Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa
File:                     34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa (raw, json)
Hash identifier:          Axew/Lqsoy7r3BGlfRKvSVyMflhA2+l5l8QipgZknbY=
Subject key identifier:   59:1A:A6:CC:15:6B:E6:F5:EF:60:D8:F2:0E:8B:AE:2A:8D:C9:48:37
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       4468384A88A3A28C5DE4C827D7FE7BFCC8B8515C
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     269195
IP address blocks:        45.179.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:68:38:4a:88:a3:a2:8c:5d:e4:c8:27:d7:fe:7b:fc:c8:b8:51:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=591AA6CC156BE6F5EF60D8F20E8BAE2A8DC94837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:c9:a2:dc:17:05:f1:6d:5e:b0:a7:35:3f:
                    be:24:ed:63:ea:cd:33:38:a0:a5:cb:55:8f:20:ab:
                    24:90:34:bd:cc:02:73:cc:fd:3b:cb:3a:bc:07:0b:
                    a0:0b:cc:b5:af:76:35:14:34:69:04:45:dc:37:89:
                    f5:8b:bb:27:1f:6a:57:37:83:e4:b8:8d:3e:13:42:
                    d6:56:79:fb:cf:55:a5:cc:74:98:9f:1c:84:88:fb:
                    16:61:ae:a1:45:a8:94:5b:b3:c7:76:c5:f5:07:d8:
                    93:d4:14:45:b7:c0:09:a5:3e:fa:4f:17:65:11:08:
                    cb:24:c4:c0:33:42:d1:62:e8:d5:05:6d:0f:cd:85:
                    6f:cd:07:7b:a9:9c:92:83:56:01:4c:fa:a4:04:d7:
                    bb:d6:0e:d1:90:c6:25:da:b5:b0:61:56:bf:bd:b3:
                    5e:ab:af:3d:1b:76:d8:41:01:3f:dc:16:9e:38:17:
                    c7:56:3c:1e:b4:bc:fb:91:20:1c:0a:ce:a6:20:b6:
                    5d:98:58:2d:88:6d:f1:a5:36:d8:87:34:86:f3:99:
                    0e:05:ad:bd:4c:e9:de:2a:24:9f:85:f7:0f:dd:f1:
                    8c:e7:6e:98:fe:18:29:e4:67:8f:0f:31:85:b9:80:
                    e4:53:ff:f4:2b:2b:cf:e6:0f:c4:16:dc:5a:df:0f:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:A6:CC:15:6B:E6:F5:EF:60:D8:F2:0E:8B:AE:2A:8D:C9:48:37
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:a7:36:86:80:65:3d:5b:8d:bf:4f:25:55:3c:7a:b9:1b:
         d2:b6:e8:3f:22:5a:c1:bf:70:2e:90:e5:19:73:24:12:4e:2b:
         e8:c2:a7:55:ba:d6:7b:d5:69:d5:77:ac:92:dd:5a:46:2a:22:
         40:20:6c:14:52:e1:54:da:ef:38:05:a4:75:cd:83:f5:ca:ae:
         88:f8:eb:11:58:ef:a3:c0:2c:07:bf:d2:b9:0b:b6:44:92:d1:
         58:4f:67:76:9d:b6:32:ad:0e:b0:3e:03:14:bc:8c:e6:1c:6d:
         2e:ae:e7:72:71:ce:ac:3c:0a:c7:fa:7b:d3:43:9b:75:d6:21:
         84:34:69:a1:ae:96:85:92:d5:a6:f5:f3:7c:be:75:8f:01:7c:
         62:06:54:bb:71:c1:62:e1:6d:27:f5:9e:40:c7:07:36:b6:c0:
         be:62:91:b4:0e:73:a1:3f:0c:9f:03:d0:e1:bb:0e:dd:b1:dc:
         15:43:5a:d9:77:22:59:92:09:c3:5a:02:a0:71:06:47:f7:4d:
         f3:90:8c:a5:8c:2e:92:75:6c:cb:10:e7:a9:0d:5f:7e:c4:fb:
         f6:c5:eb:61:05:ed:59:20:69:79:5b:9e:d9:5d:63:6a:2a:38:
         a6:76:68:34:97:33:f8:cf:6d:d4:b1:71:01:5f:83:77:54:c7:
         28:ee:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:23:38 2025 by rpki-client