Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa
File:                     34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (raw, json)
Hash identifier:          y7s1GJrpBU/41xawr2NW3Z0qH/tHIDGlpxg27bF5HTQ=
Subject key identifier:   38:6F:1B:05:4C:59:65:55:B8:2E:CD:6A:C5:CC:F1:48:71:C4:79:4D
Certificate issuer:       /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
Certificate serial:       7355C82F1C6F1CBD9309655A24C51E5BD90809EA
Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa
Signing time:             Sat 01 Feb 2025 21:53:47 +0000
ROA not before:           Sat 01 Feb 2025 21:48:47 +0000
ROA not after:            Sat 31 Jan 2026 21:53:47 +0000
asID:                     267229
IP address blocks:        45.231.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:55:c8:2f:1c:6f:1c:bd:93:09:65:5a:24:c5:1e:5b:d9:08:09:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
        Validity
            Not Before: Feb  1 21:48:47 2025 GMT
            Not After : Jan 31 21:53:47 2026 GMT
        Subject: CN=386F1B054C596555B82ECD6AC5CCF14871C4794D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:5e:9c:d6:00:92:35:fb:3e:82:1b:13:70:
                    de:13:b3:6c:e3:3f:a3:e8:37:0c:95:c2:50:45:d7:
                    cd:21:f0:15:7e:06:d3:b9:18:74:93:56:98:6d:64:
                    3c:b2:66:19:56:43:e4:1f:cc:3a:e2:0c:35:70:3c:
                    c3:c3:90:89:65:42:b7:d0:ab:68:98:10:5e:5e:cb:
                    f8:8d:c4:ff:63:16:7b:50:8e:57:4d:a9:b6:eb:d7:
                    86:2c:bf:43:df:66:4e:1f:6b:4c:82:32:6c:c4:1d:
                    e4:23:3d:99:95:0b:92:66:15:a5:af:09:57:53:e8:
                    58:a0:03:8d:48:f1:8e:39:1a:94:db:8e:ad:64:65:
                    9b:f9:92:ee:2e:99:d6:09:a8:da:9d:75:a8:97:e2:
                    60:6d:1f:c8:05:12:df:ea:47:76:33:a1:af:d3:96:
                    ff:34:54:e1:3d:1e:e2:47:ee:fd:64:90:17:b4:e3:
                    11:44:51:77:a4:62:37:83:28:ee:2d:4b:0e:f7:c8:
                    06:72:a8:aa:a1:1d:8a:84:4c:c4:ab:bb:c0:4d:94:
                    c4:cd:c3:85:af:66:4d:be:1f:b7:87:41:09:f1:c1:
                    cc:f9:2b:9b:d3:eb:5d:5c:81:d9:7e:f3:14:3c:1a:
                    5a:af:98:6a:a8:1f:a3:4a:7c:2a:99:ac:3d:ad:f8:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6F:1B:05:4C:59:65:55:B8:2E:CD:6A:C5:CC:F1:48:71:C4:79:4D
            X509v3 Authority Key Identifier:
                keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:7f:d5:b0:b2:51:ce:57:63:d5:ad:2d:18:86:3c:04:cd:
         a4:ed:0c:5b:4c:0d:7c:52:a1:f8:76:38:97:93:50:2e:23:f5:
         04:04:db:2e:01:ec:5f:76:3b:8d:93:d1:56:60:72:b3:6b:9a:
         73:a9:44:26:c7:8e:9c:fa:8d:b8:33:12:b0:1e:8a:ec:1e:1c:
         ab:39:80:ce:5b:72:0c:f8:01:3c:97:03:03:06:db:87:47:2b:
         8d:72:27:3b:84:5b:75:5c:19:64:ea:1f:ea:7c:e5:d7:4d:a4:
         ea:38:e5:4b:c4:eb:e2:3d:0e:7d:6b:dd:cf:bc:42:86:39:39:
         e2:43:82:42:b0:e2:2d:43:9b:1a:9a:b9:3b:c5:a3:43:06:39:
         72:c7:a3:71:3e:14:76:8f:ad:76:3f:de:51:1d:7d:63:64:35:
         f8:af:6f:ee:65:47:81:bb:e8:ec:a3:f7:95:9d:e7:d0:52:53:
         a0:02:03:81:9b:29:16:26:83:3f:ac:b7:27:4f:51:45:95:b5:
         19:4c:01:6a:1e:62:66:b7:4c:c7:0f:51:57:61:53:df:dc:f4:
         f0:06:57:11:0e:c1:8a:e6:58:c1:c5:d9:42:3c:0f:a6:82:02:
         26:48:40:17:88:12:da:cc:6b:fb:c0:8b:2c:17:d1:9c:f2:fe:
         6e:25:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:18 2025 by rpki-client