Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa
File:                     34352e3233352e34342e302f32322d3234203d3e20323638323030.roa (raw, json)
Hash identifier:          OtBzpw9Y90LO5iloKMCfTNqE1BFhP2lUoUcEumub2q4=
Subject key identifier:   7D:85:E6:B2:CB:1C:92:0D:25:BC:3E:A7:0D:4A:D7:4F:38:59:A5:5B
Certificate issuer:       /CN=83C1DD6482FD32CE6CB494B03457BD659437962E
Certificate serial:       42294A1DFFF5DD6CF97FC63B9CA434DE16756D30
Authority key identifier: 83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa
Signing time:             Wed 05 Mar 2025 19:05:57 +0000
ROA not before:           Wed 05 Mar 2025 19:00:57 +0000
ROA not after:            Wed 04 Mar 2026 19:05:57 +0000
asID:                     268200
IP address blocks:        45.235.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl
                          rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 18:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:29:4a:1d:ff:f5:dd:6c:f9:7f:c6:3b:9c:a4:34:de:16:75:6d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1DD6482FD32CE6CB494B03457BD659437962E
        Validity
            Not Before: Mar  5 19:00:57 2025 GMT
            Not After : Mar  4 19:05:57 2026 GMT
        Subject: CN=7D85E6B2CB1C920D25BC3EA70D4AD74F3859A55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:8b:19:57:52:d1:04:0d:44:f3:4c:2b:78:
                    9d:47:d4:63:0f:e9:ca:b3:96:a1:0e:06:cb:70:0a:
                    fa:cd:dd:8b:84:7e:0b:65:be:ed:c2:fe:1d:fb:c4:
                    6c:ef:21:05:2f:19:b5:3f:90:d3:86:c9:38:35:88:
                    b2:38:bc:50:93:3a:85:29:b0:a5:ef:78:09:21:0a:
                    fd:d9:49:45:60:9b:98:b5:b4:a3:95:8b:f4:48:36:
                    8d:32:aa:53:4f:f3:52:a9:98:53:5f:b9:f2:fc:4c:
                    95:ed:d5:80:6a:43:28:32:52:1a:76:33:5f:8c:f5:
                    c5:6a:b6:0e:13:18:0a:e1:a1:47:1e:d9:a2:2c:6b:
                    c7:0f:c4:7c:f3:fc:5f:a8:fd:fa:40:cf:92:45:cc:
                    1a:6a:a3:92:d0:00:a6:08:42:3f:cc:df:45:1c:4d:
                    ba:ff:8a:8d:22:ea:f3:9b:5e:c1:0f:03:6b:fc:b5:
                    78:7a:ee:71:74:e9:01:5f:9d:24:ce:0a:49:b8:a3:
                    de:81:88:21:67:45:1f:6e:6b:6b:96:48:4d:0b:cc:
                    ed:45:88:36:9f:ec:99:1b:e1:fd:34:65:a6:e4:a0:
                    16:49:27:ba:00:4c:0a:94:aa:56:0c:3d:6e:47:8b:
                    af:a6:19:0c:b2:8a:51:8f:c8:04:45:d4:57:a8:b6:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:85:E6:B2:CB:1C:92:0D:25:BC:3E:A7:0D:4A:D7:4F:38:59:A5:5B
            X509v3 Authority Key Identifier:
                keyid:83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:ce:19:21:ec:fb:45:50:b5:b0:5c:2f:ef:6d:6d:db:0e:16:
         50:9b:79:65:34:fb:2f:f2:64:a0:48:e2:4b:7c:63:c9:01:d3:
         9d:d6:92:4f:47:38:47:f5:bf:67:6a:96:12:08:f7:b9:4d:b0:
         a5:b5:ce:a2:df:30:d8:32:98:c4:c6:2b:bd:fc:22:af:dc:e7:
         cc:ab:c2:cb:58:2d:50:15:6e:49:f6:90:4a:7f:a9:fb:7e:93:
         69:53:de:a6:62:be:9b:7e:00:55:ab:53:0f:f6:5a:4f:ef:c9:
         73:af:f0:da:fb:de:38:c5:c6:06:0b:71:33:d1:82:22:52:84:
         39:9c:e2:46:f5:02:11:01:b4:2a:9e:00:f0:b9:bd:17:b2:9b:
         0d:35:44:ea:45:ed:9f:7d:8a:e0:d1:0e:8b:91:42:ee:41:d0:
         e5:a7:2b:7e:41:65:a1:d5:3a:f5:6a:20:a8:a9:57:2b:eb:92:
         cc:c7:2b:e0:1d:8b:8f:f7:22:1e:10:11:ac:b8:63:74:43:44:
         72:c5:c8:ed:d3:62:e5:eb:5d:9a:b7:d4:57:a8:18:04:a5:a0:
         cf:b8:b4:c5:17:57:b2:23:17:45:e3:db:6f:f0:f7:00:f0:41:
         57:31:df:d7:e8:c6:9b:c5:fd:e4:82:2f:2f:54:5f:49:07:61:
         fe:d0:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:39:14 2025 by rpki-client