Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32322d3232203d3e20323639313832.roa
File:                     34352e3138312e3130302e302f32322d3232203d3e20323639313832.roa (raw, json)
Hash identifier:          uCqsNgb+BYOiHxim3L8HzYawJHRRfyr6OWM567FGKjU=
Subject key identifier:   C1:14:35:6C:51:A7:A5:C0:0E:7E:54:F3:74:D4:7F:3B:8A:DC:42:E2
Certificate issuer:       /CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
Certificate serial:       4591804635B94585DD078D1C43743E431E3E77F3
Authority key identifier: 88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32322d3232203d3e20323639313832.roa
Signing time:             Mon 17 Mar 2025 14:52:24 +0000
ROA not before:           Mon 17 Mar 2025 14:47:24 +0000
ROA not after:            Mon 16 Mar 2026 14:52:24 +0000
asID:                     269182
IP address blocks:        45.181.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:91:80:46:35:b9:45:85:dd:07:8d:1c:43:74:3e:43:1e:3e:77:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Validity
            Not Before: Mar 17 14:47:24 2025 GMT
            Not After : Mar 16 14:52:24 2026 GMT
        Subject: CN=C114356C51A7A5C00E7E54F374D47F3B8ADC42E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:ef:b3:5a:c9:af:9c:ce:b4:80:d2:87:cd:
                    9b:af:16:0a:b2:b5:e7:af:a8:c8:3b:c2:68:a0:a4:
                    2d:4c:11:c5:4e:ad:25:aa:04:6d:3b:39:16:83:73:
                    dc:4a:32:02:8f:49:9e:38:1b:f3:f0:9b:d9:6e:dd:
                    db:41:fd:1a:f5:ba:6b:4c:19:52:ed:40:15:32:04:
                    f6:4e:3a:be:85:38:69:ac:2c:e3:67:e4:30:c8:62:
                    5a:cf:75:ba:fd:4c:e7:09:f0:0b:c9:5d:14:22:6b:
                    b4:b4:5d:0b:d7:0a:24:0c:52:d2:7b:56:df:54:3c:
                    10:cc:db:aa:f6:1d:0e:47:b3:c0:10:5f:c8:0e:2d:
                    ae:d9:78:c4:2c:ca:76:f5:ea:61:8b:60:50:33:b9:
                    4a:ab:81:73:72:26:66:1a:69:42:0d:17:5b:78:eb:
                    01:dc:5f:81:e4:52:3e:86:8a:59:d2:4f:1a:0f:1c:
                    1f:54:52:b9:1c:d8:fe:00:68:93:18:f1:cf:60:03:
                    a8:f9:0d:94:b8:a5:03:3b:63:fa:03:d8:f5:eb:1a:
                    08:ed:a4:39:44:53:af:30:8e:2f:be:7b:4d:7c:8d:
                    4c:e4:4e:75:f9:d9:75:8a:ae:48:55:51:83:f3:40:
                    b3:fc:ac:63:b7:57:2b:08:14:43:88:c6:12:9b:6a:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:14:35:6C:51:A7:A5:C0:0E:7E:54:F3:74:D4:7F:3B:8A:DC:42:E2
            X509v3 Authority Key Identifier:
                keyid:88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32322d3232203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:0b:56:8a:5d:0e:94:d1:b5:33:69:d0:3e:3e:f4:45:7c:
         3d:73:74:62:57:16:9d:47:e3:53:23:5c:3f:3e:00:aa:51:2e:
         18:b3:94:ca:e9:7e:75:47:ae:35:76:ca:5a:e0:c7:69:d6:cb:
         1b:ec:56:51:5b:96:22:c2:fd:94:0b:fe:17:91:37:c3:d2:46:
         d9:a0:9e:7c:e4:8d:41:c6:e1:8f:0b:79:2f:ac:63:21:17:a0:
         52:0f:91:a3:9f:6e:40:12:2e:02:af:22:03:ad:0b:66:09:63:
         ca:9d:38:a1:9f:11:0b:ff:97:fa:31:e6:5b:e5:62:d6:8a:4c:
         80:8b:52:a3:8a:16:f4:5f:8a:8c:23:0b:7a:03:13:c0:00:40:
         0d:67:59:98:77:8e:24:f9:8e:a8:02:23:d0:49:c9:09:4a:c4:
         44:78:d8:56:5f:1c:c4:f9:7b:f5:8b:29:19:b8:55:cf:f9:5b:
         47:48:cf:45:a6:bc:be:3c:b0:e3:27:4f:d0:f8:ac:e8:12:cc:
         22:c3:5b:8f:67:0d:ec:2e:80:26:21:30:6f:c4:36:d8:65:7a:
         b7:87:be:13:5a:eb:d0:e5:4a:f3:6b:d3:61:4f:e4:ac:9d:7e:
         e0:6c:fd:87:77:51:29:4f:15:9e:7c:63:dd:80:99:1f:7a:c3:
         8c:88:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:08 2025 by rpki-client