Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3232203d3e20323637323134.roa
File:                     34352e3233302e3136302e302f32322d3232203d3e20323637323134.roa (raw, json)
Hash identifier:          eNZWuQWZ7CoXesDxjLik2Sa7rU4izZaHwD+Jdiz3eLw=
Subject key identifier:   C6:8E:1D:C9:28:19:3D:21:62:21:07:30:22:89:B0:C7:64:1F:58:2C
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       3ED4A613C5826E6AB3D2BB8432DEE19B42F2B4E7
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3232203d3e20323637323134.roa
Signing time:             Wed 30 Oct 2024 14:56:34 +0000
ROA not before:           Wed 30 Oct 2024 14:51:34 +0000
ROA not after:            Wed 29 Oct 2025 14:56:34 +0000
asID:                     267214
IP address blocks:        45.230.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d4:a6:13:c5:82:6e:6a:b3:d2:bb:84:32:de:e1:9b:42:f2:b4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct 30 14:51:34 2024 GMT
            Not After : Oct 29 14:56:34 2025 GMT
        Subject: CN=C68E1DC928193D21622107302289B0C7641F582C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:a5:b5:c3:25:23:c6:8f:2d:19:30:c4:27:
                    4a:c1:f1:ec:7d:ce:2f:ad:7e:58:90:1a:1f:65:d8:
                    67:aa:da:2f:47:a4:9b:a1:1a:92:81:7f:68:68:f7:
                    52:d1:49:37:4a:37:4f:a0:66:40:6b:e8:34:64:ca:
                    d6:a0:a8:ad:e2:0e:32:12:3c:31:72:42:08:0e:aa:
                    c0:e3:11:ce:15:00:74:d8:ae:f7:62:ce:b0:03:b4:
                    e1:77:ff:cb:d1:12:a7:0b:a7:ec:43:09:82:f6:9c:
                    eb:13:26:bc:7f:5f:f9:fa:59:79:c5:2b:8d:ca:22:
                    19:2c:91:1b:cb:0d:fb:7a:1a:59:cd:16:e5:25:cd:
                    87:78:f5:6e:8d:20:c9:6d:cb:31:e8:20:c3:96:a6:
                    43:1d:fa:e3:75:cc:0c:4b:c0:c3:60:8d:2b:36:c6:
                    7e:fd:80:4f:ce:8d:f2:69:86:c1:68:0c:f6:1b:49:
                    2e:ae:31:44:65:f9:a7:2c:af:f2:64:99:62:a2:11:
                    30:3f:ba:87:58:43:33:d1:14:e0:81:46:90:4d:d0:
                    c5:8b:cf:d8:59:5c:fb:a8:8a:b2:bd:d7:f2:b9:80:
                    69:eb:f1:72:60:b0:d5:40:5a:ca:7e:0d:66:c8:c3:
                    1f:77:41:23:e7:2a:21:70:60:a9:24:96:28:9a:c5:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:1D:C9:28:19:3D:21:62:21:07:30:22:89:B0:C7:64:1F:58:2C
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3232203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:77:80:c3:3d:94:28:97:60:16:8f:47:e3:b8:19:7e:ad:
         e1:46:b6:49:6c:8e:66:a4:11:d8:b8:99:e4:da:86:08:52:2a:
         53:a8:80:5b:ba:95:6c:04:57:c0:f8:11:15:3b:46:88:04:83:
         8e:6d:54:d7:5e:54:4a:2f:94:ad:19:13:01:c4:7d:ed:eb:c7:
         d1:ed:66:64:59:ff:1b:bf:62:3c:f5:d8:2b:18:c6:19:63:6f:
         19:ec:5a:67:9e:91:52:d8:6b:ca:86:de:d8:19:57:c5:09:61:
         90:e2:ed:87:5f:2d:ad:b0:b1:2d:41:72:3d:05:6e:7f:d3:f5:
         6f:ec:1a:95:bd:34:15:b4:85:bb:bd:4a:04:58:48:ff:e4:c4:
         78:11:a9:2d:18:7a:ec:22:7f:28:bf:3d:6f:5f:24:f5:fe:f1:
         d5:31:ee:bd:e9:3a:c9:65:34:93:19:e6:61:c8:57:0b:a3:86:
         56:50:bf:6d:4b:a2:77:ef:8f:08:fc:e6:94:e5:d1:15:23:d6:
         0f:3e:53:bf:7f:88:5b:ff:b0:be:8c:96:0e:fe:33:5d:06:c8:
         91:68:1a:76:79:20:d7:44:6f:98:74:09:31:07:4e:50:65:77:
         8b:04:fc:2a:ef:21:68:f5:db:2f:69:14:be:1f:e2:a1:32:b4:
         33:4f:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:43 2025 by rpki-client