Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133322e302f32322d3232203d3e203238323130.roa
File:                     34352e3233322e3133322e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          NLvBJN0qZQIXcZgEoAiE/u3cfoCIkznm+9O/yZ4b0hA=
Subject key identifier:   C0:5C:96:04:36:8D:E1:F0:D9:25:08:0D:B3:94:20:45:14:76:BB:80
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       4762DAD2ABDB24CC494F2F8E7D4AAE52CA7160D6
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133322e302f32322d3232203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:11 +0000
ROA not before:           Thu 06 Mar 2025 04:37:11 +0000
ROA not after:            Thu 05 Mar 2026 04:42:11 +0000
asID:                     28210
IP address blocks:        45.232.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:62:da:d2:ab:db:24:cc:49:4f:2f:8e:7d:4a:ae:52:ca:71:60:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:11 2025 GMT
            Not After : Mar  5 04:42:11 2026 GMT
        Subject: CN=C05C9604368DE1F0D925080DB39420451476BB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:ef:e6:22:2e:1c:3e:6e:de:c1:49:9a:2b:
                    44:bb:f3:6f:e0:22:8b:28:4a:e7:a7:4e:66:3e:3d:
                    9c:73:18:73:6d:1f:56:5d:6d:21:74:ad:46:d1:17:
                    4f:9d:01:2e:1b:c2:53:59:92:be:01:22:33:e0:f9:
                    38:17:8a:d3:ae:50:c0:ab:81:f8:73:c5:18:01:82:
                    2e:57:89:83:9d:a7:10:e4:15:e1:39:a3:10:6e:d9:
                    b6:be:a2:11:35:f8:9b:37:62:12:f1:f7:4e:a5:07:
                    98:44:6f:24:98:d9:61:44:60:c0:0a:07:06:1b:8c:
                    2e:ad:e0:b9:c7:54:af:5c:ef:bf:5b:cd:9e:98:6d:
                    88:4c:19:06:da:45:29:e6:bb:28:c6:08:87:66:69:
                    b0:66:4d:fa:31:a8:df:1e:86:42:c6:2e:c7:ae:75:
                    9c:06:35:95:ad:74:88:83:1f:41:99:16:3f:06:06:
                    4f:72:ab:3b:fc:87:74:c4:7b:fd:57:7d:ce:50:47:
                    c2:14:2e:3c:d2:bd:6f:0b:14:eb:1c:85:ff:51:d5:
                    9b:e1:29:0d:48:bd:cf:39:d7:ee:dd:0d:06:90:8a:
                    ff:0c:f3:64:8b:e8:93:41:d7:39:f9:0a:7a:38:3c:
                    57:4a:8f:30:6a:2c:fd:91:90:c0:dc:55:d2:c2:c5:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5C:96:04:36:8D:E1:F0:D9:25:08:0D:B3:94:20:45:14:76:BB:80
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133322e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:ba:3e:5c:1b:01:7f:f2:b1:8a:6a:9c:38:80:09:0d:12:
         ea:87:ce:67:28:59:c0:20:43:d8:14:b5:49:29:54:b2:25:a0:
         47:09:cf:11:db:6b:45:41:b5:3a:ef:45:b3:d2:d4:43:1d:7d:
         d7:96:fc:67:00:7b:29:a3:51:b9:ae:8b:ea:0b:ed:88:1a:92:
         4a:fd:f4:b7:84:43:9e:fc:fc:07:2d:89:ba:ba:86:87:01:7a:
         fa:18:15:a9:8a:cf:ee:42:b7:9e:20:8f:b8:fa:23:a1:a4:ab:
         72:5c:1c:e8:a8:c6:3b:13:04:38:78:8d:fa:29:c5:64:d9:e5:
         21:6f:6e:b6:b6:5b:e5:70:c2:0d:39:b2:9a:1c:10:90:1e:64:
         f4:72:c6:1d:95:8c:59:f0:6b:83:2b:14:18:ca:09:51:22:36:
         4d:13:f5:72:f7:c4:26:db:03:c3:10:7c:0e:b3:15:7b:81:22:
         74:19:41:9b:32:da:dc:32:d9:f2:39:f6:b2:5c:f6:13:33:47:
         86:3d:e4:23:2c:b7:f9:09:de:02:50:b8:f1:d4:02:50:db:c6:
         83:54:3e:b0:3a:d2:8a:3d:49:b0:30:d8:30:86:4d:e8:51:07:
         d9:8a:df:d9:de:1f:05:62:5a:32:0d:ec:4d:95:78:db:fc:5d:
         46:35:44:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:25 2025 by rpki-client