Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3233302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          EHPWO0K1njxDglxNvqSIAdfWLt5o+nw/5IM9S52LDKQ=
Subject key identifier:   B3:BB:EE:91:8B:13:94:DB:61:1F:77:D8:66:36:60:6D:E9:BA:AE:10
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       4CF1D18A8195DC61D88E77964C3D92229E18B9B7
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 06 Mar 2025 18:36:39 +0000
ROA not before:           Thu 06 Mar 2025 18:31:39 +0000
ROA not after:            Thu 05 Mar 2026 18:36:39 +0000
asID:                     262617
IP address blocks:        45.65.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 02:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f1:d1:8a:81:95:dc:61:d8:8e:77:96:4c:3d:92:22:9e:18:b9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Mar  6 18:31:39 2025 GMT
            Not After : Mar  5 18:36:39 2026 GMT
        Subject: CN=B3BBEE918B1394DB611F77D86636606DE9BAAE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:a0:58:11:eb:86:e8:a7:12:fd:89:5e:73:
                    d6:90:fa:61:32:54:35:ff:15:49:d5:0e:c6:8a:31:
                    33:c0:81:c7:96:95:4e:77:9f:62:e8:4f:16:cd:11:
                    69:f6:92:ab:8c:95:e2:d7:1f:58:09:15:5c:5f:cd:
                    65:e8:a5:e5:a8:82:72:ab:ce:54:ff:2a:92:4f:87:
                    37:3d:7b:f7:34:6f:bd:48:c5:6d:18:62:97:95:c6:
                    f3:ca:81:e6:56:64:ab:0d:c3:6e:d7:4d:7c:f6:1a:
                    b9:e2:8d:e0:6e:25:62:4c:0a:0b:a4:ab:d4:27:c6:
                    65:d7:55:e3:43:54:8c:ae:84:73:7b:29:55:61:8f:
                    ed:6a:f5:2c:f0:92:a2:1e:5d:22:2b:6b:05:98:2f:
                    60:c1:68:af:2e:64:f3:96:e1:71:d7:f8:51:6e:18:
                    70:b6:52:06:a3:7f:a6:6d:39:ed:ad:4a:3f:30:5e:
                    96:33:28:02:bd:19:1c:da:d2:5b:f8:8a:df:af:f8:
                    a7:ed:84:3b:6c:bd:69:41:71:25:14:dc:37:e9:43:
                    04:c7:a3:97:22:d1:7c:cc:26:45:38:43:08:71:67:
                    51:c9:27:dd:21:85:31:54:87:80:47:ee:0c:dc:37:
                    b8:d2:c9:15:0e:77:a5:71:ef:23:21:23:17:a9:d5:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:EE:91:8B:13:94:DB:61:1F:77:D8:66:36:60:6D:E9:BA:AE:10
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:dd:0a:67:67:68:81:33:d1:54:4f:79:c1:4f:6a:83:22:
         aa:d3:73:c8:a2:9a:7a:5a:84:b5:3b:fc:dc:b0:23:0a:dc:17:
         a0:43:58:01:6a:41:89:1c:cf:72:d7:24:c3:a0:f9:cd:f0:0d:
         e8:c6:55:36:2f:88:01:d2:57:52:a4:ba:e0:1f:b5:a6:a6:c0:
         bc:07:1e:ae:b8:8e:0a:13:7b:10:97:ad:e2:3d:48:1a:fa:a4:
         d3:b6:f6:ae:98:bf:fb:00:86:b3:da:13:f5:20:5b:1c:65:2d:
         4d:0a:9e:aa:d6:4d:a4:a0:5c:cd:39:03:01:19:6c:0d:1b:0f:
         6c:64:15:4b:88:19:21:84:62:39:41:75:68:ea:41:4d:12:a2:
         62:9e:f2:b3:7a:82:db:ad:96:6a:49:4a:a5:b5:89:da:63:da:
         98:12:c8:00:ab:a1:27:b5:73:39:15:d4:db:8e:16:94:00:83:
         eb:48:65:50:30:3c:b0:7f:68:4e:f1:97:9b:87:6b:9f:2a:1b:
         c4:7c:a2:f3:35:1a:79:f0:5a:b9:77:b8:75:03:f8:b9:69:c9:
         a0:f9:c4:db:27:64:2b:88:4c:32:d2:d8:5b:e5:31:b5:59:0e:
         70:83:a5:20:88:f9:81:2c:56:a8:86:9d:96:92:bb:96:a7:29:
         83:8b:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:51:55 2025 by rpki-client