Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
File:                     34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (raw, json)
Hash identifier:          dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=
Subject key identifier:   41:0F:B2:5E:4D:F9:91:0D:64:6B:C7:9E:61:CC:A0:30:FB:15:F7:C2
Certificate issuer:       /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Certificate serial:       01EE7AE17B47D5457EE936BFF30E5EBB70C11E0B
Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
Signing time:             Mon 10 Feb 2025 11:13:26 +0000
ROA not before:           Mon 10 Feb 2025 11:08:26 +0000
ROA not after:            Mon 09 Feb 2026 11:13:26 +0000
asID:                     268289
IP address blocks:        45.237.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
                          rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ee:7a:e1:7b:47:d5:45:7e:e9:36:bf:f3:0e:5e:bb:70:c1:1e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
        Validity
            Not Before: Feb 10 11:08:26 2025 GMT
            Not After : Feb  9 11:13:26 2026 GMT
        Subject: CN=410FB25E4DF9910D646BC79E61CCA030FB15F7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:d8:26:ae:f9:9f:c2:3e:71:70:e0:98:f4:
                    7a:4c:22:8d:4e:81:5f:6d:0e:de:a0:d1:97:82:8b:
                    09:c8:f2:f9:cb:95:0c:45:7c:0d:a1:b6:ff:3f:2d:
                    dd:17:9b:26:8e:94:cf:f6:89:b2:24:59:88:e2:54:
                    dc:43:91:45:06:bb:03:0e:23:fb:51:c3:fb:cc:4a:
                    3e:b2:72:ba:44:b1:70:d7:a6:ef:5a:82:4d:29:20:
                    f9:e6:5a:45:90:dd:cb:06:01:93:e3:35:8b:bd:e8:
                    e5:d4:82:c8:ab:34:9d:72:74:49:60:df:ed:32:0b:
                    cf:a4:5f:65:d6:1f:0c:45:ff:eb:3f:4d:39:0f:c0:
                    2e:d9:2f:e0:d4:26:88:f9:c0:94:19:72:33:5f:76:
                    52:bb:bd:99:86:56:9e:84:75:e3:bb:67:a5:8b:01:
                    f1:f0:a9:8b:24:35:4c:2a:97:83:c0:4b:7c:86:eb:
                    f8:6f:df:4f:82:a5:ac:a0:e5:60:14:06:ff:ed:73:
                    64:a0:77:cc:9d:a0:2c:c1:5e:08:71:12:68:9a:ba:
                    04:55:2b:f7:fb:7b:34:13:52:27:ba:03:e9:86:22:
                    b1:03:b3:9d:01:dd:52:be:2a:00:68:85:c2:77:34:
                    ff:2c:68:f0:53:35:83:cd:79:7f:86:a0:5e:af:ce:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0F:B2:5E:4D:F9:91:0D:64:6B:C7:9E:61:CC:A0:30:FB:15:F7:C2
            X509v3 Authority Key Identifier:
                keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:60:15:ee:cf:5c:aa:0b:f6:83:9b:c8:38:86:fb:6d:23:ea:
         4d:72:86:93:80:8a:f4:67:a4:9f:f8:30:d6:9a:8d:c5:57:fd:
         fe:1d:db:91:95:89:a4:cf:82:d1:e3:e2:c3:b0:49:be:79:f3:
         42:73:f1:4c:75:ef:99:c2:4c:47:64:5e:af:f1:17:c1:53:01:
         3c:05:65:ae:fc:d5:a3:d7:0c:80:16:73:3f:53:d5:b1:17:7c:
         5a:ec:b9:22:e2:69:90:d3:ec:28:e3:89:70:12:c8:9f:07:08:
         84:19:11:42:81:19:29:b6:d9:4b:4d:0d:3e:95:a0:29:37:ae:
         cf:c9:82:6b:ee:9c:fb:ce:25:1c:a8:f6:a8:2d:b8:ac:f3:47:
         0e:96:b0:f8:5a:f9:e5:95:57:ba:86:20:ed:00:09:fd:47:72:
         f5:ed:96:e1:e5:ed:b8:09:39:aa:f9:3c:b3:ea:98:24:ef:85:
         e6:59:34:58:7d:3a:a7:a6:bb:48:70:ac:21:98:13:23:8c:d9:
         5a:c5:9c:71:23:b1:79:a5:e4:66:4a:0a:51:0d:3e:a2:32:77:
         4d:d4:c2:f2:7b:b5:b5:2e:f8:ea:ff:43:f1:ca:4f:09:28:6c:
         59:be:ef:87:56:04:e4:77:ad:56:ae:a2:61:84:1e:5b:b0:58:
         cd:9c:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:27:06 2025 by rpki-client