Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
File:                     34352e3136392e34342e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          RBTQon0lCSmEwMCxJl3mgyPHIy1kTVBB1IG3AjhF/E0=
Subject key identifier:   79:C5:C0:B1:44:35:92:18:3E:2B:F4:93:2B:35:A2:E8:36:BA:99:ED
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       38B317DD13303A09608074AACA589A550749A9FE
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
Signing time:             Thu 06 Mar 2025 10:33:14 +0000
ROA not before:           Thu 06 Mar 2025 10:28:14 +0000
ROA not after:            Thu 05 Mar 2026 10:33:14 +0000
asID:                     268097
IP address blocks:        45.169.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b3:17:dd:13:30:3a:09:60:80:74:aa:ca:58:9a:55:07:49:a9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Mar  6 10:28:14 2025 GMT
            Not After : Mar  5 10:33:14 2026 GMT
        Subject: CN=79C5C0B1443592183E2BF4932B35A2E836BA99ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3a:af:1a:00:d8:7a:2b:fd:c7:19:ab:02:96:
                    05:86:a9:a5:48:e0:c5:53:7e:76:db:c4:76:8b:e7:
                    94:f7:ed:e2:16:8f:7a:e6:3f:81:29:f0:4a:e1:2f:
                    d2:07:f3:dd:6d:27:e7:bd:fc:40:2d:5e:1d:07:5b:
                    39:01:21:92:a7:73:56:24:fc:8a:ac:07:70:22:b0:
                    cf:ba:24:e8:8b:b5:43:d9:08:08:9f:1b:38:a7:87:
                    1a:09:a9:b9:d3:e6:68:27:d7:ec:d7:4e:5c:f1:12:
                    75:41:21:7b:75:ce:8e:2a:9c:6b:44:d7:fe:d3:7e:
                    a0:5b:f6:e4:61:bb:55:7f:f2:44:ae:1f:5f:53:0b:
                    e2:9c:71:f9:68:72:f6:a9:11:a1:af:35:6c:83:54:
                    ac:ae:e5:e7:f0:25:35:ac:ab:d8:56:f4:b1:ef:87:
                    9d:d8:47:2d:67:dc:f9:24:1e:7b:d1:69:51:7b:8e:
                    62:9c:80:a9:14:a5:17:55:b4:b0:40:e0:04:42:2f:
                    6f:40:b4:15:6b:42:c9:40:b3:31:0c:90:37:72:f6:
                    15:95:58:c9:47:f3:f4:95:23:d1:34:f4:a6:82:01:
                    cb:ae:e5:28:8c:9d:f7:87:ee:7a:82:e6:4d:c5:5e:
                    75:e2:e4:1a:a0:10:c8:80:f8:fd:18:f7:8f:72:39:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C5:C0:B1:44:35:92:18:3E:2B:F4:93:2B:35:A2:E8:36:BA:99:ED
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:a3:c4:53:0a:1b:ce:a0:94:e2:f8:f1:cf:ac:8c:7e:9b:50:
         6a:a7:46:d5:ec:db:fd:17:68:2f:b3:ad:f6:2e:9c:7a:85:10:
         49:2d:2e:9d:6f:dd:7e:77:00:ad:f1:96:b9:8d:97:e0:3b:e9:
         7c:6a:b3:bf:c8:66:27:73:30:68:ef:83:e4:03:b5:7b:bb:76:
         03:00:8f:55:9a:16:73:6c:7b:a0:f5:32:45:ab:a3:c3:ea:df:
         06:a3:cd:32:fd:16:1e:62:89:3c:5a:e4:74:0a:df:4f:87:c2:
         41:71:74:c2:7e:bc:0f:c9:31:64:85:3f:ee:f6:7c:03:2f:df:
         97:46:09:92:94:f2:8f:a5:9f:5e:37:5f:f5:0e:4d:dc:92:08:
         e5:c8:d2:c4:ca:0d:14:e3:aa:0c:4d:52:eb:15:6f:04:aa:c4:
         70:3c:11:1c:ba:22:1d:87:06:13:21:a0:ab:fb:4f:5d:4c:09:
         ba:8f:3e:c3:ee:38:10:b5:47:f5:82:a0:8e:83:3b:24:95:a2:
         2e:c9:96:b9:39:4f:d6:b4:c0:56:f2:cf:6e:32:52:e1:52:5c:
         14:71:a1:ce:f2:28:17:e7:36:88:34:a5:4f:4a:ac:f3:3e:7c:
         46:fe:b8:b9:79:25:1c:ed:b4:aa:86:65:86:f9:0b:45:c1:24:
         1e:0f:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:15 2025 by rpki-client