5:d6:9d:0b:94:14:5a:87:53:9d:f2:42:40:8e:32:
                    f6:80:c7:56:cb:cb:b4:17:53:25:9b:e0:8e:94:8d:
                    48:f7:ca:c0:4c:13:bb:83:89:87:6e:2e:19:22:eb:
                    c8:38:1a:50:7d:df:df:8c:74:c0:ea:b4:a2:34:bb:
                    a2:7f:e6:b5:04:d2:34:09:9d:af:13:97:ea:77:e2:
                    c9:18:30:18:a8:83:00:eb:3c:60:1f:b4:30:a6:92:
                    44:d9:5f:db:cf:5a:39:4c:a3:ad:f7:1f:37:ac:74:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1C:7E:3B:14:FC:B8:82:17:D0:F4:69:CE:05:4B:EC:93:2F:3D:4D
            X509v3 Authority Key Identifier:
                keyid:D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233342e302f32342d3234203d3e20323733363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:b6:b8:77:94:99:b2:dd:26:fd:91:f3:a6:4b:37:b6:fa:
         be:16:d3:34:5b:01:c4:2b:2e:d8:c8:95:53:2a:4c:8f:e1:a4:
         8c:61:95:d1:de:e7:d9:9d:76:e0:d9:c2:ea:8e:ce:d6:f9:d5:
         6e:0a:74:2a:3f:48:aa:a3:8c:4c:fc:0b:40:ce:3d:0f:6b:c3:
         61:e5:c9:82:bf:3a:4d:d4:86:57:14:7a:fb:52:25:dc:0b:47:
         bf:a6:c5:a0:d3:98:ea:6f:cf:45:c7:58:7c:db:30:f9:44:fc:
         d2:7f:3f:40:81:3a:ed:07:e9:de:9c:f6:0d:04:aa:70:e2:93:
         4e:60:79:f6:3b:ad:48:bb:73:45:ad:be:8d:0a:85:c1:2f:5a:
         2f:2d:92:a7:b9:e3:63:31:9a:3f:fa:d3:b1:29:d5:7c:03:f6:
         63:7f:03:f6:43:3a:2e:c9:d5:65:28:de:df:53:5c:36:ef:e6:
         57:48:a9:41:84:f0:53:9d:2b:0f:12:1e:1a:70:ad:ac:7d:06:
         d1:9f:01:61:90:f5:b0:32:63:4a:5e:31:f2:e5:29:18:5b:60:
         0a:95:6b:a2:c8:72:c6:00:18:c6:de:25:ce:76:6c:82:62:38:
         88:c1:a6:bd:b9:87:67:d6:16:a0:5c:dc:12:19:83:b0:f2:ce:
         22:5b:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:21:41 2025 by rpki-client