Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa
File:                     34352e3232362e35322e302f32322d3234203d3e20323636393835.roa (raw, json)
Hash identifier:          gFKNGQWnxf/lO0ukJjdU4O1Hi8MvZwPF3BEGK/CEjdo=
Subject key identifier:   45:A0:8B:52:E1:13:1D:45:C9:4A:0E:55:EF:47:FE:AA:AC:F0:17:BB
Certificate issuer:       /CN=704F7944732F98AD0D651DC0C5B89C092F753A92
Certificate serial:       661C6D4047AC74739E21857AFF7E5DBE44172058
Authority key identifier: 70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     266985
IP address blocks:        45.226.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.crl
                          rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 11:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1c:6d:40:47:ac:74:73:9e:21:85:7a:ff:7e:5d:be:44:17:20:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704F7944732F98AD0D651DC0C5B89C092F753A92
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:6b:2a:f1:ac:77:78:a2:28:be:c2:d7:d3:
                    79:c9:00:35:6a:a2:1a:fa:e6:61:54:c5:31:f4:f1:
                    be:e4:83:bf:d2:ff:8a:07:f9:30:11:25:bd:03:5a:
                    ae:48:62:b7:14:86:25:e6:59:b5:4d:d5:28:60:2c:
                    a4:a9:69:89:30:20:5b:81:bf:b2:f1:b3:d0:7b:0a:
                    2b:2e:0c:a8:bc:27:7b:45:b5:d7:6a:d6:b2:07:17:
                    3d:09:44:41:89:ab:33:db:65:7d:54:cb:b6:a4:80:
                    0d:71:ee:27:5f:53:ed:79:5d:f8:e0:80:0d:4a:e7:
                    db:ce:7f:00:eb:9e:09:c3:d4:28:39:23:b3:2d:fb:
                    60:89:9d:a0:a3:08:e8:ad:e5:8f:14:2a:13:df:0e:
                    36:81:8e:83:61:ea:e3:ec:2a:5d:0d:92:de:d0:47:
                    0d:e1:c5:93:7a:94:66:0a:0b:12:7c:c2:d6:c6:f7:
                    55:57:87:a5:7f:48:0c:fb:b5:88:e6:f2:37:e9:cf:
                    ee:d3:60:d2:08:be:33:86:bd:7f:c2:9f:21:83:94:
                    10:60:7c:96:ac:2b:c6:96:9c:10:02:54:83:2e:6e:
                    fd:07:2d:1e:96:2f:ba:7f:97:57:f1:14:86:ef:6d:
                    af:29:66:ff:4e:2a:e4:a7:83:5d:00:93:d2:26:c3:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A0:8B:52:E1:13:1D:45:C9:4A:0E:55:EF:47:FE:AA:AC:F0:17:BB
            X509v3 Authority Key Identifier:
                keyid:70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:58:d0:b1:38:44:5b:cc:fa:a1:c3:c2:93:1b:94:af:5d:9b:
         c2:69:19:b4:ac:4e:c2:98:09:56:58:5c:0c:7d:dc:64:0d:a4:
         e7:89:49:47:78:a3:a7:da:ea:20:4f:e9:0a:a7:45:2e:e1:fb:
         30:2b:e9:c8:55:65:0b:ab:b1:73:8f:6e:93:b4:ef:d4:1e:a9:
         49:cb:6c:63:1b:e3:49:1f:dd:65:c6:8d:8b:c6:f6:9b:14:db:
         61:ba:e1:36:98:8b:e9:1c:0d:c9:bb:a9:71:a5:02:23:d9:d5:
         80:b6:67:d7:53:5b:da:e5:11:0a:54:17:7f:20:61:58:14:ce:
         8d:0d:da:ba:f3:a9:67:76:3b:e1:0b:81:90:d7:13:71:62:b6:
         61:35:dc:eb:39:87:5f:31:d9:ae:6b:86:3d:a6:b5:d9:09:76:
         69:e0:59:b7:0d:8e:25:e5:5a:00:7b:9a:13:1a:97:c8:24:34:
         15:bf:4e:01:21:83:4c:69:29:6d:57:8b:db:2b:d9:45:87:c4:
         34:26:5b:0d:fc:0d:0e:71:74:95:92:9e:95:d6:43:33:98:8d:
         0d:69:4e:5c:d7:20:1d:2c:80:05:64:7f:17:a0:a3:52:42:f5:
         c9:f5:ce:7a:55:a2:7c:07:e7:fc:fb:79:12:db:df:50:fa:04:
         86:d4:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:43:52 2025 by rpki-client