Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/34352e3137322e38302e302f32322d3234203d3e20323634353532.roa
File:                     34352e3137322e38302e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier:          GvxwwRB4CJnq/Jj9AOzJMqWm+rt4u0wxOID0kLFpMS4=
Subject key identifier:   46:EB:81:52:CB:1E:E3:AA:E3:ED:9D:7C:4E:51:01:07:42:9D:8B:62
Certificate issuer:       /CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Certificate serial:       7EE403A68BD3BC404832668722D0D31DCDF15CF8
Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/34352e3137322e38302e302f32322d3234203d3e20323634353532.roa
Signing time:             Thu 06 Mar 2025 04:31:20 +0000
ROA not before:           Thu 06 Mar 2025 04:26:20 +0000
ROA not after:            Thu 05 Mar 2026 04:31:20 +0000
asID:                     264552
IP address blocks:        45.172.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl
                          rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 03:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e4:03:a6:8b:d3:bc:40:48:32:66:87:22:d0:d3:1d:cd:f1:5c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
        Validity
            Not Before: Mar  6 04:26:20 2025 GMT
            Not After : Mar  5 04:31:20 2026 GMT
        Subject: CN=46EB8152CB1EE3AAE3ED9D7C4E510107429D8B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2c:b6:35:9a:7e:54:7c:71:61:dc:50:4e:a3:
                    c4:c3:b0:23:d0:c0:a8:e6:05:4f:8d:2b:44:46:c6:
                    3d:73:09:3b:96:bc:a9:20:e7:3e:fb:fb:22:1c:55:
                    fa:1c:c2:a8:fe:a1:bf:49:fa:4d:89:9f:4a:e4:a9:
                    86:16:95:a2:61:25:d7:0e:bd:bf:4c:de:60:b7:77:
                    00:b0:ac:8f:f7:a9:e1:28:64:44:ed:8e:f3:54:b3:
                    56:9a:36:1f:79:47:34:b4:95:93:df:fc:68:38:51:
                    9a:e3:b9:17:a8:61:a4:24:40:03:e5:e2:16:76:53:
                    78:ae:d2:34:2d:4f:31:5b:cf:d2:c2:46:9d:0b:d6:
                    0a:2a:41:27:12:e0:fe:f8:58:1b:29:4b:b9:ab:4a:
                    2e:fe:9a:d8:45:e2:36:ce:97:0f:67:1f:40:2c:b2:
                    2c:d9:c9:c2:5e:0d:aa:09:7b:cc:83:f3:2c:30:d2:
                    94:0d:5a:f9:0c:17:8d:11:16:2f:f0:2f:6c:f0:ad:
                    60:f0:19:38:cc:f1:27:aa:5a:ae:c1:11:71:45:ae:
                    aa:47:97:d6:00:f9:a5:94:9e:b0:78:5d:33:8c:3e:
                    6f:bf:b9:1b:01:69:50:cf:56:6c:47:68:e1:2b:35:
                    03:be:ec:cd:af:94:4a:a6:60:c7:8e:fb:b3:66:3b:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EB:81:52:CB:1E:E3:AA:E3:ED:9D:7C:4E:51:01:07:42:9D:8B:62
            X509v3 Authority Key Identifier:
                keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/34352e3137322e38302e302f32322d3234203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:d0:fe:e3:4f:50:b6:82:5b:75:bf:ce:7c:df:04:0e:d2:56:
         96:d5:2a:3b:3f:8f:33:87:48:1e:51:d0:ba:a8:87:25:d9:3d:
         96:a8:be:8e:a4:7c:a9:4f:83:41:9d:03:df:4c:21:f7:a0:68:
         d1:5f:08:af:3e:e8:b3:2f:41:3a:3c:5e:f7:5c:98:6c:6c:8b:
         6b:42:ab:57:3a:7f:a6:a1:d0:94:4f:59:0f:ac:54:3f:53:c8:
         8e:66:7f:c2:8b:32:5e:3d:e1:a1:92:ac:28:30:52:c4:dc:01:
         6b:f7:dd:11:20:25:1a:c1:23:b9:cf:fe:96:62:86:f5:67:ec:
         31:14:57:46:bd:d7:88:37:f4:4a:c6:3e:23:12:dc:a0:b4:74:
         22:09:c2:18:e9:33:35:d8:45:49:c4:42:bc:5d:3e:06:ed:54:
         f0:55:51:3e:c6:7c:6d:fe:07:88:84:30:ba:3a:1d:e4:71:51:
         f2:08:ea:ef:9f:9e:22:6b:3c:cc:61:a6:23:c1:81:c7:63:9a:
         83:d0:e9:3f:f5:20:fe:90:d7:08:1d:54:a9:a8:c4:d2:a6:e8:
         b9:df:b0:3a:b6:63:04:d7:ff:bc:06:0f:0b:51:e3:16:c9:c2:
         16:c4:80:1f:b1:d2:c2:67:7e:d2:ab:20:52:d3:91:fe:5a:36:
         f7:3c:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:00:12 2025 by rpki-client