Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa
File:                     34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa (raw, json)
Hash identifier:          HfOQRxQxHaAmR5zNsLFUTVebBHvz81JaoaF+7kgwRbI=
Subject key identifier:   54:7D:B9:69:51:7C:A9:32:72:B0:91:45:69:A6:08:C4:79:02:41:3D
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       1ECB5E651E85E2FDB0021FA2E64598A8CBD518D1
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:55:01 +0000
ROA not before:           Mon 13 Jan 2025 12:50:01 +0000
ROA not after:            Mon 12 Jan 2026 12:55:01 +0000
asID:                     268568
IP address blocks:        45.163.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cb:5e:65:1e:85:e2:fd:b0:02:1f:a2:e6:45:98:a8:cb:d5:18:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:50:01 2025 GMT
            Not After : Jan 12 12:55:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:87:2c:87:ab:59:fd:0c:f8:8b:8f:3a:96:
                    1e:dc:fb:f7:bd:ef:e8:7e:9c:11:a7:0c:d2:57:f5:
                    66:a8:6e:ed:aa:42:b4:08:2b:e9:57:e4:8f:c0:8b:
                    2e:57:60:11:a6:95:87:de:9f:8b:98:6c:bf:01:dc:
                    bb:60:d3:05:93:d3:81:7a:00:8a:8c:16:e2:67:dd:
                    64:ce:4c:5c:9d:a4:78:55:aa:4d:3f:65:3c:1c:df:
                    4b:38:71:b9:25:5d:35:7e:73:f4:4c:4e:3b:07:cd:
                    9d:97:bd:af:9d:ab:8a:b2:05:8b:7a:10:d3:43:b2:
                    63:2a:45:5d:ad:b3:e9:8f:72:ba:6f:07:fa:92:c8:
                    86:99:43:e8:62:bd:80:fa:9a:d9:85:46:91:fa:d2:
                    70:44:d0:ec:98:40:d7:1b:d6:96:54:25:78:c6:26:
                    0a:67:28:99:ca:56:15:65:9d:36:0f:47:e9:6d:11:
                    62:19:cc:ab:9d:0a:d1:e5:f0:08:2f:f0:95:18:f1:
                    3a:b6:15:fa:5b:8a:83:00:65:3d:88:f2:3f:f2:63:
                    c9:bc:1c:b0:0a:bc:aa:6e:8f:f2:35:09:e4:ca:3d:
                    99:67:1c:01:f5:c1:ec:c7:b7:05:e0:3e:b8:34:9c:
                    2d:28:a3:b9:74:80:db:b1:b1:67:2f:4d:cf:dc:fd:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:B9:69:51:7C:A9:32:72:B0:91:45:69:A6:08:C4:79:02:41:3D
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:b9:ec:ad:5f:5c:a8:eb:ab:20:ef:d6:8b:96:95:5a:a8:95:
         90:20:cf:1b:7b:39:1b:e1:da:c6:3f:e0:9f:d2:91:d4:b6:02:
         2d:8a:29:29:2f:b4:5d:8f:23:24:c6:dd:b2:30:1a:82:36:43:
         50:7f:ec:1e:e4:9a:16:62:35:e2:9c:75:24:67:ed:32:2a:2e:
         ee:db:e7:a4:a4:04:b3:63:76:a1:4c:4f:ed:5d:e1:8c:cb:0f:
         29:7a:6b:bb:a2:df:60:b2:e1:c1:a3:65:03:74:d3:95:31:49:
         2f:f0:1a:05:85:86:25:bb:5d:7b:89:bb:82:b8:2b:9b:03:ee:
         62:f2:69:e9:49:b7:08:ce:6b:0d:a3:f5:16:7b:06:e5:51:fd:
         f6:90:60:91:89:5b:d7:77:aa:7c:f8:5f:df:d2:b4:5e:14:92:
         8f:51:df:44:01:07:e8:5b:57:e2:26:2e:63:d5:3f:58:b9:99:
         f7:5e:c4:8e:b2:82:92:3c:32:63:ac:83:99:4b:a9:3a:93:bf:
         17:c5:d6:64:85:2f:d1:31:f0:49:2d:71:af:b6:46:6b:a4:2d:
         16:01:58:45:56:f4:77:23:71:e0:3e:26:6e:f9:bc:0b:a8:5c:
         08:01:46:09:c1:79:6a:ee:8a:95:c6:36:8b:b1:63:42:23:74:
         6e:9a:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:16:52 2025 by rpki-client