Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
File:                     34352e3137302e342e302f32322d3234203d3e20323638313335.roa (raw, json)
Hash identifier:          SoeCL0aZ+l3TLgazhWCoIgR3tjyNLppAEi6iu2aQgvU=
Subject key identifier:   04:62:BF:0F:71:46:7F:BF:95:5D:B0:18:92:D8:85:73:02:1F:50:A6
Certificate issuer:       /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial:       6E4CFC9F9BEBB072609D4B8947E9450A1062287B
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
Signing time:             Wed 05 Mar 2025 21:49:54 +0000
ROA not before:           Wed 05 Mar 2025 21:44:54 +0000
ROA not after:            Wed 04 Mar 2026 21:49:54 +0000
asID:                     268135
IP address blocks:        45.170.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
                          rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4c:fc:9f:9b:eb:b0:72:60:9d:4b:89:47:e9:45:0a:10:62:28:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
        Validity
            Not Before: Mar  5 21:44:54 2025 GMT
            Not After : Mar  4 21:49:54 2026 GMT
        Subject: CN=0462BF0F71467FBF955DB01892D88573021F50A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:20:4f:aa:6c:ef:e7:92:10:46:97:25:35:
                    8c:a4:be:9e:e5:1b:6b:12:56:3d:64:01:0c:c2:f7:
                    14:ea:d9:86:04:c4:35:4c:e1:49:59:44:b0:eb:3d:
                    04:93:7b:62:a0:bb:aa:42:76:a4:97:3a:a3:d7:38:
                    6f:e0:6b:6a:3b:91:1e:67:61:4e:87:f8:85:21:5c:
                    9d:8b:7e:83:c9:35:59:59:e8:74:07:0f:30:1c:66:
                    0b:b9:7b:18:da:b4:f3:4c:ff:ec:db:ef:08:8b:5e:
                    a4:b6:f1:45:48:f4:df:6c:87:a8:9f:67:1a:98:ec:
                    37:86:26:7f:0c:38:fc:d0:e2:20:d0:ef:14:cc:fb:
                    f8:33:23:c1:4f:c9:ac:e8:a1:7b:17:f8:11:9f:13:
                    d1:fc:2c:25:2d:0e:48:0f:4e:e6:0c:61:10:49:dd:
                    87:0e:51:9a:91:90:b2:b9:48:87:71:cd:ac:13:89:
                    5b:63:ad:eb:b4:d1:62:26:54:4c:e2:80:61:ef:81:
                    02:18:9c:c1:40:3f:53:72:ac:a3:13:7a:21:81:f2:
                    ed:e5:ac:dd:1f:5d:1c:ca:c2:17:cf:94:ce:00:d3:
                    a1:00:ba:12:bf:49:36:74:38:97:a6:64:51:6d:5f:
                    55:17:12:1c:08:f4:c9:63:6e:52:da:5b:61:20:0f:
                    d4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:62:BF:0F:71:46:7F:BF:95:5D:B0:18:92:D8:85:73:02:1F:50:A6
            X509v3 Authority Key Identifier:
                keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:7a:38:62:b7:6f:06:56:81:bc:11:dc:e7:6b:30:b0:bd:
         60:2f:d5:01:d4:dd:b1:42:76:64:a8:42:b1:98:81:f5:97:aa:
         9a:a3:d6:3d:a2:a1:78:8b:4e:16:2c:27:02:39:94:10:32:bc:
         49:87:56:80:0e:2b:7a:af:e9:4d:60:f0:dd:89:ad:6e:72:ad:
         40:45:94:c4:cb:93:42:40:9d:4e:ba:cb:56:95:c5:69:ff:7b:
         b1:3a:b0:dc:38:07:c7:2b:f5:3d:58:70:21:26:30:93:77:e2:
         6e:35:d3:7a:c3:84:87:0c:90:92:4d:40:29:df:d3:91:a2:d4:
         21:09:03:06:0e:b1:55:63:50:d7:88:75:37:0a:3e:e5:ff:4f:
         67:94:03:aa:a9:ca:94:e7:13:78:69:71:21:b1:5d:b2:3b:ca:
         c4:04:3f:5c:88:c3:d1:0b:4e:0a:2c:d2:fa:2a:6b:68:c0:88:
         81:12:1a:86:99:0a:cc:1c:7d:c3:20:86:d3:4d:d1:2f:30:4f:
         26:64:53:01:1e:d9:f1:54:2b:cd:70:75:c2:64:fd:fe:9d:02:
         10:bc:93:38:35:78:68:c8:9e:19:61:98:f9:ca:d3:98:6c:00:
         6c:09:8d:96:35:69:c1:7a:a1:ed:73:be:16:04:1b:36:28:27:
         c9:fa:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:25:13 2025 by rpki-client