Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137342e302f32342d3234203d3e20323638363834.roa
File:                     34352e3136352e3137342e302f32342d3234203d3e20323638363834.roa (raw, json)
Hash identifier:          T5a266M2qBl1WbINgcafBqT7MhqMMjZm2MLoNJzKwRo=
Subject key identifier:   55:67:8A:DA:8A:42:AE:DA:C0:88:06:9B:1A:3E:36:88:BC:56:BC:8F
Certificate issuer:       /CN=E2518D35F2E906725804C9906EB7F7CA9E723225
Certificate serial:       577D67264CA44A0E572E2EABB1064ED8FE4EB688
Authority key identifier: E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137342e302f32342d3234203d3e20323638363834.roa
Signing time:             Wed 22 Jan 2025 20:39:10 +0000
ROA not before:           Wed 22 Jan 2025 20:34:10 +0000
ROA not after:            Wed 21 Jan 2026 20:39:10 +0000
asID:                     268684
IP address blocks:        45.165.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 22:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7d:67:26:4c:a4:4a:0e:57:2e:2e:ab:b1:06:4e:d8:fe:4e:b6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2518D35F2E906725804C9906EB7F7CA9E723225
        Validity
            Not Before: Jan 22 20:34:10 2025 GMT
            Not After : Jan 21 20:39:10 2026 GMT
        Subject: CN=55678ADA8A42AEDAC088069B1A3E3688BC56BC8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:7b:10:fe:bd:72:12:af:5c:5f:b3:2d:1c:
                    cc:fd:0c:52:89:75:02:3c:5c:e4:8e:24:a2:9f:65:
                    ee:a3:00:32:e7:f6:0c:cb:55:e7:2a:07:ac:67:14:
                    fa:a1:bb:99:c8:aa:19:bc:c9:ba:61:e6:59:7a:20:
                    3f:47:35:e6:30:ee:0e:74:bf:23:63:3b:79:1c:f0:
                    ee:af:54:b8:d3:2d:9a:64:fb:1e:e2:3d:87:79:75:
                    5b:99:98:ef:9b:04:4c:5f:39:d1:f8:bb:f5:d2:38:
                    c1:fb:c5:c7:cf:34:bf:e8:a5:87:a3:f9:42:98:e2:
                    9f:fc:5f:42:f8:27:e6:b6:4a:d5:d2:23:93:53:c4:
                    7d:97:06:8d:99:16:bf:9a:32:ce:1b:65:b5:4f:f5:
                    79:d2:91:5e:92:dd:66:2c:fa:85:7b:b4:f1:4e:ed:
                    e5:9f:97:cb:59:50:62:0a:b4:e7:d7:bc:a3:8a:ec:
                    1b:9f:63:f0:ac:61:ca:51:48:7f:27:b2:23:70:34:
                    e3:e4:2c:fd:a3:c0:43:1e:ae:88:3e:bc:6a:2e:ca:
                    ee:cb:2c:70:34:ef:da:cf:42:7b:65:fe:10:c6:82:
                    f7:e6:e9:92:9c:60:ff:a5:e5:45:7b:c0:12:6a:19:
                    12:0f:33:5f:d0:11:64:32:81:be:33:7c:88:d7:9b:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:67:8A:DA:8A:42:AE:DA:C0:88:06:9B:1A:3E:36:88:BC:56:BC:8F
            X509v3 Authority Key Identifier:
                keyid:E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137342e302f32342d3234203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:55:51:ea:bf:09:9d:a0:5f:9a:ac:c3:f3:c2:26:cd:69:32:
         e6:47:64:66:e4:86:89:10:3d:c6:30:71:a5:2d:5e:04:98:9f:
         93:32:e8:97:0f:65:df:90:1c:dc:94:95:af:5a:4d:d0:fb:17:
         c2:fb:a3:8b:f2:13:1e:a4:05:e0:e2:e9:60:09:9c:c7:b5:e3:
         d6:ba:ed:2d:54:20:2a:1b:cb:e0:63:68:8d:0b:1a:fa:cb:cf:
         07:e9:49:73:55:00:a0:69:11:7c:d8:d3:a9:1e:91:c7:24:8a:
         d6:cc:60:5c:17:7e:c1:db:82:0a:c7:85:ff:7b:af:eb:28:77:
         4d:57:18:d8:5a:3c:54:51:e8:d6:c2:1e:50:ed:8b:63:77:79:
         2d:33:f2:fb:d3:68:07:92:47:51:d6:3f:8a:bb:5f:62:90:7c:
         bd:c9:db:5f:b5:15:92:81:0d:28:0e:85:7d:9f:f9:0b:ca:1f:
         7d:39:5e:4b:ed:06:fd:c2:48:68:98:f7:fc:a4:1b:2d:6c:00:
         ab:39:4e:fb:29:49:9f:40:97:47:05:3d:4a:b3:e6:0a:19:32:
         fe:72:06:44:f1:33:b1:1e:73:2e:1c:0b:30:a2:16:2b:0f:67:
         f5:a4:88:2c:e2:97:58:07:a5:ed:f4:2a:fb:f3:89:35:ca:e1:
         84:c8:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:39:24 2025 by rpki-client