Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32332d3233203d3e2030.roa
File:                     34352e3136312e3231322e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          0fIlHaiRFL/5h0Jlb6hFh1tBD45uuRABtXqzM0swN/8=
Subject key identifier:   3D:6C:3C:4D:CC:CC:95:D4:D0:EC:B9:89:9A:10:1C:22:8D:21:0E:B4
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       58DFC74050F0FDA2B9FD2FA0F10EF894E4878650
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32332d3233203d3e2030.roa
Signing time:             Thu 06 Mar 2025 04:05:20 +0000
ROA not before:           Thu 06 Mar 2025 04:00:20 +0000
ROA not after:            Thu 05 Mar 2026 04:05:20 +0000
asID:                     0
IP address blocks:        45.161.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:df:c7:40:50:f0:fd:a2:b9:fd:2f:a0:f1:0e:f8:94:e4:87:86:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Mar  6 04:00:20 2025 GMT
            Not After : Mar  5 04:05:20 2026 GMT
        Subject: CN=3D6C3C4DCCCC95D4D0ECB9899A101C228D210EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:5f:ed:c8:84:bb:b4:5e:d9:2e:79:04:b8:
                    b9:65:f0:73:ba:76:c2:da:34:89:44:52:ef:e0:b3:
                    7b:07:0c:0c:74:2f:6f:8b:22:19:d7:6b:0a:4d:c7:
                    0c:67:0d:bb:22:b6:e2:b6:fe:e0:3e:91:4d:a5:42:
                    91:16:6c:27:37:be:70:49:16:e0:c4:fa:9b:dc:49:
                    a6:9a:42:82:06:5b:0f:8f:a1:ba:30:76:6b:df:4a:
                    09:b8:ae:1f:76:dd:09:93:04:4e:c0:35:0f:00:c0:
                    d4:03:ac:41:79:dc:22:aa:11:97:0a:dc:22:70:dc:
                    81:75:e7:14:6e:49:2f:63:ed:27:70:f2:28:6f:88:
                    40:5f:e0:88:34:9f:e6:53:96:cc:9b:8f:04:1f:8b:
                    21:69:7d:65:ef:cf:56:dd:a4:08:47:76:9e:b2:ea:
                    2d:24:36:c0:28:4e:28:1d:c2:59:86:07:66:29:48:
                    d3:2e:43:f4:9d:fd:b1:97:1f:dd:af:b2:d2:6f:c6:
                    67:13:b2:0c:20:f1:ec:46:63:c7:3f:f3:a3:4e:68:
                    46:2d:16:a1:78:56:b8:87:57:9b:ee:05:bb:d3:3d:
                    40:15:e5:10:26:01:92:2a:15:35:04:27:ae:45:d5:
                    0c:a3:6c:e9:0c:ff:9c:05:50:cc:e0:8a:ee:66:e0:
                    63:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6C:3C:4D:CC:CC:95:D4:D0:EC:B9:89:9A:10:1C:22:8D:21:0E:B4
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:05:45:77:13:ee:c6:fc:90:e8:06:33:f5:ce:1f:65:6b:82:
         d0:9d:c6:5d:ca:1d:f9:b6:e4:fe:25:67:10:a9:e7:6a:ef:97:
         3d:52:5d:30:ec:0f:54:6e:34:fa:67:e0:e2:50:cc:2f:2a:28:
         04:15:2e:92:d4:b8:ba:67:29:08:17:d4:df:90:fe:2a:4f:0e:
         53:85:bd:08:16:c4:d8:14:21:87:1e:1e:29:2c:64:ff:44:7d:
         39:7c:a0:fc:8b:e6:e6:06:2b:10:a7:0b:be:b6:b4:87:46:b7:
         80:3c:9d:40:7c:c4:11:07:39:28:bd:41:dc:b7:01:82:47:34:
         ba:d2:af:f7:b4:1e:f7:40:32:63:02:ac:c7:70:17:fd:36:ba:
         b8:f7:c7:96:01:b7:a2:f7:7b:ce:1d:c1:75:50:57:aa:62:30:
         a8:9d:f5:05:9b:15:be:96:eb:dc:11:ec:45:7f:1f:8e:ed:74:
         f2:95:2b:f7:5c:22:36:38:db:46:8b:3c:89:d1:5f:e5:97:8f:
         f3:a0:8c:15:fa:38:58:0e:8e:a7:8c:3f:97:5c:80:66:bd:fa:
         25:15:32:6a:54:26:b5:2b:08:28:09:e6:ac:0d:42:1a:46:c2:
         17:34:2f:d2:4d:b9:90:a2:95:30:88:b4:21:11:13:c6:06:39:
         5c:55:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:10 2025 by rpki-client