Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          OjiAOE6jbGL58qjLXSpjHohZWVARWiZ5bAQnul50X/U=
Subject key identifier:   98:E8:D6:07:8C:22:24:19:67:A8:48:DC:5E:8B:AF:45:05:DC:83:96
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       7BEA4D86EA2650D2E05136557A65738B78975356
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:53 +0000
ROA not before:           Thu 06 Mar 2025 09:26:53 +0000
ROA not after:            Thu 05 Mar 2026 09:31:53 +0000
asID:                     268296
IP address blocks:        45.237.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ea:4d:86:ea:26:50:d2:e0:51:36:55:7a:65:73:8b:78:97:53:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:53 2025 GMT
            Not After : Mar  5 09:31:53 2026 GMT
        Subject: CN=98E8D6078C22241967A848DC5E8BAF4505DC8396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:15:96:81:48:bc:5d:b5:bf:e4:14:73:76:
                    ed:b6:f8:6a:b5:3b:19:73:73:12:e2:95:95:a0:3d:
                    81:f7:5d:63:7b:ef:1d:d9:2a:00:57:23:10:4d:87:
                    6b:ad:f6:45:2a:11:62:08:cd:7a:92:fe:25:35:90:
                    6f:03:a7:c7:8c:29:26:27:ba:30:0b:e0:ce:77:72:
                    6a:54:ee:4b:03:c0:8c:5e:d0:a3:73:ee:b6:97:19:
                    96:5d:62:8b:5e:65:0d:f0:6f:04:d6:5e:0a:e7:90:
                    f2:00:2c:13:43:83:2c:4e:2f:c8:bd:b1:16:0d:2c:
                    4d:fa:8d:42:5a:93:97:ea:ae:78:6d:96:69:3f:9a:
                    0b:a6:47:17:e5:04:c1:af:65:5e:d2:82:4f:f0:88:
                    4b:51:0e:b0:2e:54:3e:8c:76:9f:49:e8:0b:ae:a0:
                    9e:18:d1:63:97:fc:ce:17:90:fb:90:04:c1:95:ae:
                    44:15:f5:ce:92:ff:b9:ff:d2:50:ef:2d:84:b7:84:
                    e7:cf:12:5c:0c:97:a0:9d:cb:c2:93:a7:db:b8:93:
                    38:82:6b:67:fd:4a:d3:ad:2c:2c:45:f5:46:b0:02:
                    fe:9d:02:01:6d:1d:bd:e1:30:c3:74:77:4f:4b:c7:
                    00:1a:ad:23:53:e5:0e:a1:9e:79:89:0d:14:17:29:
                    5f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:D6:07:8C:22:24:19:67:A8:48:DC:5E:8B:AF:45:05:DC:83:96
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:a6:5e:04:d3:ff:5d:c2:53:73:60:8d:9b:9c:18:03:2d:
         0f:2f:83:d7:2f:97:b0:02:83:23:70:74:cb:d1:3c:80:c6:58:
         c0:c2:3b:a3:cc:0d:3a:06:09:f3:35:30:fe:5d:ee:a5:49:73:
         a6:33:25:41:da:c8:b3:59:6c:b6:81:1d:25:87:d6:3f:d0:a9:
         b1:46:db:66:81:63:5b:d5:15:16:11:3a:b8:ca:76:42:cf:37:
         07:62:2b:ed:a2:a1:98:e4:20:46:9f:c5:6e:4f:c3:a6:9b:e8:
         bd:7a:bc:3f:d8:e7:d4:3f:e0:ac:9b:a9:34:ec:3b:31:e4:c7:
         76:e4:38:df:22:29:b3:42:75:3a:65:83:17:ed:66:b0:bd:1e:
         f6:61:a0:0f:90:63:c1:b5:c1:1a:2c:36:2c:75:29:cc:42:13:
         67:1a:dd:a0:16:14:10:2a:e3:87:0a:75:d5:6e:3e:f1:3e:05:
         27:cc:da:ab:3b:ea:8a:c1:f8:bb:28:2b:72:58:25:09:2d:3f:
         1f:ba:f7:bd:00:40:ae:f9:ec:bf:ca:c4:d9:3e:20:15:3d:f8:
         0e:bd:5b:8c:f0:a1:a3:85:f5:29:11:7e:77:38:36:77:16:36:
         77:35:21:65:f2:3c:cd:2c:cc:20:1b:f9:8f:56:a7:f3:cb:bd:
         0f:9f:7c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:13:37 2025 by rpki-client