Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3332203d3e20323638363635.roa
File:                     34352e3136352e302e302f32322d3332203d3e20323638363635.roa (raw, json)
Hash identifier:          4F07WuaX/WXpAe4a6MiInYOeRToLcnLDtV8d15/KWoo=
Subject key identifier:   88:95:24:30:E3:48:FC:BD:4F:75:54:0C:9C:7F:E6:DD:12:28:98:45
Certificate issuer:       /CN=4C479CEB551A9E85D5C69926651F44DFE8F354D4
Certificate serial:       1624DEEC4BCA274FACAD4116BB97024332B3B791
Authority key identifier: 4C:47:9C:EB:55:1A:9E:85:D5:C6:99:26:65:1F:44:DF:E8:F3:54:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C479CEB551A9E85D5C69926651F44DFE8F354D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3332203d3e20323638363635.roa
Signing time:             Fri 21 Feb 2025 18:33:14 +0000
ROA not before:           Fri 21 Feb 2025 18:28:14 +0000
ROA not after:            Fri 20 Feb 2026 18:33:14 +0000
asID:                     268665
IP address blocks:        45.165.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/4C479CEB551A9E85D5C69926651F44DFE8F354D4.crl
                          rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/4C479CEB551A9E85D5C69926651F44DFE8F354D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C479CEB551A9E85D5C69926651F44DFE8F354D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:24:de:ec:4b:ca:27:4f:ac:ad:41:16:bb:97:02:43:32:b3:b7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C479CEB551A9E85D5C69926651F44DFE8F354D4
        Validity
            Not Before: Feb 21 18:28:14 2025 GMT
            Not After : Feb 20 18:33:14 2026 GMT
        Subject: CN=88952430E348FCBD4F75540C9C7FE6DD12289845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:73:48:dd:17:09:8f:e8:54:e0:e9:69:81:
                    cb:b4:ae:4e:e4:83:e6:22:eb:0a:73:79:e9:24:ca:
                    13:63:4d:1e:42:7a:75:b2:fe:84:6f:64:be:2e:24:
                    01:6a:7e:e9:cd:50:70:ee:a6:b2:e4:f1:b6:52:de:
                    46:fb:fd:d0:36:dc:6e:a5:fa:2b:36:78:1c:7c:2a:
                    f9:02:a5:39:b8:6b:b0:e8:58:7e:0a:b0:e2:04:74:
                    89:b8:42:dc:4e:78:b5:ac:1c:55:c1:3d:a5:3e:09:
                    f0:c0:f8:18:c3:3c:46:d6:cd:35:cd:28:d6:b7:46:
                    84:30:99:bb:a9:80:8e:10:7b:36:ec:16:fb:a4:38:
                    96:30:44:e3:f9:d8:39:b0:55:36:08:39:7a:6f:ab:
                    ee:10:f0:11:3f:2e:9e:51:d6:ea:38:10:b4:5b:94:
                    44:68:a5:64:da:ee:22:11:fa:21:e0:0a:9b:57:ef:
                    fb:7d:d1:4c:e4:0f:04:ba:ed:fa:7d:76:32:86:ea:
                    b9:61:7b:ba:74:f1:94:1e:a7:1d:fd:e2:e2:7f:36:
                    e8:e1:53:95:04:de:5d:f8:39:0f:8b:99:e9:32:36:
                    bf:13:6e:14:66:ec:9f:4a:2d:61:5a:a9:84:8a:3a:
                    9d:63:d4:c4:94:86:c9:8f:ee:5b:36:55:c9:f2:de:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:95:24:30:E3:48:FC:BD:4F:75:54:0C:9C:7F:E6:DD:12:28:98:45
            X509v3 Authority Key Identifier:
                keyid:4C:47:9C:EB:55:1A:9E:85:D5:C6:99:26:65:1F:44:DF:E8:F3:54:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/4C479CEB551A9E85D5C69926651F44DFE8F354D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C479CEB551A9E85D5C69926651F44DFE8F354D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3332203d3e20323638363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:a2:1d:c4:45:92:d5:fb:60:8e:1b:f0:3a:74:23:89:d4:
         16:df:ec:fe:50:bd:93:1c:97:dc:6c:cc:c8:d4:6a:d7:a8:cc:
         c8:80:e6:7b:63:f3:85:ea:6d:bb:ef:f7:28:fb:4e:e5:b1:58:
         e8:7b:54:85:7c:af:16:17:77:29:cf:11:e8:1b:ae:6c:ff:dd:
         a9:17:57:cf:5e:0d:c6:cf:92:d5:93:72:a8:08:38:e1:d1:14:
         be:a9:7a:cf:f3:68:2b:26:ea:a7:89:b4:33:21:a5:39:b4:f9:
         17:1f:81:76:d8:82:74:ad:e3:5a:8d:8a:17:0a:f3:7d:05:ac:
         cc:8d:a1:b6:ab:fc:e5:45:cb:fa:5c:95:b6:90:e6:20:74:c2:
         7e:92:06:b9:5b:74:b5:04:fe:73:7c:f7:76:0a:e9:2e:16:9c:
         f6:f2:97:15:0f:d0:01:76:d1:ce:b5:3f:d6:d4:c0:63:59:ae:
         01:d9:88:bd:e0:a1:70:c4:16:7a:0e:e8:38:c3:33:18:b2:7e:
         96:c3:07:d8:fa:5a:50:50:d4:ca:8c:19:97:f4:bd:cf:45:36:
         a1:3a:19:6e:1e:66:c9:91:bd:f4:df:18:e4:7c:4f:3f:88:e0:
         fd:43:f1:11:6c:a9:48:a2:e0:dc:89:90:e8:a6:31:9e:4b:44:
         33:63:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:18 2025 by rpki-client