Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233352e302f32342d3332203d3e20323638333839.roa
File:                     34352e3233392e3233352e302f32342d3332203d3e20323638333839.roa (raw, json)
Hash identifier:          i3qwfBLxwVo4VqTuQR38Eg/C6V4zP4V9nDJXqmBgt+M=
Subject key identifier:   8E:9C:45:4D:18:D1:3C:B5:2E:A3:32:CD:B6:50:63:8A:A9:CB:1D:C9
Certificate issuer:       /CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
Certificate serial:       343ABB45BAC74C78899F4F131310262E0052E0BA
Authority key identifier: D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233352e302f32342d3332203d3e20323638333839.roa
Signing time:             Wed 12 Mar 2025 16:18:43 +0000
ROA not before:           Wed 12 Mar 2025 16:13:43 +0000
ROA not after:            Wed 11 Mar 2026 16:18:43 +0000
asID:                     268389
IP address blocks:        45.239.235.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl
                          rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3a:bb:45:ba:c7:4c:78:89:9f:4f:13:13:10:26:2e:00:52:e0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
        Validity
            Not Before: Mar 12 16:13:43 2025 GMT
            Not After : Mar 11 16:18:43 2026 GMT
        Subject: CN=8E9C454D18D13CB52EA332CDB650638AA9CB1DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:59:af:73:cc:e6:ac:22:a6:b4:ab:c8:23:de:
                    8e:ea:0a:fc:a7:52:cd:05:5e:bc:6d:6a:6f:66:2f:
                    4a:ce:2c:fc:67:c0:26:f5:b8:ac:d6:4f:dd:57:35:
                    d1:ce:7c:9e:13:71:88:2e:8a:6e:f3:f6:72:31:19:
                    31:88:50:f1:7a:e2:e1:16:38:66:44:c1:06:85:80:
                    d0:9a:28:d1:d8:ce:4d:aa:b0:ff:72:8c:ec:16:1e:
                    81:ec:8d:e6:93:40:56:9b:d8:09:37:29:e2:9e:2c:
                    5a:99:62:3f:a1:b7:50:01:22:a0:9b:95:7d:c8:0a:
                    52:45:c2:2a:72:b1:91:91:d4:35:e4:db:97:e0:05:
                    16:72:b6:9a:da:79:f5:c7:bc:24:a1:40:45:1e:48:
                    4d:30:39:98:1a:a7:da:ac:1e:2b:78:dd:1f:02:67:
                    bb:fa:da:83:26:01:5b:77:05:85:a4:a4:39:98:3a:
                    9a:be:95:14:e9:d4:69:8a:33:26:19:93:4c:f6:f6:
                    58:68:72:39:7e:41:12:9c:82:51:7c:10:45:21:63:
                    14:5b:4e:6a:84:b1:4f:6c:61:aa:9c:5b:dd:d9:16:
                    e1:b9:88:54:1c:1b:79:4c:d4:02:c1:7a:8b:0e:3d:
                    1a:cd:bf:37:dd:24:13:d0:ee:ce:f9:be:91:0c:e6:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:45:4D:18:D1:3C:B5:2E:A3:32:CD:B6:50:63:8A:A9:CB:1D:C9
            X509v3 Authority Key Identifier:
                keyid:D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233352e302f32342d3332203d3e20323638333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:13:e9:52:68:e1:6e:17:a8:b8:47:ce:fd:d6:32:8c:6b:
         50:39:5e:b4:4e:cc:a3:ee:c2:98:5c:e1:34:18:46:51:98:28:
         7c:b2:83:e9:9e:b6:b5:d9:46:c4:3b:fa:09:fa:33:42:62:6e:
         c8:0c:c6:9a:de:cf:45:67:ef:9d:ab:85:d1:6e:92:9e:7b:3e:
         53:61:95:59:c5:d0:40:e2:0d:d9:63:04:67:0c:f9:ab:84:a8:
         89:87:cb:18:6f:23:85:29:43:77:e4:96:72:a6:f9:f6:6d:f1:
         48:17:f4:5d:6f:4c:51:97:6e:8d:a2:6e:7e:c8:34:73:8a:a5:
         50:cf:0f:d5:0b:da:88:ea:2f:40:0c:57:22:3b:72:9e:e3:19:
         c9:7d:7f:f6:28:bd:d3:84:f8:39:c3:92:a8:66:4c:88:43:07:
         31:03:1c:ae:f5:03:75:be:ed:55:14:6a:e1:3e:b9:48:d1:06:
         14:3a:2c:d1:da:ef:ae:35:a1:46:1a:c0:4f:62:55:db:0f:52:
         47:18:cc:f1:55:2b:3f:56:2b:2b:d3:90:32:6c:e4:e6:ca:92:
         aa:b4:e6:b7:ba:dd:2d:0b:1d:c8:e9:50:aa:22:3c:07:b9:b2:
         81:da:7b:17:3d:76:18:51:b4:a9:63:c4:12:0d:f7:e8:d1:2d:
         72:15:70:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:18 2025 by rpki-client