Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa
File:                     34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa (raw, json)
Hash identifier:          4SkEQPLugsH1bVSR84nxAa/PHcGLvrj9H7apOHEe46M=
Subject key identifier:   A7:E2:79:B4:33:BC:D8:0B:62:42:05:23:D8:A5:8E:E8:E0:F8:BF:E3
Certificate issuer:       /CN=82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663
Certificate serial:       77A53CA96AC324D5A8033B911F0FFB25995FC139
Authority key identifier: 82:EF:EB:D2:E8:C6:B5:C9:2B:4F:79:89:8B:EF:A6:DA:7D:D5:16:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa
Signing time:             Thu 06 Mar 2025 20:11:16 +0000
ROA not before:           Thu 06 Mar 2025 20:06:16 +0000
ROA not after:            Thu 05 Mar 2026 20:11:16 +0000
asID:                     269238
IP address blocks:        45.182.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.crl
                          rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a5:3c:a9:6a:c3:24:d5:a8:03:3b:91:1f:0f:fb:25:99:5f:c1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663
        Validity
            Not Before: Mar  6 20:06:16 2025 GMT
            Not After : Mar  5 20:11:16 2026 GMT
        Subject: CN=A7E279B433BCD80B62420523D8A58EE8E0F8BFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:dc:82:2c:40:75:46:54:d9:a4:1c:91:10:
                    91:b4:bd:27:fa:56:80:1e:f2:d9:c8:21:2f:81:4b:
                    1d:62:aa:d2:74:31:64:e6:c3:77:c1:f6:e1:22:23:
                    e3:a2:e8:19:99:a7:f0:aa:17:61:01:f8:15:fc:c1:
                    e8:09:e3:3e:d3:39:17:17:52:eb:f7:95:1b:08:84:
                    8b:93:5e:86:0a:b2:43:b5:c9:9e:66:0c:e4:52:a5:
                    39:73:f4:9a:09:2d:86:37:0c:38:e8:e6:a1:bc:b3:
                    77:ea:7b:b4:ba:95:1f:c3:8c:26:2d:63:e9:8b:01:
                    68:7f:0c:fe:f2:df:e6:96:f3:d6:39:0e:5a:4d:c5:
                    db:a3:1b:ec:ad:89:e9:28:b9:f5:02:8a:04:0b:07:
                    21:e3:14:80:77:28:85:84:70:ac:4b:82:81:a5:9b:
                    48:fd:4c:71:e8:35:e8:d5:90:06:c6:53:48:38:ed:
                    6c:64:1c:20:15:8f:ab:14:a6:d2:48:0b:60:0f:32:
                    58:1d:d1:b7:07:c3:b5:6b:02:0b:f5:60:29:db:bb:
                    88:96:0e:bc:32:d1:b7:39:54:0c:b8:34:b1:d3:2f:
                    d1:c8:62:3c:4a:cc:7d:1c:6a:6f:e7:bf:4f:1c:e1:
                    57:ab:f3:bc:c7:4c:fb:53:8b:63:4a:ae:6d:05:4c:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:79:B4:33:BC:D8:0B:62:42:05:23:D8:A5:8E:E8:E0:F8:BF:E3
            X509v3 Authority Key Identifier:
                keyid:82:EF:EB:D2:E8:C6:B5:C9:2B:4F:79:89:8B:EF:A6:DA:7D:D5:16:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:cd:e4:23:61:e1:2b:4d:8a:72:5b:28:7e:00:ad:80:87:75:
         4f:e5:7a:72:7a:4e:e0:aa:d9:ce:3b:e5:64:d9:fa:a9:cb:f3:
         61:49:c7:72:b6:ca:cb:75:67:fd:34:d0:14:59:15:73:69:a3:
         95:bc:8c:7b:43:94:a5:7c:b4:41:8f:e8:e2:e4:fc:a3:04:b6:
         44:3d:ef:56:1f:86:98:63:4a:9b:0e:fd:46:44:c3:58:e6:74:
         3b:19:42:fa:7a:b2:b3:b7:7b:58:81:0d:5a:59:a7:7b:d8:29:
         c6:f3:71:89:17:94:1a:19:f2:ac:46:72:5b:31:43:6c:12:fc:
         16:12:b3:93:b1:36:4e:7f:92:ab:01:7e:5a:9d:ad:3f:8e:0a:
         89:59:76:d7:8b:00:34:8c:f5:63:7d:c1:46:91:1a:61:99:29:
         01:43:96:ee:10:25:dd:e4:d3:08:a4:5f:bd:17:bb:2b:c0:6c:
         9a:27:d7:5a:f4:84:88:57:88:32:73:0d:2f:80:2d:e3:5d:61:
         fb:71:e2:fd:5d:fe:ad:d9:84:e5:f4:d4:2c:dd:9c:8d:68:da:
         f3:33:97:27:0f:77:11:3a:17:f4:16:53:7e:d9:28:37:b4:3b:
         d1:31:5b:05:27:fa:da:8c:ab:12:61:3d:b0:5f:9b:d4:9c:57:
         30:21:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:53:22 2025 by rpki-client