Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3232203d3e20323638323637.roa
File:                     34352e3233372e39322e302f32322d3232203d3e20323638323637.roa (raw, json)
Hash identifier:          Jwfb0GvVZiceQOiydgD4hTH4VcSNEbvDVv0rh0JG848=
Subject key identifier:   B3:E8:A3:A9:54:96:C5:67:9E:22:F1:A3:D3:C2:C8:36:0A:7E:74:D1
Certificate issuer:       /CN=E0E56E765738AF9709155514C8A4C6494D4155B3
Certificate serial:       6D95D99CC313A655CACB7DD8BAD5EDCD83D8B889
Authority key identifier: E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3232203d3e20323638323637.roa
Signing time:             Mon 23 Dec 2024 15:42:50 +0000
ROA not before:           Mon 23 Dec 2024 15:37:50 +0000
ROA not after:            Mon 22 Dec 2025 15:42:50 +0000
asID:                     268267
IP address blocks:        45.237.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl
                          rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:95:d9:9c:c3:13:a6:55:ca:cb:7d:d8:ba:d5:ed:cd:83:d8:b8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E56E765738AF9709155514C8A4C6494D4155B3
        Validity
            Not Before: Dec 23 15:37:50 2024 GMT
            Not After : Dec 22 15:42:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:f3:28:42:3a:c2:b6:38:ff:f7:27:10:5d:
                    1a:f4:96:13:78:dc:bb:ac:e5:56:cd:1d:05:15:f2:
                    ed:4c:15:46:65:12:b0:4f:56:45:9d:4d:aa:57:94:
                    79:85:11:78:b0:0f:b5:3b:ac:06:8c:9d:e7:79:f8:
                    b8:68:4c:67:38:cc:d0:26:b7:13:70:f2:47:cd:fd:
                    34:28:9e:4d:5e:cc:b8:07:89:da:9b:5e:88:32:01:
                    a1:3e:fc:c4:0b:91:19:af:12:b0:79:ff:8e:5b:0d:
                    f5:5f:36:8d:10:d2:d2:5c:ac:c2:57:65:71:1e:66:
                    03:01:5a:41:72:08:9b:70:85:37:f1:4a:e6:85:7c:
                    0e:27:2a:e0:66:85:11:4d:82:f6:c7:e8:e1:b0:69:
                    3b:90:18:a7:9e:b6:8c:a0:24:c3:01:47:f0:d5:03:
                    e2:85:02:88:f4:f3:bc:91:85:54:a2:54:de:75:9e:
                    53:35:ff:c3:cc:d9:e7:5c:2d:f2:c8:e8:87:dd:8b:
                    50:d4:ca:c6:88:40:ec:15:3a:40:f3:e9:b8:03:bf:
                    c9:ea:df:56:52:db:92:e9:e3:5a:1b:4f:9e:d5:99:
                    9a:46:51:1e:d2:e2:96:6a:80:4c:f3:dc:4e:da:8c:
                    d9:e9:6b:99:c6:13:1d:f2:2f:59:e5:1c:dd:1d:ed:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E8:A3:A9:54:96:C5:67:9E:22:F1:A3:D3:C2:C8:36:0A:7E:74:D1
            X509v3 Authority Key Identifier:
                keyid:E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3232203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:76:6e:db:5e:54:f7:0c:b8:35:96:b4:49:9b:c1:89:b7:84:
         bc:3a:48:80:6f:02:7e:b8:02:19:1a:74:79:2c:64:af:7e:a5:
         13:8c:b4:3a:96:53:ec:5e:90:0c:79:b4:2c:f3:37:8f:5d:85:
         e1:21:4d:82:e5:d3:90:4f:4d:50:2e:e9:cf:fc:02:25:63:9e:
         35:3b:1b:c9:3f:cc:7f:81:ce:d4:58:de:51:6a:23:f1:a0:75:
         4a:c8:d0:cd:21:ac:d0:bd:45:5d:9a:9a:f7:34:7c:29:d6:a6:
         fe:84:da:ff:17:52:c3:97:ea:62:34:3c:3d:b3:63:d9:e5:07:
         1c:a2:af:c0:9b:f9:3f:50:7f:0a:a9:7e:0b:b2:eb:f9:7c:20:
         ce:c2:27:12:19:94:ca:be:b6:f1:09:eb:b5:86:3d:77:da:e0:
         b7:f5:04:96:52:60:03:20:4a:2b:32:fb:79:98:1b:5a:5a:67:
         c5:32:b3:c6:3d:ae:6f:8b:72:77:10:d2:30:13:8c:bf:53:6f:
         35:89:78:ea:9b:44:33:a1:52:0c:0f:ba:80:a6:3c:73:2e:4f:
         22:67:eb:43:84:05:09:37:de:45:95:a0:f7:8d:5a:62:2b:6e:
         c2:cd:36:d5:8a:53:e8:24:f9:9f:2b:62:6b:2f:d6:f8:80:0c:
         19:d8:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:21 2025 by rpki-client