Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa
File:                     34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa (raw, json)
Hash identifier:          RFi0nM1+Ye+rBgx6EnZr6HUuwd6pLrw1lAqeV30r5PI=
Subject key identifier:   B5:3C:E6:89:6D:26:F4:59:58:14:CB:E9:73:DA:C1:7F:4B:46:D8:BA
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       6BA62657D4F98744757A4AF14C31F8F7BD03E035
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:54:58 +0000
ROA not before:           Mon 13 Jan 2025 12:49:58 +0000
ROA not after:            Mon 12 Jan 2026 12:54:58 +0000
asID:                     268568
IP address blocks:        45.163.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a6:26:57:d4:f9:87:44:75:7a:4a:f1:4c:31:f8:f7:bd:03:e0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:58 2025 GMT
            Not After : Jan 12 12:54:58 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:b0:0b:4d:9a:50:32:98:1a:8b:ec:43:53:
                    50:2d:6a:44:5a:6d:47:99:60:b8:b5:e4:fb:c4:ae:
                    ba:1e:48:1a:75:66:fd:ca:77:ba:96:f3:81:57:5c:
                    27:85:2b:fd:18:22:7a:cc:cf:e7:d6:66:ff:71:31:
                    a9:58:5a:be:25:69:42:ce:dc:76:b4:54:24:53:1a:
                    58:fe:20:24:c6:f2:80:f8:3f:51:01:0f:4f:11:3e:
                    0c:c6:63:c4:59:a2:3f:bb:b6:7e:63:63:68:42:29:
                    29:51:0c:43:8a:99:6b:78:4c:c6:55:dd:1e:99:b5:
                    27:97:5f:17:7f:9f:77:f5:0a:fc:07:af:02:ca:18:
                    4f:a2:b1:6a:fd:24:40:ad:76:65:5f:14:bd:cd:7b:
                    db:db:e7:6b:52:bd:3f:bc:86:5e:fe:64:9f:57:11:
                    8b:ed:80:4d:52:4a:8c:9e:49:13:e7:62:9e:89:ed:
                    92:1f:f5:af:a5:c6:3b:75:1d:2d:56:eb:da:5a:06:
                    37:55:41:89:32:33:54:3f:ed:9a:09:09:e6:07:84:
                    e7:34:88:b0:46:fd:60:a3:46:8a:96:c8:24:5c:5e:
                    9a:38:d6:b7:e6:47:f7:d3:f2:19:69:a0:c3:04:ce:
                    af:b0:b4:ea:87:14:4b:47:ec:fe:a1:ab:2b:0c:ae:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3C:E6:89:6D:26:F4:59:58:14:CB:E9:73:DA:C1:7F:4B:46:D8:BA
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:b8:62:bc:9b:b1:96:f1:3f:e8:8a:2f:71:4d:c5:3f:cc:
         7e:1b:ae:da:fe:c3:7c:7d:ad:c9:21:0c:b9:95:0f:c2:d9:38:
         b0:0a:20:2c:e6:34:40:c8:63:b0:36:ac:5e:4f:ab:49:65:35:
         2a:c7:fd:48:3f:28:fc:b2:5c:ad:80:dc:92:4e:25:78:bf:56:
         cd:dc:ec:66:54:c1:20:be:7d:9c:cb:89:7a:eb:6b:6d:61:6f:
         9f:86:d3:48:8a:9a:3f:8a:af:4d:27:e6:84:4f:05:93:3a:2b:
         3c:24:ca:76:48:8c:3d:d8:c5:7d:e0:92:1d:19:47:14:07:3c:
         7a:01:9e:1c:eb:6b:48:04:32:d3:23:cb:31:68:08:3e:10:66:
         bb:78:b1:cd:1b:00:ff:21:ae:e5:47:d2:26:72:76:0d:ea:c6:
         41:ba:98:46:51:ff:41:5d:2d:b3:cb:1c:f4:5f:0c:dd:45:b7:
         04:4f:c7:c3:3f:22:99:a7:7a:a9:e5:7f:23:e4:d5:bd:79:0a:
         76:bf:a6:db:98:89:80:d5:de:ed:b8:7a:03:7c:c5:a0:bf:5f:
         a2:32:27:8e:c6:ea:4b:7d:9c:c9:73:9c:ce:f9:48:11:d5:ac:
         8b:6e:02:68:7d:6d:fb:ba:d6:14:6d:a7:19:9d:c2:df:b2:5a:
         db:fd:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:14 2025 by rpki-client