Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32342d3234203d3e20323636353434.roa
File:                     34352e36352e3230362e302f32342d3234203d3e20323636353434.roa (raw, json)
Hash identifier:          gmBfkFcP1FmjECVTK0E9EveVsOhM/UD0beivJWf5e30=
Subject key identifier:   94:D8:4D:E9:3B:26:79:C2:53:7E:00:F4:AF:CA:0B:CC:88:D3:90:EF
Certificate issuer:       /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial:       270E59316A2074B00969D53F55F44A3A4B50C0B7
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32342d3234203d3e20323636353434.roa
Signing time:             Fri 14 Feb 2025 17:48:34 +0000
ROA not before:           Fri 14 Feb 2025 17:43:34 +0000
ROA not after:            Fri 13 Feb 2026 17:48:34 +0000
asID:                     266544
IP address blocks:        45.65.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0e:59:31:6a:20:74:b0:09:69:d5:3f:55:f4:4a:3a:4b:50:c0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
        Validity
            Not Before: Feb 14 17:43:34 2025 GMT
            Not After : Feb 13 17:48:34 2026 GMT
        Subject: CN=94D84DE93B2679C2537E00F4AFCA0BCC88D390EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cd:11:b0:cc:f8:94:ef:86:66:93:7e:76:3c:
                    41:59:86:1c:59:a9:8b:c1:4e:ed:32:dc:a9:e5:93:
                    d7:01:cd:36:ef:88:8a:72:11:a7:43:eb:11:0f:cc:
                    68:95:10:31:29:46:7a:22:6a:f4:fa:31:d9:d1:10:
                    90:15:8e:d8:a7:26:32:33:92:2b:18:0e:99:f1:e0:
                    65:9c:bd:1e:43:8e:11:ff:8c:f7:cd:5a:c7:b6:4a:
                    fc:4d:e9:90:09:eb:c4:27:60:98:f2:b6:3a:b2:c9:
                    47:24:f0:8e:1e:db:87:45:fb:7e:dc:11:a0:19:aa:
                    ca:27:1b:11:2e:bc:06:c0:1a:2e:a8:d8:b8:75:6b:
                    76:89:ba:1f:26:34:ef:b1:a3:2d:e1:e2:b6:1b:df:
                    cd:34:fd:95:54:23:43:ae:0b:08:e6:02:2c:26:45:
                    93:57:7d:8b:44:7e:83:45:df:f5:e4:ae:a1:62:5c:
                    c8:c1:52:79:86:92:0d:2d:e7:4f:7f:b1:90:29:ae:
                    12:7a:28:e1:74:b5:d3:0e:ad:a1:ae:2a:b3:a8:21:
                    61:b7:a5:54:f5:06:83:bf:5d:34:89:93:44:9c:4b:
                    65:eb:30:ca:56:46:e7:93:3f:b5:93:a5:73:bd:31:
                    8c:be:51:5e:45:92:2a:bd:4b:8a:d3:8b:56:9d:20:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D8:4D:E9:3B:26:79:C2:53:7E:00:F4:AF:CA:0B:CC:88:D3:90:EF
            X509v3 Authority Key Identifier:
                keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32342d3234203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:b9:b1:85:75:72:0a:91:59:db:90:9d:d1:0a:9b:a9:9d:
         6b:5c:14:1a:20:8b:e6:2b:f0:07:c3:61:7e:48:fb:b2:b4:3f:
         39:ff:da:cc:0b:c6:e7:8b:27:b4:49:9d:4b:30:95:48:9a:86:
         65:6c:fa:05:64:00:89:f3:19:51:4e:5c:77:ce:47:b0:76:8e:
         08:11:a8:ae:79:01:cb:51:67:bc:96:ef:bd:1a:7c:f7:0a:8f:
         28:f0:a8:b8:7a:5f:a4:74:a1:79:88:bd:18:72:e2:6c:a7:2c:
         27:b5:84:e4:4a:ee:9b:51:28:c0:a8:95:df:59:54:9b:84:8f:
         62:c6:c9:f8:eb:fa:bc:7a:3f:96:f4:d5:a1:09:be:5a:4d:c6:
         8c:ff:47:7f:d1:6d:ce:97:49:00:ce:4f:d5:f5:ad:01:68:bf:
         74:d8:7d:c6:58:be:fa:2a:d3:95:1b:ec:aa:c6:50:0a:5d:44:
         c2:5e:41:98:62:77:ab:be:c1:43:6b:78:56:67:95:94:08:3e:
         4e:d9:28:c0:0a:59:04:64:7d:77:10:6b:23:56:cc:a1:f3:71:
         dd:eb:a1:be:56:9d:1d:bc:62:54:69:d2:50:98:a6:1e:bf:64:
         1b:c0:19:ca:33:75:52:93:72:21:5d:70:8e:1e:34:44:71:3e:
         b5:d0:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:45 2025 by rpki-client