Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/34352e3232392e3132342e302f32322d3332203d3e203631393337.roa
File:                     34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (raw, json)
Hash identifier:          2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=
Subject key identifier:   B6:A8:8A:86:FE:6B:F2:EF:36:26:7A:3B:5D:F1:C3:F4:71:93:12:D9
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       192273ED88832A8A0492B0205E96310C1CF2678B
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/34352e3232392e3132342e302f32322d3332203d3e203631393337.roa
Signing time:             Thu 06 Mar 2025 09:00:15 +0000
ROA not before:           Thu 06 Mar 2025 08:55:15 +0000
ROA not after:            Thu 05 Mar 2026 09:00:15 +0000
asID:                     61937
IP address blocks:        45.229.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 07:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:22:73:ed:88:83:2a:8a:04:92:b0:20:5e:96:31:0c:1c:f2:67:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Mar  6 08:55:15 2025 GMT
            Not After : Mar  5 09:00:15 2026 GMT
        Subject: CN=B6A88A86FE6BF2EF36267A3B5DF1C3F4719312D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:7d:e3:ad:15:1f:5a:22:df:d5:d3:95:02:
                    9b:85:2e:2b:35:27:d5:d6:75:ea:db:40:55:33:af:
                    25:9d:d1:e5:bb:cb:30:96:c6:dc:0f:93:6d:6d:60:
                    e1:7a:45:31:e1:94:b7:a1:a7:7b:63:c7:01:fd:ca:
                    c7:a3:30:1b:0b:30:6e:a7:a2:07:76:0b:3d:54:7d:
                    47:ec:0c:27:15:dd:50:07:89:9d:81:8c:8d:0b:cc:
                    92:cf:3a:97:d4:12:bc:a4:bc:27:1b:32:c5:b7:37:
                    7a:72:dd:bb:40:8e:df:fd:86:e7:16:39:91:4a:e4:
                    78:e6:21:9e:cd:c6:0a:8a:27:8e:64:83:7b:ac:ae:
                    ba:9f:d0:b7:04:f9:4a:18:ef:39:83:da:e9:1c:3c:
                    d7:1b:58:fd:dd:d5:a7:c0:42:0d:8e:18:e9:31:8e:
                    e7:d6:67:c8:b0:e6:59:c7:51:28:e8:0d:68:54:99:
                    59:a9:c3:1e:fa:2a:ca:46:59:1d:ed:33:7d:f0:80:
                    bc:a5:b1:d7:1e:85:b8:02:a7:c0:57:71:7f:0c:25:
                    78:74:d3:4e:de:8e:6c:34:1d:8b:27:46:65:67:7c:
                    be:fa:aa:6e:53:ef:91:6d:dd:fa:1b:0a:84:cc:dc:
                    ba:0f:88:8b:60:b3:9e:47:9a:68:57:27:f9:45:05:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:8A:86:FE:6B:F2:EF:36:26:7A:3B:5D:F1:C3:F4:71:93:12:D9
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/34352e3232392e3132342e302f32322d3332203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:ee:7e:94:e4:96:1c:86:f0:9f:cf:82:12:79:21:cf:e3:c1:
         85:5f:fd:95:fd:fe:75:af:c2:67:67:e0:a6:51:5f:7f:2c:fa:
         dd:8f:bf:38:11:44:eb:4c:32:12:d5:92:e6:c2:ef:24:fe:ae:
         93:a2:a8:c3:7c:7b:b3:69:8b:0b:b3:76:c6:4b:24:57:d4:c6:
         79:ec:27:82:39:ca:74:56:b9:de:f5:56:e1:f5:32:09:01:58:
         99:62:2b:de:8c:18:2c:2c:1a:72:c9:12:bc:bf:85:4b:e0:63:
         d2:14:97:ea:8f:12:48:57:f6:aa:f9:33:d7:93:b6:41:f9:f7:
         57:24:0b:a2:20:60:a2:17:bf:f4:0c:17:25:c5:c1:12:c6:a1:
         f1:e3:b6:91:9c:94:42:7b:2c:20:8a:b8:ea:71:ed:0d:fd:c1:
         53:26:71:37:ce:4c:85:3a:e9:3b:12:5b:67:14:4d:12:7e:f8:
         a8:2d:f9:99:5b:75:15:b2:b0:65:70:fc:df:c5:4c:a4:8a:a3:
         6f:70:63:21:5f:27:0d:6f:e6:f7:8d:0f:a3:3b:48:86:f3:6e:
         d0:d0:fa:5a:bd:42:93:f5:17:a4:b0:36:72:c0:4a:04:1b:cc:
         6a:f8:ff:22:3d:08:31:34:c1:71:39:a1:7c:30:c1:21:46:4f:
         3a:c1:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:29:37 2025 by rpki-client