Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3232382e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          wA1yhF5F1RWxWLCyldEk2UJtHvSUQX4+SPg+1hWiyKs=
Subject key identifier:   EC:CE:89:B8:0F:4F:FD:F4:89:B3:A2:B0:36:17:E8:0E:52:6D:AA:9B
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       63BA289605B228BC5A6B3D1FC58126CFF3D162E3
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 06 Mar 2025 18:36:39 +0000
ROA not before:           Thu 06 Mar 2025 18:31:39 +0000
ROA not after:            Thu 05 Mar 2026 18:36:39 +0000
asID:                     262617
IP address blocks:        45.65.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 13:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ba:28:96:05:b2:28:bc:5a:6b:3d:1f:c5:81:26:cf:f3:d1:62:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Mar  6 18:31:39 2025 GMT
            Not After : Mar  5 18:36:39 2026 GMT
        Subject: CN=ECCE89B80F4FFDF489B3A2B03617E80E526DAA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:ee:84:3e:12:94:43:2f:23:7f:af:eb:12:
                    5d:4c:b2:d3:cd:f4:97:c5:6a:00:74:4b:02:b2:06:
                    91:e5:33:ad:1b:99:ed:0f:61:b2:28:47:15:93:eb:
                    53:35:70:e6:8a:a4:08:1f:c3:fc:35:08:bf:19:c9:
                    b6:ea:c9:a3:54:88:fe:4d:a6:a4:64:d2:1c:29:c1:
                    0f:2a:b1:a4:e0:b6:f8:3f:4f:95:d1:16:d6:a3:e8:
                    db:ff:67:a5:7d:4c:34:2a:e2:c3:15:a0:4f:a5:e2:
                    6e:03:17:eb:76:5e:13:ec:16:50:ca:81:d5:1c:fb:
                    37:12:d6:d9:96:5e:fa:53:11:65:f8:6a:62:1e:40:
                    bc:2c:cc:7d:66:f9:7f:57:e7:66:31:44:55:fe:c5:
                    52:1d:aa:a6:ed:36:37:d2:04:76:c3:93:40:fe:85:
                    e6:df:30:52:ef:84:f5:31:7a:18:af:bc:d7:7d:1a:
                    e8:84:11:0e:87:f1:ff:2e:72:b6:94:e8:57:fc:16:
                    c6:1a:07:8f:01:e4:f0:c3:8c:39:bc:fc:a2:92:54:
                    d2:21:57:93:d5:8a:02:da:3e:48:77:3a:bc:0f:6c:
                    2d:b8:35:f2:6f:99:6a:1e:76:1c:88:5e:76:fc:85:
                    03:0b:c2:53:4d:06:66:48:e3:c2:d5:db:91:74:18:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:89:B8:0F:4F:FD:F4:89:B3:A2:B0:36:17:E8:0E:52:6D:AA:9B
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:1d:b6:fe:43:0d:da:bd:80:4b:53:80:05:1a:60:f7:74:44:
         8d:25:d2:53:f1:b6:ac:2f:53:64:61:0e:d5:a7:15:83:03:60:
         09:c2:fd:67:17:a2:fd:00:c1:f8:61:28:9c:2a:7a:0f:2e:ed:
         48:3e:a4:6f:61:4e:a3:12:d2:36:85:31:d5:e4:cf:0a:21:30:
         68:03:17:c0:a2:ce:42:11:b5:58:b4:3a:03:d8:3c:31:39:28:
         d4:c1:2a:31:d5:98:73:78:32:b9:4e:e1:ee:e3:e9:d6:f4:ab:
         9c:08:b2:6d:3b:e0:12:e0:15:74:c1:e0:c4:ec:64:dd:15:3b:
         8d:60:83:6f:e2:64:64:36:69:76:96:24:74:26:0b:e2:c5:28:
         ee:fd:26:d8:e2:1b:33:68:07:7e:1f:1e:87:d8:c6:04:80:8b:
         8e:45:38:fc:fe:d9:cc:b4:6a:9b:97:37:60:09:17:57:fc:3b:
         39:c7:73:91:de:55:f4:c6:d1:eb:90:8d:ca:83:af:00:86:7e:
         64:8d:49:6f:d4:88:e9:67:6d:80:d0:f2:db:35:c1:17:96:57:
         ab:b1:55:88:c5:ad:ab:c0:68:24:09:fb:3d:1f:41:e6:96:fe:
         45:c4:88:6d:b9:87:dc:a1:41:ab:c2:35:4e:60:92:3f:9a:b2:
         65:a4:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:42:01 2025 by rpki-client