Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa
File:                     34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa (raw, json)
Hash identifier:          hQIJzPOCMMP7MWF27oViAppPP9m3J9GzE9zhwSNaUM4=
Subject key identifier:   F6:DA:83:2E:D7:32:95:7C:30:4C:6C:52:8F:59:31:21:70:21:85:E9
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       730F405C3F4C149FA469CFA0906B5CC8014407C4
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269532
IP address blocks:        45.188.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0f:40:5c:3f:4c:14:9f:a4:69:cf:a0:90:6b:5c:c8:01:44:07:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:45:dd:2f:15:fc:d2:fe:d8:e5:bf:96:a0:
                    0e:a9:1b:b5:fb:e7:81:ae:2e:7d:27:a5:f6:9f:5a:
                    33:98:ff:15:94:8e:59:12:b6:02:0f:45:7c:13:e8:
                    53:e2:1b:78:1b:63:af:12:e0:49:b5:50:67:fa:7c:
                    16:6d:64:2c:44:61:51:d8:4f:99:a0:28:0a:dd:0d:
                    bb:d4:25:58:fd:6e:64:ad:75:74:9f:de:fe:fc:b0:
                    d9:3d:22:a0:62:aa:e9:77:bb:9d:e4:79:32:b3:7b:
                    2f:50:6c:ac:bd:4c:ce:9c:a6:8b:6b:cf:cc:79:d8:
                    32:1a:f1:d4:10:d3:09:07:42:ab:a1:7d:35:72:43:
                    0a:14:58:53:d2:84:6c:c9:4e:06:a5:4c:bb:47:2b:
                    58:e1:44:7c:ae:50:34:2d:f8:e7:4c:a6:ff:b6:53:
                    41:17:bd:21:64:c3:3b:02:e5:fe:18:54:8e:dd:6a:
                    fe:3e:74:4a:37:d5:f3:6c:cc:02:1e:5a:95:b1:8d:
                    b4:ad:8f:79:ec:01:38:d7:7c:26:fb:ea:60:ef:ff:
                    04:f8:53:6d:aa:ae:7a:ca:97:2c:41:3a:2b:6e:1c:
                    ad:79:99:ed:c8:8d:20:72:17:b0:fd:52:5c:35:1d:
                    93:2b:b8:5d:68:7b:a4:07:90:2e:f0:b2:bf:42:85:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DA:83:2E:D7:32:95:7C:30:4C:6C:52:8F:59:31:21:70:21:85:E9
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:dc:a0:c0:a6:8b:45:d6:bf:dd:b3:16:a1:fe:ad:e3:2a:85:
         fb:60:c7:78:9d:bc:45:c8:77:b6:d6:aa:8c:12:e7:bd:2b:39:
         fb:da:85:16:9d:1b:95:50:a2:4a:d1:10:58:70:c7:da:fc:ab:
         13:64:ae:8d:99:e6:68:0b:0f:94:d9:ba:68:6b:0a:6e:4b:13:
         f2:fc:87:ca:9e:c2:14:6d:7f:93:0c:2d:c3:e0:bf:42:25:1b:
         7d:43:fd:2e:ae:b0:5a:fa:b2:cd:01:30:89:2d:db:0b:90:57:
         d6:8e:ba:81:0b:fc:2e:c6:66:cf:62:bb:45:a4:95:e1:61:85:
         18:49:97:fb:02:07:da:b0:8e:7a:0f:8a:d4:4d:42:64:6d:f9:
         f1:a3:00:81:72:85:e1:94:1d:7b:a6:0a:39:b4:0b:d2:23:7a:
         5c:29:50:96:e5:ac:14:bd:d7:22:46:95:d7:59:6c:df:b2:da:
         ae:ed:14:37:6f:e3:3a:44:01:14:de:87:0d:7e:18:e7:0f:bc:
         e2:3c:73:54:83:99:45:17:36:37:f3:ed:f6:dd:7a:01:08:70:
         4f:a5:ef:29:b5:88:36:a7:bc:99:71:96:65:bf:db:18:47:e1:
         c2:63:9a:97:d2:f8:c5:32:48:6b:d8:9f:07:03:0c:9d:f7:3c:
         88:47:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:45:55 2025 by rpki-client