Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3332203d3e20323731363536.roa
File:                     34352e3138362e3233322e302f32322d3332203d3e20323731363536.roa (raw, json)
Hash identifier:          AwKwCZdwbOUibuNR1i8XrT9Tfaror0z1Pm6/W6G5zwc=
Subject key identifier:   F8:65:98:4A:9D:13:A9:E8:20:BE:7F:69:7B:0D:5F:AD:0D:07:4A:2A
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       0970BBD7C38A721D94FFB5C9FD6BD7054DF9F015
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3332203d3e20323731363536.roa
Signing time:             Thu 06 Feb 2025 16:15:57 +0000
ROA not before:           Thu 06 Feb 2025 16:10:57 +0000
ROA not after:            Thu 05 Feb 2026 16:15:57 +0000
asID:                     271656
IP address blocks:        45.186.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:70:bb:d7:c3:8a:72:1d:94:ff:b5:c9:fd:6b:d7:05:4d:f9:f0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Feb  6 16:10:57 2025 GMT
            Not After : Feb  5 16:15:57 2026 GMT
        Subject: CN=F865984A9D13A9E820BE7F697B0D5FAD0D074A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:c5:9f:df:c4:86:1a:dc:2c:f2:97:41:88:
                    18:50:e8:b3:ab:65:2e:87:8b:1d:dc:8f:38:ae:b0:
                    a1:6d:5a:49:0d:88:97:ed:81:b8:8d:39:51:5a:d1:
                    29:a3:31:e9:e0:49:b8:0e:5a:2c:aa:9b:62:f2:e4:
                    30:2a:fd:e6:20:13:7c:c6:67:2a:d3:1b:22:62:bc:
                    d8:0b:d5:b5:28:1e:97:ff:05:b5:f0:c3:cc:a6:43:
                    21:8c:db:07:a6:95:33:08:f4:95:75:c6:e8:e6:4e:
                    eb:9c:5c:11:83:2c:ed:b1:f3:4c:d9:90:20:bb:8d:
                    db:84:a5:33:b2:8a:51:d6:60:f6:e6:99:22:8a:c5:
                    9c:fc:70:59:7b:8d:cf:60:48:11:25:6b:2a:6f:91:
                    37:df:67:6f:bb:b6:a6:47:d0:f1:f1:99:13:5f:91:
                    a0:95:df:a4:6b:c4:14:8e:1a:f8:cf:50:55:70:6a:
                    77:12:d4:95:42:a8:aa:68:80:e2:b8:ff:7a:8a:0a:
                    83:68:4a:9e:50:af:79:50:d4:6c:5e:c2:70:73:65:
                    74:c1:dd:26:ea:3b:e3:8d:1d:4e:06:29:11:02:bf:
                    fc:87:1e:52:bc:3b:47:08:65:e0:12:5e:74:33:79:
                    09:92:44:ef:96:5d:06:82:09:7b:f8:56:8a:76:be:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:65:98:4A:9D:13:A9:E8:20:BE:7F:69:7B:0D:5F:AD:0D:07:4A:2A
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3332203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:e7:cc:b5:fa:a2:4c:7e:b4:11:08:32:ad:35:e2:8f:ef:ea:
         a2:36:30:86:80:08:d7:dd:f9:3b:53:cb:dd:b3:9f:1f:7e:c2:
         99:e0:ee:2a:12:b2:25:14:23:c4:7a:aa:e9:7a:8b:3b:a3:33:
         c6:fd:80:7e:8d:21:c9:eb:db:ae:5c:27:da:92:0b:70:a2:3c:
         ce:b5:63:1c:23:68:ce:65:a1:ca:ee:f1:1a:df:0f:a5:bd:d3:
         48:64:18:1a:70:b9:03:77:f0:11:15:34:ba:15:ae:81:2e:e8:
         07:fd:1f:86:0f:ae:bb:0e:ba:52:f1:bb:2c:cc:10:aa:89:71:
         18:b4:46:0f:c6:a2:84:55:9a:c8:81:5e:3a:6c:42:61:f5:60:
         00:2c:92:93:f7:be:46:71:bf:cf:5b:0f:23:9e:d7:cf:32:14:
         93:4c:a5:f9:91:78:43:87:f2:05:19:b6:1d:d6:ef:9a:a8:7d:
         ed:ee:37:63:e1:b5:37:31:16:0a:41:65:b2:10:68:46:44:bf:
         af:a4:de:94:58:68:bc:10:f6:9d:08:c6:5f:fc:8a:3f:d3:c4:
         41:e0:32:c1:e8:33:5d:fd:31:66:7d:81:ba:92:cd:d7:e2:d0:
         07:62:6b:fb:12:45:13:47:5d:b9:82:dc:c2:33:b0:51:2a:9f:
         13:60:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:27:24 2025 by rpki-client