Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32322d3232203d3e20323638363834.roa
File:                     34352e3136352e3137322e302f32322d3232203d3e20323638363834.roa (raw, json)
Hash identifier:          rn2Xd1t0IGltQ1kYFip45vyhCMT+THaK3yD3u/Z5Gj4=
Subject key identifier:   CF:88:14:7A:D2:B9:E4:89:07:FE:0C:BA:E0:33:67:97:1A:98:AA:F8
Certificate issuer:       /CN=E2518D35F2E906725804C9906EB7F7CA9E723225
Certificate serial:       1093DE5B6974FEEF6AC6E8A78301627F0F73DD95
Authority key identifier: E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32322d3232203d3e20323638363834.roa
Signing time:             Wed 22 Jan 2025 20:39:12 +0000
ROA not before:           Wed 22 Jan 2025 20:34:12 +0000
ROA not after:            Wed 21 Jan 2026 20:39:12 +0000
asID:                     268684
IP address blocks:        45.165.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:93:de:5b:69:74:fe:ef:6a:c6:e8:a7:83:01:62:7f:0f:73:dd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2518D35F2E906725804C9906EB7F7CA9E723225
        Validity
            Not Before: Jan 22 20:34:12 2025 GMT
            Not After : Jan 21 20:39:12 2026 GMT
        Subject: CN=CF88147AD2B9E48907FE0CBAE03367971A98AAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:ad:ad:52:f6:f4:23:c5:dd:3e:53:b8:68:
                    83:99:08:5a:e1:d1:df:1c:d4:33:9a:62:5f:98:d7:
                    91:9f:84:ac:f8:8a:75:fc:f4:ef:27:dc:4e:f8:05:
                    50:01:cd:2a:e2:e5:5e:b7:e8:ca:2e:a8:a2:8a:c1:
                    4e:82:31:66:43:84:c0:11:a0:f8:20:40:a4:4e:78:
                    39:96:2a:e2:23:8a:62:bc:f0:5a:f8:71:c3:91:67:
                    82:da:36:d2:f3:ea:5d:d1:53:b6:87:d8:1a:ad:a5:
                    b7:bb:fa:38:47:95:66:ff:98:36:dd:00:55:bb:07:
                    08:ce:35:77:4b:43:15:49:fa:69:04:fa:ad:b8:97:
                    29:2a:99:33:8b:d6:2e:d1:9f:a9:3c:96:57:36:bf:
                    fc:b7:2f:4d:fc:45:21:02:03:77:b3:ff:23:86:98:
                    f4:b3:05:f9:bf:10:97:06:50:eb:3f:01:ba:08:53:
                    28:85:81:a1:99:80:32:31:c0:dc:7f:2f:0e:ff:33:
                    4c:45:19:af:a7:57:4c:10:d4:5e:30:72:85:62:5e:
                    00:d5:14:4e:ad:08:08:fe:08:df:c8:c1:c9:64:9a:
                    c5:2a:fd:68:58:92:fb:39:25:5e:bb:19:21:20:30:
                    c6:29:72:c8:20:d0:20:d5:ad:8f:d5:22:8c:73:50:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:88:14:7A:D2:B9:E4:89:07:FE:0C:BA:E0:33:67:97:1A:98:AA:F8
            X509v3 Authority Key Identifier:
                keyid:E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32322d3232203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:58:27:a0:e6:dd:21:f1:26:b2:54:2f:b1:da:80:ea:c6:
         42:51:68:c0:3b:98:fa:78:36:f7:81:85:15:2e:6f:3b:31:cb:
         2f:94:fc:d3:8c:1d:d9:08:15:e6:58:13:6e:db:5f:68:18:bc:
         fd:47:31:c1:8b:21:85:fe:24:d6:ae:90:f1:68:4b:57:27:29:
         f8:5e:28:2a:64:a8:f2:9c:5a:ff:21:ed:54:cc:07:90:19:6b:
         60:3e:28:c8:88:30:68:a8:06:d0:e6:31:42:01:37:81:12:18:
         4e:c3:29:d5:42:d2:40:2b:f7:73:89:7a:bc:be:9e:fa:a7:8a:
         39:53:b5:30:bf:46:46:a1:d8:b7:b4:ed:9f:27:e5:f0:1f:27:
         4f:56:f9:ba:dc:8b:72:2f:ef:54:7f:f9:72:9e:ee:4f:34:d3:
         30:16:57:00:e8:96:e7:38:73:6b:ab:db:40:c8:b7:9f:da:d8:
         3f:c7:8d:c1:c6:3d:be:f2:df:d9:27:11:9d:79:f7:7b:b9:ee:
         37:74:dd:92:99:58:ce:50:8b:9a:c4:6e:4c:03:42:5c:e9:ba:
         d5:de:16:ac:20:3f:4f:97:54:80:eb:b1:79:c6:1f:8d:58:b6:
         6b:a8:e8:e8:6f:f4:e1:c5:f0:90:41:bb:7b:d8:70:ef:a1:4b:
         cd:05:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:26 2025 by rpki-client