Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
File:                     34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa (raw, json)
Hash identifier:          MfRULjlvFU3DzlOHgMncw3KgiP17YDG+EL2L8qix+M8=
Subject key identifier:   18:D0:C1:8A:EE:F7:9B:92:20:96:1F:86:6D:8F:4A:78:50:46:F2:E2
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       38E0530A84E6B2AD4A91450A3EE35D952D5A53B5
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     268101
IP address blocks:        45.168.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e0:53:0a:84:e6:b2:ad:4a:91:45:0a:3e:e3:5d:95:2d:5a:53:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject: CN=18D0C18AEEF79B9220961F866D8F4A785046F2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:6c:9b:4c:7c:3d:4f:95:aa:84:a5:8d:e7:
                    6d:83:81:6f:82:6a:13:b3:14:85:a3:fb:a8:34:06:
                    86:71:77:f4:96:e2:55:dd:06:58:51:de:d1:01:63:
                    da:66:91:53:07:68:46:7e:04:2f:1d:4f:01:11:d6:
                    07:78:a2:5e:6f:8e:bd:b9:b9:eb:90:ab:72:b3:61:
                    7f:38:4f:a2:22:c3:1a:a9:6c:7a:c5:cc:0c:d4:d3:
                    3c:db:1d:e0:a5:f2:e5:7e:93:28:6c:6b:fb:c7:aa:
                    66:83:5b:c1:59:fc:b9:32:05:0e:c4:85:5c:7b:d1:
                    a1:a3:1b:fa:6a:0f:9d:0a:98:c3:01:de:35:cc:ab:
                    7b:54:dd:a6:0e:66:5e:2b:c9:e1:b1:9c:9f:21:b4:
                    db:68:03:ac:ba:04:7c:49:eb:2c:fc:22:7f:d1:6e:
                    8c:68:b6:be:22:10:f8:24:64:cd:3d:88:47:a5:a8:
                    4e:5c:c3:8a:f5:7a:d1:af:32:3f:78:31:10:a3:60:
                    45:b8:e0:b5:b4:03:db:13:07:75:45:2f:c2:c7:92:
                    81:7a:5a:9f:8e:24:95:ef:22:45:d0:71:00:94:6c:
                    19:0d:fe:eb:59:38:45:fd:5b:38:ea:ed:cc:94:58:
                    8e:50:0a:e2:c2:ce:19:92:9a:cd:39:31:71:6f:5a:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D0:C1:8A:EE:F7:9B:92:20:96:1F:86:6D:8F:4A:78:50:46:F2:E2
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:3c:40:dd:30:c5:4a:a1:a5:c0:d5:18:b0:3f:5a:d7:80:
         cd:9b:ba:53:99:23:c0:6e:ac:5f:5c:e5:0a:5a:e1:3e:01:c9:
         12:44:7f:68:af:33:68:ec:3a:de:ed:e1:24:f5:11:fc:7f:b9:
         47:50:d2:30:34:ce:e7:75:4b:c5:04:77:3a:e7:8c:05:79:b3:
         8e:49:66:0d:3e:e3:27:33:a6:f4:66:f4:dc:8e:92:c7:1b:15:
         17:48:79:b5:e0:4d:ec:7d:1a:b1:7f:3b:25:bf:c7:64:ba:f8:
         61:c8:be:00:fc:b4:0d:14:3e:da:c4:7d:94:e4:98:a8:bd:6a:
         3c:eb:e9:f0:62:b1:bc:2e:c8:cf:13:26:ab:6b:d7:1b:64:f8:
         60:93:6e:b2:4a:fc:3d:b0:73:d4:e3:7d:6a:da:83:b1:c6:50:
         f3:f2:6f:dd:e4:cb:3c:36:fb:be:b2:b2:69:cb:4e:11:82:2f:
         cb:76:b7:0e:9e:e6:45:ba:c7:0c:cf:b6:0b:71:3b:3b:50:f3:
         85:2d:78:79:12:02:29:a6:c6:0e:82:33:55:6b:c5:10:ee:61:
         33:e9:03:69:4a:db:f7:b4:0e:68:85:07:d6:94:4f:ae:c9:8f:
         b3:af:4a:6c:04:e2:52:51:b0:31:27:a8:62:fe:2c:72:52:fc:
         2b:03:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:05:10 2025 by rpki-client