Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa
File:                     34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa (raw, json)
Hash identifier:          Z87KNIocbcq0Nw0tN4Cjq6OiEMQnkv+HEXbZ2kWTt4c=
Subject key identifier:   23:5A:18:4D:4E:0F:BD:87:1D:DC:93:E9:80:41:CF:85:43:4C:4C:B8
Certificate issuer:       /CN=E2518D35F2E906725804C9906EB7F7CA9E723225
Certificate serial:       66AB72B876825C6E884B74DB8C2E3712FC52CBD3
Authority key identifier: E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa
Signing time:             Wed 22 Jan 2025 20:39:12 +0000
ROA not before:           Wed 22 Jan 2025 20:34:12 +0000
ROA not after:            Wed 21 Jan 2026 20:39:12 +0000
asID:                     268684
IP address blocks:        45.165.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 15:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ab:72:b8:76:82:5c:6e:88:4b:74:db:8c:2e:37:12:fc:52:cb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2518D35F2E906725804C9906EB7F7CA9E723225
        Validity
            Not Before: Jan 22 20:34:12 2025 GMT
            Not After : Jan 21 20:39:12 2026 GMT
        Subject: CN=235A184D4E0FBD871DDC93E98041CF85434C4CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:a1:c7:b2:48:9a:6b:25:e6:ea:97:d8:7c:
                    2a:78:51:b7:6e:b3:4f:1f:d4:1d:9a:24:d2:a4:70:
                    74:74:1a:24:fb:db:d4:ac:38:91:02:c4:72:31:3b:
                    18:f1:0e:b5:22:2b:7a:35:7d:91:b0:4c:72:66:f2:
                    4f:bc:2e:be:2c:e6:f8:ac:de:40:cd:7b:e3:5e:6c:
                    1b:3d:d2:c6:09:7f:a7:f6:85:cc:26:2e:5b:6b:88:
                    60:cc:bb:3e:e1:c0:f4:b8:1d:c2:8d:19:2a:2a:61:
                    a4:6b:91:56:1b:59:1c:00:85:a1:88:61:3b:46:31:
                    bd:a0:e2:49:47:4c:70:5a:73:9f:7e:b1:a9:2b:72:
                    60:a3:ba:4b:70:2e:0c:05:e1:cf:6e:36:86:8c:0f:
                    02:2e:19:23:3a:19:4e:31:de:79:2b:de:5f:fa:e2:
                    3b:22:20:33:7c:66:c6:46:54:a3:44:cc:e4:70:fb:
                    be:37:c8:12:5f:fa:ab:96:32:24:4d:ac:49:1c:be:
                    59:bf:e7:a5:46:97:b0:a8:76:0b:78:c4:ac:9c:cb:
                    1e:a5:01:8b:eb:34:97:3b:fa:44:82:d0:0d:ca:3d:
                    80:8f:07:df:48:2b:5a:9c:a5:87:27:0e:69:89:8f:
                    b1:bd:bf:ef:11:3d:0b:10:57:3e:a5:f7:da:93:be:
                    2b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5A:18:4D:4E:0F:BD:87:1D:DC:93:E9:80:41:CF:85:43:4C:4C:B8
            X509v3 Authority Key Identifier:
                keyid:E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b1:23:3b:fe:e6:50:69:99:19:58:76:2e:09:82:53:ca:17:
         55:4c:2f:b1:cd:f2:f0:3a:a7:91:a1:ed:ce:40:66:03:b0:72:
         2b:eb:e3:d2:e6:6c:75:74:d9:18:e9:b6:94:69:c0:0c:67:be:
         60:1e:0f:e8:10:d2:83:a5:62:8a:1e:d2:85:fe:fb:82:56:bb:
         1c:b8:d9:b4:52:3e:a1:cc:a8:4a:2f:8c:07:22:78:12:3a:6d:
         6e:ac:7c:79:e3:8b:80:c4:43:c0:ba:68:21:da:1b:06:1d:d8:
         38:7f:33:4d:a2:f7:8c:8d:a2:75:7d:33:7b:25:b6:90:ed:b8:
         5a:77:a9:ce:14:b6:7e:7f:a1:f0:bd:7f:96:73:da:90:b7:c7:
         5a:8f:31:03:a2:ad:0d:e2:84:94:ce:c5:a5:fc:97:04:bf:a4:
         d6:11:e0:e1:a0:06:7a:e0:ce:d1:5d:eb:16:7b:53:51:49:a8:
         43:db:7d:4d:ff:bd:69:9d:44:1e:e1:af:d1:fc:cb:79:1b:ef:
         5c:2a:a2:9c:9b:d4:31:b7:da:7c:76:5d:6a:30:dc:5e:e3:8b:
         9a:49:8a:36:f2:fc:eb:be:c2:a2:49:fa:bd:84:4a:b9:ac:ef:
         45:2e:10:31:5f:38:76:70:41:ce:16:3c:6e:f4:ba:28:96:df:
         78:4a:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:36 2025 by rpki-client