Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34362e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34362e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          SErwqqgGaKkYiiTZSZGe1niblQP3x2+Q6HGo8mm/f7g=
Subject key identifier:   24:D0:2B:0B:3C:73:85:92:09:8A:8E:7E:04:CA:5F:6E:73:4C:08:3E
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       240D6E8FBE4B4AC39AF8279140B7E6A3D0BFD28F
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34362e302f32342d3234203d3e20323636393538.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266958
IP address blocks:        45.226.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0d:6e:8f:be:4b:4a:c3:9a:f8:27:91:40:b7:e6:a3:d0:bf:d2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:a4:a3:69:12:fa:95:30:36:f3:cf:0d:78:
                    a7:a8:37:2d:42:ba:d4:e4:36:2e:97:d3:6f:d1:5c:
                    a8:5d:45:fa:3a:31:59:40:3a:20:3e:66:56:6b:ab:
                    5d:ab:b5:e0:58:13:0a:ad:5c:0f:d6:22:ad:b2:98:
                    b7:82:61:8c:54:c3:c7:70:d7:d3:a1:d4:c3:74:30:
                    3b:a5:a5:a1:45:f9:66:9f:9c:1e:26:60:e5:6c:68:
                    50:39:12:c9:04:d3:c1:bd:ed:da:93:78:31:f0:ee:
                    fb:ec:2b:98:c0:54:bf:35:66:27:05:24:dd:54:30:
                    39:03:7f:fb:a1:ca:8b:05:f3:36:44:fb:92:3d:15:
                    e4:f6:64:c6:28:31:55:aa:9c:28:11:20:52:e9:af:
                    61:12:96:29:50:80:c9:1a:14:29:b1:df:06:9d:09:
                    e6:63:42:c9:58:9f:5c:28:36:1c:18:93:24:1b:b3:
                    9f:02:94:cc:6a:a9:0d:21:57:ab:c5:e6:bd:e7:33:
                    3c:a9:ab:6f:04:d2:6a:4e:ad:43:31:3f:74:e0:a4:
                    d9:b5:9e:dc:3e:ca:13:de:35:2b:28:e9:50:5d:4d:
                    ef:5b:2e:59:86:04:d9:75:16:25:7c:97:a5:35:f9:
                    58:4e:70:c9:1c:fc:34:e8:d9:1f:60:23:28:da:fe:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D0:2B:0B:3C:73:85:92:09:8A:8E:7E:04:CA:5F:6E:73:4C:08:3E
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34362e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:76:61:6a:f3:34:5e:76:ee:fe:ca:c5:b0:e6:f7:c3:5d:
         51:f1:77:9a:22:ac:85:b0:65:53:1c:d0:42:f6:79:eb:e1:00:
         34:7f:87:2d:90:f6:5e:06:9a:a4:1c:4a:53:c5:78:84:94:2f:
         68:c2:5e:16:c7:1b:8d:7a:a5:1d:04:2b:cd:d5:aa:c6:b8:87:
         fb:49:7b:83:fa:79:7c:61:26:02:62:61:cc:7d:54:9b:aa:4c:
         d6:73:29:55:46:80:cb:45:4a:5f:00:0b:4c:81:3f:58:33:b3:
         bf:fb:c8:eb:23:e4:73:93:1a:cd:d5:45:0b:48:db:bb:f7:13:
         98:89:9e:29:2c:dd:2a:49:4e:f2:5a:06:7c:2a:67:0c:0c:f9:
         bc:d9:e1:a3:04:d9:a8:79:dd:30:a8:fe:4e:18:ed:60:22:ca:
         5b:e2:0f:7f:e5:d0:2a:70:7a:dc:d0:21:16:c3:e4:e8:a4:f8:
         a0:bf:18:12:4f:ab:62:a5:be:09:fa:cc:21:c9:f4:65:82:3d:
         1b:7c:0f:f2:24:c7:85:4a:26:9d:f6:db:3d:bd:36:3d:bd:e9:
         04:44:74:6b:89:16:9b:fc:a4:35:74:67:1c:15:a5:22:20:e8:
         e6:44:6a:39:80:2d:08:5b:3d:ba:d4:50:8a:e6:75:9b:10:44:
         ed:a3:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:54:41 2025 by rpki-client