Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3332203d3e20323639323230.roa
File:                     34352e3138322e36302e302f32342d3332203d3e20323639323230.roa (raw, json)
Hash identifier:          IAhNWq1VGgR0eB/ToaoNf3p5H9TXIkz4ur8+VC2Fy5M=
Subject key identifier:   24:06:2C:69:0A:84:40:AC:0A:99:00:93:C3:AC:F6:A6:4C:04:2F:AF
Certificate issuer:       /CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
Certificate serial:       5817CC1C3263D720B13A9971301FA6E9B0B29693
Authority key identifier: 44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3332203d3e20323639323230.roa
Signing time:             Mon 19 May 2025 14:29:45 +0000
ROA not before:           Mon 19 May 2025 14:24:45 +0000
ROA not after:            Mon 18 May 2026 14:29:45 +0000
asID:                     269220
IP address blocks:        45.182.60.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.crl
                          rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 08:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:17:cc:1c:32:63:d7:20:b1:3a:99:71:30:1f:a6:e9:b0:b2:96:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
        Validity
            Not Before: May 19 14:24:45 2025 GMT
            Not After : May 18 14:29:45 2026 GMT
        Subject: CN=24062C690A8440AC0A990093C3ACF6A64C042FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:fe:b8:26:f3:b0:1c:3b:10:c5:4c:74:fd:
                    53:9c:3f:36:a7:0c:38:7a:bd:39:a3:6f:84:ed:10:
                    81:f6:71:28:91:bc:f3:00:03:35:4b:ed:08:92:d2:
                    a1:d7:d6:da:0d:68:8b:ab:44:8f:92:91:a3:ac:11:
                    bd:53:9c:01:c1:96:bc:c5:a8:e8:82:ed:c1:95:b7:
                    6e:98:70:90:d1:50:9a:f6:10:be:b2:d3:12:6a:d8:
                    68:87:23:a2:7e:5c:74:86:75:8a:0c:d0:92:4c:c4:
                    1e:3e:8b:15:a1:af:99:87:25:43:74:96:1c:a4:ec:
                    cb:1b:43:28:be:2f:11:ed:5f:d3:94:ef:4b:ab:dc:
                    f2:b4:ff:64:2a:a7:37:fd:1b:14:42:57:e0:e5:dc:
                    7a:db:56:8b:11:97:33:f3:4c:7b:ba:19:07:f0:b2:
                    b0:1b:09:64:98:b1:c4:83:05:d0:86:85:96:61:22:
                    a9:15:e6:be:07:dc:3e:c1:64:2d:b3:c9:cf:52:8d:
                    56:24:04:8e:a2:c8:56:34:7c:28:cc:0b:9e:03:b3:
                    e7:d2:20:10:28:75:6a:ad:bb:9e:ad:b2:8f:df:b3:
                    17:4c:9d:55:6c:d1:9c:47:d7:32:23:7a:e8:e2:14:
                    75:44:b4:98:23:6c:cf:80:fe:55:e4:b7:4f:88:31:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:06:2C:69:0A:84:40:AC:0A:99:00:93:C3:AC:F6:A6:4C:04:2F:AF
            X509v3 Authority Key Identifier:
                keyid:44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3332203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:a4:e9:c4:34:58:cb:68:27:1d:c4:57:3d:53:ba:dd:1b:
         01:d0:c5:4e:5d:c3:39:ff:74:d9:71:6e:6b:77:4c:38:43:bd:
         27:f5:7f:7d:ed:49:90:d4:a8:6a:13:ff:7b:96:4e:02:25:96:
         b9:d5:f6:78:b1:1f:c1:95:a6:e1:13:28:64:64:4d:31:6e:f2:
         57:b8:14:74:03:c5:f2:e5:06:b2:8f:91:3d:61:bb:ee:45:78:
         fc:92:69:7a:a8:a6:ac:60:b6:7f:99:13:2e:02:56:b9:66:7f:
         8d:33:6d:5a:b5:74:08:c9:6b:ba:32:d1:3e:2a:77:99:db:f8:
         b3:92:60:db:0b:7b:9e:50:aa:bd:98:55:de:8d:a8:62:28:24:
         63:3d:0e:fe:a1:cc:60:fd:ac:2f:c9:07:87:55:c1:cf:71:0d:
         9d:3e:2e:00:66:c3:1f:87:89:d9:95:5f:73:8a:fa:bd:3a:44:
         eb:25:74:78:59:57:07:d5:98:ca:82:f7:79:51:9d:33:62:59:
         d5:27:e0:63:d2:2b:19:4d:d8:22:61:09:a1:ea:f4:e0:25:63:
         d1:e6:29:2f:d1:79:13:a4:87:f0:ee:fd:c9:4a:cb:63:93:89:
         21:5d:34:a2:e4:32:79:fa:ad:bb:d7:34:a4:a0:24:32:18:42:
         80:98:0e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:16:14 2025 by rpki-client