Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa
File:                     34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (raw, json)
Hash identifier:          6mJx3EaI4/kttTI8C0WH5cCMzbqxSNFG1eJeT7sazOM=
Subject key identifier:   96:22:FB:F0:89:E0:99:48:57:DE:A2:72:20:DF:5B:75:94:0E:26:F3
Certificate issuer:       /CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A
Certificate serial:       6DA24625F05BF784EFECCA09B603ED246A741DD4
Authority key identifier: 4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa
Signing time:             Mon 24 Mar 2025 17:58:19 +0000
ROA not before:           Mon 24 Mar 2025 17:53:19 +0000
ROA not after:            Mon 23 Mar 2026 17:58:19 +0000
asID:                     269671
IP address blocks:        45.191.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl
                          rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a2:46:25:f0:5b:f7:84:ef:ec:ca:09:b6:03:ed:24:6a:74:1d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A
        Validity
            Not Before: Mar 24 17:53:19 2025 GMT
            Not After : Mar 23 17:58:19 2026 GMT
        Subject: CN=9622FBF089E0994857DEA27220DF5B75940E26F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:36:38:ef:d9:6c:87:e9:ed:89:0a:c9:a3:
                    be:91:05:48:e4:e3:99:20:93:ba:a3:5c:5e:80:06:
                    d5:52:62:9d:94:69:33:4c:ad:09:b3:7a:7a:50:3f:
                    3f:2d:05:f3:2e:ee:37:6b:dd:6a:e1:5a:ed:bb:37:
                    70:83:13:69:a7:cd:1d:87:ba:fa:05:be:03:28:30:
                    ed:ee:b2:16:55:4a:af:03:6a:c5:77:ef:bc:d1:21:
                    d2:a4:ce:0a:53:51:5b:11:66:f1:66:6f:3e:03:c0:
                    b3:c7:42:52:21:63:04:cc:42:3d:98:5c:d2:16:3b:
                    6f:ef:b8:6f:3d:58:43:e6:73:12:38:05:6e:9f:63:
                    51:91:81:c5:5c:21:44:2c:a9:55:d0:08:00:cd:9d:
                    aa:e1:f9:87:f8:de:6a:fd:ba:3e:0e:68:82:f4:19:
                    b0:f2:69:19:dc:ec:b8:8c:97:fa:e2:f4:66:c9:06:
                    43:d6:91:ae:10:06:a5:5a:25:07:23:67:68:8c:13:
                    18:5c:17:b3:8d:91:55:76:9c:c2:2d:bc:78:4d:ca:
                    97:82:a4:dd:eb:a2:e1:ca:94:55:0b:30:6c:f7:5c:
                    1b:41:25:cf:0b:19:4e:26:72:8c:e5:48:80:6d:70:
                    21:54:30:da:b4:f3:dc:16:22:8c:6e:1a:27:b7:0c:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:22:FB:F0:89:E0:99:48:57:DE:A2:72:20:DF:5B:75:94:0E:26:F3
            X509v3 Authority Key Identifier:
                keyid:4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:bc:16:fd:3e:ca:a8:dc:41:13:9c:c4:ba:b8:7e:7f:48:14:
         4e:f1:19:22:b4:db:80:90:2e:d7:d9:19:f5:c8:70:8d:67:40:
         9a:1f:ed:40:d6:c7:04:50:c5:21:05:29:67:f6:ee:b1:d4:11:
         f1:44:5e:4e:0d:d8:f3:3c:e7:d7:e8:58:f6:16:ff:b6:f6:76:
         b9:6d:cb:65:86:41:4c:eb:81:8c:1c:51:e2:ff:07:dd:85:e4:
         05:52:cc:ad:b5:e8:b4:8d:3f:08:e9:f7:07:02:83:eb:56:99:
         4a:da:f8:94:d9:28:ab:bd:09:f4:09:e2:61:1a:69:51:45:1b:
         c2:62:fe:64:28:7e:52:7e:9d:db:ff:eb:38:8a:b3:ca:77:4f:
         68:f7:78:20:08:c1:48:a8:2b:a3:33:57:95:29:49:c4:8c:87:
         31:a0:53:3d:70:f8:9b:2d:ca:c1:7e:d4:80:4d:3f:92:34:6b:
         84:c3:ec:ec:0d:97:cb:92:3d:f4:92:a0:71:ef:f1:1e:29:7f:
         1a:24:3f:3b:f3:e8:9d:f6:2d:07:63:88:2d:93:c9:4d:ec:91:
         4e:5c:8f:e5:a7:47:c5:12:74:97:a6:c6:ec:60:35:74:19:05:
         6b:29:6f:ad:a6:15:4b:eb:93:b9:8f:c0:95:c0:e5:af:83:5e:
         b8:0d:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:22 2025 by rpki-client