Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa
File:                     34352e342e3130382e302f32322d3234203d3e20323636303437.roa (raw, json)
Hash identifier:          OpvB/7zQLmWM8bVLQe2olhcc0rl6EB3cIjnlgXWlZr8=
Subject key identifier:   1F:BE:11:80:74:B5:BF:04:C4:C7:E9:3D:FA:E0:E0:6E:2A:22:31:C4
Certificate issuer:       /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial:       58264D706BABB6135236721A8BBDDD012432ABB8
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa
Signing time:             Tue 21 Jan 2025 20:02:37 +0000
ROA not before:           Tue 21 Jan 2025 19:57:37 +0000
ROA not after:            Tue 20 Jan 2026 20:02:37 +0000
asID:                     266047
IP address blocks:        45.4.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
                          rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 21:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:26:4d:70:6b:ab:b6:13:52:36:72:1a:8b:bd:dd:01:24:32:ab:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
        Validity
            Not Before: Jan 21 19:57:37 2025 GMT
            Not After : Jan 20 20:02:37 2026 GMT
        Subject: CN=1FBE118074B5BF04C4C7E93DFAE0E06E2A2231C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:b5:0b:63:b1:41:46:d2:0d:f5:39:f9:fb:
                    c3:19:9f:55:10:9a:e9:33:d8:05:d6:ae:68:cc:fe:
                    ed:71:ac:21:98:2a:ba:b9:9b:cd:7e:97:67:4f:f0:
                    df:21:5e:f6:4a:9d:cb:83:53:47:03:9e:45:04:9e:
                    4b:9b:6d:e4:ed:26:32:38:20:0f:72:24:3c:59:9f:
                    c1:50:42:ad:bf:81:86:0b:c2:33:06:5d:01:46:b9:
                    4b:62:0a:57:6f:9b:19:18:2c:3a:b6:ae:0e:8a:62:
                    e3:69:d5:4a:0f:50:5d:df:a6:b5:f4:89:8c:3c:a8:
                    e1:c9:de:ad:f2:60:60:2e:b4:ff:c3:92:f8:37:35:
                    86:a6:2d:1c:19:eb:e8:4d:8d:3d:cb:72:32:72:0c:
                    ad:18:7b:ff:91:dc:96:85:38:ff:b9:8b:2c:d9:1c:
                    22:c4:c7:7a:18:68:07:b0:8f:ac:7b:23:b1:93:da:
                    9f:27:48:8a:9a:15:e2:20:1f:01:e2:54:0b:ca:d8:
                    21:b3:e7:37:b1:5a:57:93:1e:ca:54:ac:23:83:0d:
                    4c:a1:f0:08:16:cc:e6:4e:59:37:2c:84:9b:93:29:
                    14:1d:4a:e3:fc:bd:6c:3a:1f:23:bd:eb:6a:9e:fb:
                    62:cc:4f:ce:81:e7:6a:63:5e:af:71:fe:39:5c:09:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BE:11:80:74:B5:BF:04:C4:C7:E9:3D:FA:E0:E0:6E:2A:22:31:C4
            X509v3 Authority Key Identifier:
                keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:89:61:0d:14:50:71:52:56:36:f4:06:90:69:3d:0f:b3:46:
         0d:a0:ee:e9:64:29:69:32:73:46:b8:14:e2:6b:00:e4:d0:26:
         cf:02:d7:0f:17:e1:cf:90:b4:f3:61:50:7e:60:d0:cd:ac:51:
         63:cd:ec:1d:39:ed:32:c3:5e:a8:16:99:44:c2:43:cc:e4:5d:
         6b:a8:93:41:9d:e9:98:a0:ec:a8:c9:52:8e:60:b1:a6:8c:de:
         06:c2:f0:30:0f:40:50:35:9a:87:4b:08:47:a2:82:de:dd:95:
         4a:e4:8c:4a:c5:0f:ab:bf:e1:89:ed:87:dd:b4:b7:9b:97:18:
         b5:ce:ea:5c:95:8b:e8:af:d6:6f:6f:01:38:df:35:b9:7f:7b:
         ab:93:ce:73:92:a6:d7:dd:18:b2:09:07:10:e5:6b:f2:5b:ba:
         4f:51:61:1a:b4:e1:64:06:ac:44:11:38:25:19:f0:6f:bb:0e:
         3b:00:4b:53:aa:7e:70:95:d2:df:1b:c9:6a:17:77:b9:5d:f4:
         38:03:86:bd:89:69:75:6d:7e:39:4c:76:c0:67:d9:f6:34:a6:
         64:52:49:2b:6b:18:2e:20:fb:a5:ea:dc:72:4f:bc:0d:7e:90:
         64:78:35:85:b0:a9:30:76:de:14:fe:61:b6:1b:cc:1d:6a:67:
         1b:c8:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:37:48 2025 by rpki-client