Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e32382e302f32322d3234203d3e20323637303838.roa
File:                     34352e3232382e32382e302f32322d3234203d3e20323637303838.roa (raw, json)
Hash identifier:          LER0zKoI+qVmopw+hL+0Yqlfop59BQnmU9J3aC2+dbw=
Subject key identifier:   82:4D:E8:DC:CD:D4:5B:A0:F8:7A:98:80:58:AA:92:77:C4:09:35:26
Certificate issuer:       /CN=C72086566EE782E49254BF59EB3177E027E3F1E6
Certificate serial:       4C134724EE2163457237AB9195F7694F138D7A45
Authority key identifier: C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e32382e302f32322d3234203d3e20323637303838.roa
Signing time:             Thu 06 Mar 2025 04:01:05 +0000
ROA not before:           Thu 06 Mar 2025 03:56:05 +0000
ROA not after:            Thu 05 Mar 2026 04:01:05 +0000
asID:                     267088
IP address blocks:        45.228.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl
                          rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:13:47:24:ee:21:63:45:72:37:ab:91:95:f7:69:4f:13:8d:7a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C72086566EE782E49254BF59EB3177E027E3F1E6
        Validity
            Not Before: Mar  6 03:56:05 2025 GMT
            Not After : Mar  5 04:01:05 2026 GMT
        Subject: CN=824DE8DCCDD45BA0F87A988058AA9277C4093526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:58:c9:f5:0a:eb:8b:18:45:a5:f1:2f:2d:
                    0a:fc:fa:22:17:c2:f8:39:b9:1b:ba:b1:72:71:35:
                    8f:2a:02:fc:c9:c0:81:67:0c:c9:15:78:c1:11:f5:
                    75:7d:96:b7:5c:69:dd:30:17:c7:0d:4f:a4:8e:18:
                    39:8d:9c:a6:f8:ab:51:6a:f8:f2:c4:c0:61:31:aa:
                    9d:f5:36:74:92:a2:d9:c7:e5:53:fe:5c:3e:8c:f5:
                    d5:30:78:ba:8a:3c:18:47:1c:d6:26:93:fb:9e:60:
                    5e:05:42:3d:d1:81:78:7f:fc:89:cb:e2:9f:e0:0e:
                    6b:c6:31:72:13:3a:b2:72:19:21:de:bf:f5:43:9b:
                    e4:64:98:ff:09:ee:76:30:cd:20:6f:c6:ff:f2:d0:
                    ca:18:77:df:97:2f:fe:46:41:75:73:16:66:86:70:
                    6a:71:3c:e2:7e:44:ee:0c:e5:23:de:69:05:7c:64:
                    a0:c9:7b:00:36:99:fa:2a:c1:09:ec:8f:a1:a3:00:
                    8b:33:fa:9f:98:63:62:13:40:f0:1a:9b:5f:2c:83:
                    7f:17:32:9f:f0:60:80:ba:1a:d5:40:65:f7:59:e1:
                    26:ba:43:96:7e:0e:3c:15:24:53:b7:cb:4c:52:72:
                    fa:10:ba:a3:93:3f:c3:39:a0:18:f1:47:28:5b:4c:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4D:E8:DC:CD:D4:5B:A0:F8:7A:98:80:58:AA:92:77:C4:09:35:26
            X509v3 Authority Key Identifier:
                keyid:C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e32382e302f32322d3234203d3e20323637303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:46:d0:6c:f3:23:ba:0c:ed:53:3f:54:ed:8e:91:e2:35:
         aa:65:20:a7:6d:ca:83:f7:d6:e3:59:f3:23:60:a7:70:74:02:
         32:a3:49:81:f8:23:38:43:05:5c:5a:a6:5b:a2:29:5c:24:48:
         0b:ad:8c:04:14:b0:69:4f:cb:2f:51:b7:39:cb:cf:f8:a3:69:
         4a:c4:19:ea:3d:9d:e1:9b:85:97:ae:c5:a8:34:63:eb:fd:b6:
         14:9c:cb:30:f6:0f:c0:e9:77:9e:9d:c1:6f:10:b2:d6:04:04:
         e9:0f:15:71:0e:3e:1e:08:58:00:f6:aa:ed:4e:92:ee:d2:5d:
         6b:f7:bd:8f:0c:91:9c:67:42:4e:99:d7:be:43:b1:4d:df:ee:
         18:09:8c:d1:90:ab:1c:60:41:67:a4:e8:eb:88:7d:60:9d:9b:
         5f:8f:f4:dd:e9:39:2a:13:ca:ad:33:b1:f9:72:f5:26:ea:90:
         d3:fe:ac:dd:12:16:48:ed:f3:23:b3:37:48:4d:ba:be:17:b8:
         f8:9a:18:ff:d0:46:96:15:a8:94:78:59:5a:2a:fa:6a:40:41:
         8c:80:6a:49:30:b8:27:20:1b:73:b8:fd:04:ba:e9:e7:5c:eb:
         9d:49:33:1f:05:e4:31:53:ac:6b:5f:d2:85:fe:b1:0e:11:fe:
         69:a5:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:39:02 2025 by rpki-client