Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa
File:                     34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa (raw, json)
Hash identifier:          XwyGjkJOo5XZohHcUK7EqLIyw+pl9odHCWwfoW6PbfQ=
Subject key identifier:   F8:BE:71:4B:32:6C:D8:DB:00:9B:56:DB:97:67:6D:A7:F1:1A:4F:DD
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       7684C772997BE7A77C4E19FB94FCEDEF0C569457
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:54:59 +0000
ROA not before:           Mon 13 Jan 2025 12:49:59 +0000
ROA not after:            Mon 12 Jan 2026 12:54:59 +0000
asID:                     268144
IP address blocks:        45.168.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:84:c7:72:99:7b:e7:a7:7c:4e:19:fb:94:fc:ed:ef:0c:56:94:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:59 2025 GMT
            Not After : Jan 12 12:54:59 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:0f:24:11:0b:f8:5a:24:a2:bf:b0:ac:9e:
                    cc:9d:1b:fa:88:44:2d:34:e3:e5:32:de:67:48:1a:
                    f2:67:5b:bb:95:fe:9f:a5:1a:69:98:ad:3a:d9:91:
                    64:f2:0b:47:96:d9:96:67:84:77:54:68:b6:ab:70:
                    04:a2:5b:1b:fd:d2:d6:94:b1:d7:a4:03:27:1a:7c:
                    4d:c8:db:24:29:62:46:e9:b5:9a:0c:b6:0a:ce:f1:
                    24:75:da:82:de:9b:31:68:fb:63:5e:6c:b9:4e:ee:
                    06:cf:cd:39:9f:0b:e1:32:cf:13:12:9d:5a:68:70:
                    5a:92:23:f3:aa:a2:c4:b5:41:17:5f:fb:21:83:dd:
                    46:ef:66:73:9e:74:ae:7f:55:f7:49:7b:5c:e7:15:
                    f6:3b:fb:74:91:e8:af:82:d8:be:cb:4f:19:a6:e9:
                    e7:c0:d2:22:57:cb:d8:7f:dd:e5:d6:af:4e:26:a7:
                    9f:ec:44:20:9a:30:a5:de:9d:17:f0:4e:c2:0a:f5:
                    6d:70:27:7d:ae:54:ba:3d:34:a5:72:73:9c:de:0e:
                    02:bc:9a:a3:77:45:3b:18:b7:3f:dc:88:e3:1c:f0:
                    b0:b3:6d:43:2f:b5:e0:52:2d:5d:3d:09:a8:cb:19:
                    bd:d4:b8:bb:b1:46:8e:7a:54:a7:db:5d:06:b2:54:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BE:71:4B:32:6C:D8:DB:00:9B:56:DB:97:67:6D:A7:F1:1A:4F:DD
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:ad:87:3d:d2:2c:f4:8e:23:b8:6d:e6:11:06:79:8d:0e:
         12:a4:3b:1d:d9:9c:4a:93:29:11:e9:9c:28:e1:68:29:1a:01:
         ca:54:ee:b4:0c:d3:23:ba:5c:ea:ab:dd:90:89:3c:05:5a:2f:
         08:02:5d:da:05:ee:da:08:ab:97:6a:eb:17:2d:f7:44:16:a3:
         8f:00:c7:f0:3b:cc:23:34:1a:4b:c6:91:25:a7:e0:e6:7f:bd:
         0c:4d:3d:46:5d:3e:a2:1e:8c:89:ab:73:f1:10:8c:8c:e1:cd:
         fc:c9:be:89:03:67:d3:ed:5e:a6:ae:e9:b1:13:2d:20:13:1d:
         51:55:2b:9b:c1:47:72:2f:62:fc:6e:e9:73:b6:9d:ae:a0:a2:
         3e:ea:17:95:08:fe:2b:9a:fc:db:67:a7:38:7b:8e:75:2a:2f:
         d3:e5:00:cc:36:dc:ba:3e:a6:b7:c4:b7:22:79:08:4c:8c:9f:
         9f:99:30:ab:6d:19:02:35:dc:a5:35:71:b0:69:e4:49:db:0f:
         09:11:ae:83:ae:ce:f3:59:6f:b0:f9:d9:a9:68:8d:98:82:88:
         c7:ba:77:bf:77:63:0b:50:ab:ff:6a:d9:cd:82:0c:f0:49:3a:
         48:d5:2a:43:7b:3c:96:99:4e:27:88:2a:28:ae:b1:29:de:e9:
         4a:ee:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:48:37 2025 by rpki-client