Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33372e302f32342d3234203d3e20323636393735.roa
File:                     34352e3232362e33372e302f32342d3234203d3e20323636393735.roa (raw, json)
Hash identifier:          /+roH6uKhNgpgS6MVAhPd2WMANGK45oCR2rl/f5fs+g=
Subject key identifier:   94:69:22:BC:39:0F:E0:5F:23:D7:2D:4D:74:3D:19:70:CB:B3:36:C5
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       2A66C83C7720026BF8963DCD51010F2002821613
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33372e302f32342d3234203d3e20323636393735.roa
Signing time:             Tue 04 Feb 2025 14:20:44 +0000
ROA not before:           Tue 04 Feb 2025 14:15:44 +0000
ROA not after:            Tue 03 Feb 2026 14:20:44 +0000
asID:                     266975
IP address blocks:        45.226.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl
                          rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:66:c8:3c:77:20:02:6b:f8:96:3d:cd:51:01:0f:20:02:82:16:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: Feb  4 14:15:44 2025 GMT
            Not After : Feb  3 14:20:44 2026 GMT
        Subject: CN=946922BC390FE05F23D72D4D743D1970CBB336C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:86:88:e9:30:e3:ac:03:e1:79:2e:08:8e:
                    2f:07:c9:25:58:bf:86:57:7f:12:b2:ce:77:6c:39:
                    1d:c3:ab:e3:3a:c2:5a:8b:0a:34:04:fe:0a:bd:62:
                    ad:97:39:1c:fd:a9:1d:2f:57:6f:84:ba:fd:4f:79:
                    97:bf:27:00:2c:0c:c4:41:53:2e:6a:63:67:f1:4b:
                    c0:eb:bf:ba:8c:db:0b:94:71:49:42:85:d6:91:df:
                    96:70:1f:ce:17:d5:8f:8c:05:4b:3c:4f:b1:f6:70:
                    0f:c7:20:b7:05:dc:5a:02:4b:86:4e:f6:84:62:f5:
                    4e:8a:42:7a:42:e0:2b:b4:30:d8:aa:18:08:d6:dd:
                    b7:96:52:55:ff:c1:e2:a8:bf:52:ce:2f:ef:da:cd:
                    09:ad:e9:2e:59:87:ca:b0:e8:b9:f7:bf:f2:e7:6b:
                    a9:6f:ab:b0:ba:f1:18:06:c9:bd:24:bd:60:74:3d:
                    f8:47:cc:b5:a1:e8:26:e7:c1:9d:53:fd:b9:6c:ae:
                    01:4c:a8:ea:71:cb:72:59:3a:39:46:87:dd:c4:a8:
                    61:10:54:b0:42:2d:95:ef:0a:65:4f:51:66:ab:6a:
                    5c:cc:ba:75:eb:41:d3:34:4d:18:af:c7:66:e1:3d:
                    0c:7e:e6:8c:9d:c0:b3:7b:da:75:93:19:77:fb:64:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:69:22:BC:39:0F:E0:5F:23:D7:2D:4D:74:3D:19:70:CB:B3:36:C5
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33372e302f32342d3234203d3e20323636393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:59:6e:82:7b:39:be:3a:4a:22:6d:cd:dc:7f:70:58:1c:8e:
         da:6d:fe:5c:f6:08:2a:e2:7b:3b:4d:93:ea:16:0c:5e:4c:ba:
         03:4e:a0:8f:a2:0b:d1:ce:46:a9:7c:07:76:0c:8f:f0:41:7a:
         dc:9a:bc:cc:ec:af:40:24:c4:9c:9e:c7:e0:6c:de:f8:18:85:
         9c:8e:3f:56:a0:2c:26:0e:45:9d:bb:06:a8:30:9c:65:9c:86:
         04:3c:f1:44:7b:bb:6a:5d:75:ec:9a:2e:1f:10:bf:bd:88:49:
         c8:98:eb:d8:93:82:7f:32:a1:69:86:55:9c:95:98:04:cc:c6:
         fc:b0:bf:bd:8f:02:e5:a2:c0:4a:b2:8b:7b:f2:0e:ed:2c:e6:
         a8:69:5f:a3:59:98:53:93:be:2a:69:76:e6:96:3d:76:d7:f0:
         6d:39:2b:89:62:03:f9:9f:59:6a:bc:55:22:30:3e:18:2a:0b:
         b7:f8:85:4d:12:d1:41:c8:fe:62:c5:09:c8:ff:18:51:7d:71:
         73:cc:22:e6:73:4a:fd:d0:59:ce:95:8f:2e:9c:b2:55:08:c0:
         e9:21:a7:93:73:1f:fd:56:24:7d:c3:9c:28:77:78:0c:33:24:
         8a:60:8c:51:38:97:e8:8a:be:21:3a:83:e3:dc:a9:59:4a:0f:
         dd:d2:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:53 2025 by rpki-client