Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203533343237.roa
File:                     34352e3136352e38302e302f32322d3234203d3e203533343237.roa (raw, json)
Hash identifier:          W6Il1nJqq5qqLa4TPlQ/OzjTUK08KOF0OrC0Ec1PXjE=
Subject key identifier:   FC:92:44:DB:32:36:B1:7F:4A:E0:5E:08:5E:3D:A3:3F:64:62:AA:3A
Certificate issuer:       /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial:       7713220FB2E17A7F9257AD07A5939B2243AEC3DF
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203533343237.roa
Signing time:             Fri 20 Dec 2024 11:26:25 +0000
ROA not before:           Fri 20 Dec 2024 11:21:25 +0000
ROA not after:            Fri 19 Dec 2025 11:26:25 +0000
asID:                     53427
IP address blocks:        45.165.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:13:22:0f:b2:e1:7a:7f:92:57:ad:07:a5:93:9b:22:43:ae:c3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Validity
            Not Before: Dec 20 11:21:25 2024 GMT
            Not After : Dec 19 11:26:25 2025 GMT
        Subject: CN=FC9244DB3236B17F4AE05E085E3DA33F6462AA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:b7:1d:dd:f5:d1:bc:98:b6:5b:24:d8:59:
                    07:39:f8:ff:56:5c:1f:40:e7:d6:f2:33:3f:9b:89:
                    40:0d:33:4b:f6:d2:53:55:3f:53:7c:52:e4:95:b9:
                    70:9f:a6:74:80:d7:8b:8f:b9:d4:1a:e1:ea:20:93:
                    3a:e4:aa:75:67:75:13:7b:4c:e8:95:7c:f0:2e:d2:
                    40:9c:a4:8d:84:cc:c8:f9:ce:c9:81:03:38:54:42:
                    ac:88:4a:e6:f0:a9:04:f2:79:28:ae:cf:12:8c:9b:
                    03:d9:5c:90:a7:0a:15:92:ac:a8:f0:1e:06:9d:49:
                    79:ba:df:a0:cd:da:e2:c0:3f:13:f8:49:8f:19:f3:
                    ae:40:59:6f:4a:4d:98:90:2f:bc:05:6f:6c:09:c3:
                    29:34:f7:5f:ad:77:1f:ea:b5:b5:38:73:ff:44:99:
                    95:dd:88:4c:10:5a:74:d0:cf:02:bb:c8:64:0b:f2:
                    a4:bd:81:1d:91:3c:b4:77:32:17:1b:d4:81:9b:9a:
                    8f:3e:48:01:e7:1c:57:3f:e2:41:96:6c:fe:57:60:
                    40:0a:ac:78:92:ae:c6:14:e7:63:a1:ec:6b:bb:0b:
                    4f:a3:1c:22:7f:58:5a:20:ed:31:6c:52:04:26:ef:
                    8c:cc:07:81:8d:d8:dc:ac:4b:c8:e9:bf:52:14:0a:
                    13:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:92:44:DB:32:36:B1:7F:4A:E0:5E:08:5E:3D:A3:3F:64:62:AA:3A
            X509v3 Authority Key Identifier:
                keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203533343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:51:a6:5d:ab:63:5a:ca:4b:6a:99:87:61:0f:a3:11:54:18:
         18:80:02:91:6c:cc:5b:d5:16:fb:79:78:86:ec:a2:ea:93:62:
         b9:17:bc:7c:01:d4:db:ef:cc:60:9b:53:ee:54:58:ad:24:e6:
         d3:f0:f9:d2:fe:a9:49:5e:16:35:87:15:57:55:fd:3a:e2:f4:
         04:19:e7:6a:cf:a6:70:99:d4:d3:01:38:96:93:e7:0a:27:0c:
         62:0a:ea:65:ee:22:0b:a0:71:fe:6f:f9:99:19:ef:e6:df:bc:
         f4:63:4d:83:dc:08:29:92:40:6c:90:3a:6b:8f:a9:1e:31:20:
         d2:5a:58:e4:ff:4b:80:a5:38:df:3c:a2:3e:57:a0:26:05:8d:
         04:0c:fc:a2:cd:47:dc:6e:9e:51:e6:09:58:41:41:c7:66:39:
         25:3b:6e:7a:0a:82:41:9b:31:82:99:e5:e7:03:42:0a:44:bf:
         24:40:bc:a8:f0:e7:ff:ff:9b:d7:7d:2b:35:f0:b0:a7:44:19:
         b2:77:1d:4d:f9:6f:fe:ed:57:1a:13:ff:13:9f:73:13:1c:0c:
         81:ba:2a:0a:fd:f1:f8:2f:91:77:88:d8:89:5e:5d:49:1d:b2:
         61:4a:ea:9d:fc:90:5e:47:8f:1c:2f:93:21:e7:e3:83:09:0c:
         17:28:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:26 2025 by rpki-client