Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa
File:                     34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa (raw, json)
Hash identifier:          6xGtzLH2buZOXMAu1Rebz86PBC2KYNQ12oTxuCXeUWo=
Subject key identifier:   49:7E:16:A5:A3:AC:26:CE:60:81:80:52:C5:6E:0B:59:60:BE:79:FB
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       0EC283DDB26ED603158222E6D4F84F15DC99F8AA
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa
Signing time:             Thu 06 Mar 2025 06:00:20 +0000
ROA not before:           Thu 06 Mar 2025 05:55:20 +0000
ROA not after:            Thu 05 Mar 2026 06:00:20 +0000
asID:                     268068
IP address blocks:        45.168.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 18:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c2:83:dd:b2:6e:d6:03:15:82:22:e6:d4:f8:4f:15:dc:99:f8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Mar  6 05:55:20 2025 GMT
            Not After : Mar  5 06:00:20 2026 GMT
        Subject: CN=497E16A5A3AC26CE60818052C56E0B5960BE79FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:cd:ba:8c:fb:98:88:17:1f:e2:48:df:7f:
                    29:28:e8:6d:6e:b2:65:d3:79:14:49:68:71:c0:9b:
                    4e:9e:e3:c1:af:5b:6d:e1:bf:d3:4f:07:c5:40:0e:
                    15:7e:8b:2d:ae:65:b2:55:08:bf:40:70:3b:5c:c0:
                    51:6d:80:a7:d1:fb:fb:85:9f:ce:a6:80:ce:6d:a5:
                    d4:45:66:aa:82:b5:67:12:99:d0:8c:a8:7c:e2:96:
                    ff:02:bf:7c:d7:63:59:62:7b:ee:58:0c:bb:54:3a:
                    20:00:ba:f2:a4:66:7d:e1:dc:35:ea:5e:e8:cf:d6:
                    c1:36:76:df:f9:e9:22:0f:ac:69:e4:28:d6:83:01:
                    ba:d8:25:1b:da:ef:c0:df:7f:9f:51:9d:d1:29:4a:
                    72:f6:32:b9:c1:85:30:b9:15:b7:87:b7:d9:9f:99:
                    57:87:84:7f:d3:13:95:97:7a:6f:3f:85:6e:24:97:
                    99:11:93:26:9c:44:90:73:c5:cc:76:6f:a0:46:79:
                    66:fd:3c:71:7a:b5:00:3c:99:47:d0:e1:8b:47:38:
                    6b:5f:9b:3c:f0:74:22:16:dd:23:b4:89:b8:63:50:
                    94:aa:3b:a8:18:85:42:14:8c:0d:f0:b9:b7:b2:8f:
                    fb:f0:79:60:7e:15:49:c9:9f:db:d5:8b:b7:c6:a5:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7E:16:A5:A3:AC:26:CE:60:81:80:52:C5:6E:0B:59:60:BE:79:FB
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:b9:c6:28:c7:f4:de:aa:c1:e4:d0:24:21:35:c8:98:e7:
         a0:5e:52:de:9e:55:aa:8a:e0:bd:1f:18:92:f4:40:40:d6:bb:
         9a:70:3e:df:d6:f6:ae:08:e4:68:ec:7b:d6:37:a0:af:eb:9c:
         38:62:fa:b9:17:c9:f6:b9:55:0a:7e:c3:de:97:99:ac:3e:03:
         2c:c3:6b:01:1b:14:92:f6:ae:58:0c:5e:b0:74:49:91:fc:98:
         91:d6:ed:03:3d:e8:8f:83:28:ca:64:09:a7:14:f8:7a:ac:40:
         70:c0:3c:df:63:92:71:26:32:51:d1:a7:06:b3:4b:c5:5b:cc:
         32:85:9d:84:1a:1d:3d:e5:c7:40:ef:b5:79:b2:b8:f0:f8:1d:
         54:6b:b6:f3:bf:b1:19:83:42:37:51:33:85:71:3b:2c:62:ee:
         27:b0:cf:ff:6b:0e:74:b2:a9:e1:cb:39:b9:50:24:7b:53:5c:
         22:0f:55:02:5b:12:74:0d:00:68:f0:0b:01:39:a9:2f:ed:c6:
         d3:ef:24:ab:ad:c6:8a:04:60:4c:da:f3:70:33:9d:d1:67:dc:
         43:d4:3e:45:c1:56:e4:de:a4:57:27:77:4c:e6:c2:e3:d5:d4:
         0a:07:6f:e7:31:73:e1:be:34:a3:3f:ba:8c:49:e2:a6:23:b9:
         9b:f6:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:32:30 2025 by rpki-client