Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          +K5pOFau4ZXe2MVLt8P7O8Yh0nJiT0WuYcjyq4lHU0U=
Subject key identifier:   03:08:A9:3A:F6:7C:0B:B0:AF:55:91:9A:60:F9:28:83:69:CB:97:4E
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       6D14B48FE4AFEED0B4C5D2B99801E9790E79261A
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     266958
IP address blocks:        45.226.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:14:b4:8f:e4:af:ee:d0:b4:c5:d2:b9:98:01:e9:79:0e:79:26:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100DA276F36444E8120286A8BBFDFEB59A2618339704EEE7883533A1C6F313FADDB99206F290A571BBB0F7000347B3CF63C6CDACD49F7D2F0FA41F80A15715DFA8C33FAFA1A5479991149952D2FC6D858F068D4C4FF43D7350498B83AD640F7C803278B8DC93D7F8D56FAA7E87F4319FA991EE895D330E5D405AEFE64ECA963E5C9581B36F5ED251EA4EB302E69989B762AC2A97C1B9AA4B9A25B955D3282D2BEFD8B7EADC5D1507B87F0166BC43475B8F961BCE0EFE352D06271A5451D63774FB3EDB431C14F83BFA8BE39433D731FF8F167A92545CC89C4E66B630B6AE138CB01FDD28B9FC12AF9BEF23FB6D415A72DA4DB2B1E368AB16750EF1D1F8CA362408D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:27:6f:36:44:4e:81:20:28:6a:8b:bf:df:eb:
                    59:a2:61:83:39:70:4e:ee:78:83:53:3a:1c:6f:31:
                    3f:ad:db:99:20:6f:29:0a:57:1b:bb:0f:70:00:34:
                    7b:3c:f6:3c:6c:da:cd:49:f7:d2:f0:fa:41:f8:0a:
                    15:71:5d:fa:8c:33:fa:fa:1a:54:79:99:11:49:95:
                    2d:2f:c6:d8:58:f0:68:d4:c4:ff:43:d7:35:04:98:
                    b8:3a:d6:40:f7:c8:03:27:8b:8d:c9:3d:7f:8d:56:
                    fa:a7:e8:7f:43:19:fa:99:1e:e8:95:d3:30:e5:d4:
                    05:ae:fe:64:ec:a9:63:e5:c9:58:1b:36:f5:ed:25:
                    1e:a4:eb:30:2e:69:98:9b:76:2a:c2:a9:7c:1b:9a:
                    a4:b9:a2:5b:95:5d:32:82:d2:be:fd:8b:7e:ad:c5:
                    d1:50:7b:87:f0:16:6b:c4:34:75:b8:f9:61:bc:e0:
                    ef:e3:52:d0:62:71:a5:45:1d:63:77:4f:b3:ed:b4:
                    31:c1:4f:83:bf:a8:be:39:43:3d:73:1f:f8:f1:67:
                    a9:25:45:cc:89:c4:e6:6b:63:0b:6a:e1:38:cb:01:
                    fd:d2:8b:9f:c1:2a:f9:be:f2:3f:b6:d4:15:a7:2d:
                    a4:db:2b:1e:36:8a:b1:67:50:ef:1d:1f:8c:a3:62:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:08:A9:3A:F6:7C:0B:B0:AF:55:91:9A:60:F9:28:83:69:CB:97:4E
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f7:84:05:d1:df:5a:43:36:4f:d4:a4:d4:e0:fe:42:51:fd:
         6a:05:0e:b0:84:84:53:a3:70:c5:22:0a:0b:23:dd:09:81:28:
         fa:97:74:53:3d:21:26:e7:f4:79:92:c1:05:e5:24:86:37:18:
         e9:3a:f3:8e:39:da:4b:8e:e7:f1:c6:4b:ab:34:8a:33:a3:e1:
         62:63:fb:c5:30:75:89:c2:10:77:e5:df:01:6a:41:e2:70:0c:
         95:0e:d5:83:b8:12:9d:f6:a3:29:a0:02:18:20:cb:66:ff:d8:
         70:4e:aa:45:61:78:99:eb:34:53:83:13:c9:31:6f:2f:20:4b:
         7e:b7:f3:a4:52:54:09:5b:05:95:9d:97:51:6f:55:21:32:c0:
         6a:0c:a4:4b:d3:75:b3:32:31:1b:85:f8:c0:7c:49:0e:db:50:
         dc:f3:da:8e:5e:eb:1c:b7:be:99:a7:9d:c0:e2:f0:d2:84:56:
         10:0f:0b:f7:30:87:47:c8:63:2b:d8:4c:ee:15:a1:5e:5c:57:
         80:61:1b:29:d7:a7:65:a5:73:55:76:6e:20:34:34:a8:81:61:
         8a:78:10:b6:f0:01:20:c6:66:85:64:4d:4a:a2:e1:1d:cc:e9:
         58:ae:3f:bb:bd:c4:81:41:49:50:b4:fa:a0:38:4f:ab:f0:d2:
         b0:7d:48:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:52:50 2025 by rpki-client