Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa
File:                     34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa (raw, json)
Hash identifier:          R+0tDEsU/RuP7vJ7CQ4vzc4tWKCkAat0n1JGl6uBSPs=
Subject key identifier:   44:9A:CF:E3:4F:6F:80:FC:67:79:07:0F:CC:EB:B9:B1:B8:7A:49:D0
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       09CB6906F581B5E9452515F1DED371F4BA06B1FD
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa
Signing time:             Thu 06 Mar 2025 04:05:18 +0000
ROA not before:           Thu 06 Mar 2025 04:00:18 +0000
ROA not after:            Thu 05 Mar 2026 04:05:18 +0000
asID:                     268513
IP address blocks:        45.161.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 17:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cb:69:06:f5:81:b5:e9:45:25:15:f1:de:d3:71:f4:ba:06:b1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Mar  6 04:00:18 2025 GMT
            Not After : Mar  5 04:05:18 2026 GMT
        Subject: CN=449ACFE34F6F80FC6779070FCCEBB9B1B87A49D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:6a:79:de:52:29:ee:ba:d8:69:7e:63:c9:
                    68:7e:7f:a6:99:41:4e:41:90:ef:41:8b:71:8b:2f:
                    a9:46:da:73:70:e9:c5:a1:12:ea:43:76:55:d1:10:
                    d8:d0:89:cc:59:4f:86:e0:7c:b0:38:e5:4a:c6:92:
                    5f:43:a4:64:a1:35:91:73:2b:fd:1f:20:7f:1e:e5:
                    09:df:07:c9:a7:3b:3c:ed:60:f2:08:56:0b:23:7e:
                    60:61:4b:80:ea:9d:31:c8:3f:2d:25:7a:2f:e0:23:
                    02:97:d4:cd:9a:63:7f:6f:8b:43:9f:ac:08:e6:09:
                    3f:79:99:b1:5a:27:d7:69:93:45:96:ef:0f:cd:21:
                    c8:8a:79:6e:0e:ed:88:23:a7:21:b1:d3:98:24:6b:
                    9d:73:9e:3e:52:52:65:6f:ca:a8:39:ec:37:38:7e:
                    19:12:4d:62:b6:e5:9f:09:c2:b3:e3:f5:5b:3a:0f:
                    0b:8c:70:a4:06:e8:bb:a3:c0:62:16:68:b8:2d:54:
                    7f:d2:c6:c9:2a:d0:78:cb:f1:8d:45:44:8b:f0:86:
                    39:9e:ce:17:7a:23:fe:fb:5a:22:04:6e:0f:e0:87:
                    d2:96:9c:f7:9e:92:be:f1:ef:bc:9b:d6:1e:77:99:
                    4d:67:7a:bf:20:73:5f:ab:cc:e6:0c:4c:7f:b6:ed:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9A:CF:E3:4F:6F:80:FC:67:79:07:0F:CC:EB:B9:B1:B8:7A:49:D0
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:ec:c7:02:36:dc:3c:9b:88:57:c7:fa:c6:f5:e3:97:95:
         be:ac:81:8c:cc:49:46:d6:11:8d:f8:44:4c:04:bb:ac:ec:b4:
         cf:2b:1a:88:dd:9b:3e:84:d9:df:ad:b7:6c:0c:bc:f2:8a:39:
         67:be:d8:9e:3d:12:a9:80:15:76:2b:b9:29:b8:8f:f8:4b:4d:
         44:c4:47:51:b1:fb:a9:13:58:96:26:80:19:bf:6f:68:a8:7a:
         67:cf:89:ab:ef:eb:01:c1:c8:38:59:36:52:2a:4e:78:af:6d:
         60:83:11:5b:7d:2d:06:c2:62:31:d0:3d:4a:d6:3b:d0:23:ea:
         d0:54:08:b0:42:c2:41:4e:86:62:dd:57:7d:3d:f0:86:76:8b:
         4c:7b:8b:27:57:bb:88:26:0a:38:2b:52:ee:af:0d:e7:d9:2a:
         b0:84:4e:77:15:2f:b2:06:45:dc:12:a1:10:f7:66:66:aa:38:
         77:c7:0c:58:36:46:83:5c:f4:f4:d7:97:df:b2:fc:9e:42:3c:
         aa:1f:ff:4f:fb:60:66:9d:20:84:df:1b:07:01:96:c9:0e:fd:
         23:d9:78:0b:11:cb:41:ea:98:33:f5:e5:1e:ae:18:be:bc:16:
         65:85:69:c9:28:bc:3b:4e:59:b0:86:99:08:c3:c5:ae:68:5e:
         1a:19:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:31:12 2025 by rpki-client