Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa
File:                     34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa (raw, json)
Hash identifier:          kr0gntCEwDSaWo6urO8Yhu5P3ZLTqXRitPa0At9JLuc=
Subject key identifier:   C9:6E:6A:6B:BB:93:7A:72:DA:C0:1A:FD:AF:99:E3:67:82:3A:5B:AD
Certificate issuer:       /CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
Certificate serial:       586E2325656FB8C5CD7D9BFA43C11D63AC0EB03A
Authority key identifier: BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa
Signing time:             Wed 05 Mar 2025 19:13:38 +0000
ROA not before:           Wed 05 Mar 2025 19:08:38 +0000
ROA not after:            Wed 04 Mar 2026 19:13:38 +0000
asID:                     266356
IP address blocks:        45.234.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl
                          rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6e:23:25:65:6f:b8:c5:cd:7d:9b:fa:43:c1:1d:63:ac:0e:b0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
        Validity
            Not Before: Mar  5 19:08:38 2025 GMT
            Not After : Mar  4 19:13:38 2026 GMT
        Subject: CN=C96E6A6BBB937A72DAC01AFDAF99E367823A5BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:2a:cf:1f:dd:9b:4b:31:44:92:d2:7b:76:
                    73:eb:7b:42:63:7e:a8:57:c2:12:fa:df:81:cf:71:
                    df:74:da:c4:c7:da:4e:28:a1:02:e0:41:bd:c2:30:
                    dc:b7:99:32:ad:cd:5d:b7:bc:f8:f2:90:df:7f:cc:
                    63:86:ce:fe:19:bd:58:4d:32:f5:f8:a8:30:49:d6:
                    6a:87:be:b8:69:33:79:09:39:c3:47:1b:8c:91:85:
                    f5:1f:1d:14:b7:4f:c5:eb:32:1e:af:64:a4:42:69:
                    35:57:e8:d3:27:7d:a5:68:07:7a:b5:5a:5c:fc:b2:
                    ba:5d:5e:95:2d:fe:ff:f3:84:f0:94:a7:1f:6e:9c:
                    6d:43:36:16:a8:bc:89:09:89:30:20:09:57:8b:83:
                    27:5d:c0:e4:37:a3:f3:99:1f:35:9e:14:84:61:36:
                    93:c3:ab:e9:85:e6:f1:b1:5f:e0:21:84:83:dc:cb:
                    a5:c1:e6:5c:0d:85:4e:bb:a8:83:07:b7:3d:d5:d5:
                    33:21:2a:06:2f:e6:5e:51:f3:6c:7c:13:0c:96:fc:
                    2e:bb:19:cb:d7:11:d0:67:25:e4:3a:b5:4e:b7:df:
                    56:a4:6d:66:ad:0d:08:84:55:25:b6:14:07:3e:87:
                    83:12:e2:e0:0b:51:14:4c:04:f7:09:7e:d1:69:48:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6E:6A:6B:BB:93:7A:72:DA:C0:1A:FD:AF:99:E3:67:82:3A:5B:AD
            X509v3 Authority Key Identifier:
                keyid:BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:71:a4:d0:ec:d8:2d:fe:69:63:12:a6:24:c7:a7:dc:43:
         5e:19:1d:fb:6f:c5:2f:12:e4:b4:a4:22:70:3a:68:2b:c3:b9:
         13:90:dc:e2:ce:6b:df:a1:28:e4:95:39:27:71:18:f7:09:22:
         78:0e:93:a7:7a:ef:80:2a:f0:c8:23:5f:e6:b5:6c:40:e3:60:
         b8:01:d3:88:2e:63:4c:23:23:47:ef:7e:61:60:ed:3f:cd:20:
         77:9b:99:a2:c6:23:a3:af:c9:70:b7:5e:8f:ba:fc:fa:10:50:
         1d:e9:78:67:af:f0:e7:f0:57:e7:8c:67:e6:c6:08:09:c4:d3:
         3a:a0:6f:5f:0c:62:33:ad:6b:6f:53:f0:1b:3d:3f:27:6d:6a:
         96:79:9f:45:0f:53:3c:ac:c9:3a:db:65:17:39:28:a9:da:e8:
         68:4e:6f:98:62:31:58:43:9e:83:88:23:6a:4d:98:a4:cb:a4:
         80:93:ca:a7:bf:7e:17:fd:ad:82:aa:72:ad:e6:af:63:e5:90:
         6f:dc:8a:3b:72:2c:c1:f8:dd:7b:c7:93:99:de:9f:86:4d:d9:
         df:87:b1:9b:f2:e0:34:e7:58:54:e9:8a:64:6b:c5:03:6e:47:
         f0:75:17:c5:15:48:7f:73:aa:0e:70:aa:23:73:54:03:5c:e0:
         e9:8f:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:27:42 2025 by rpki-client