Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          uIH2mjCVfG7pE20vWSkkLBS63ZJyp6S52kPokhVi1tw=
Subject key identifier:   11:89:49:BD:4A:AF:35:1A:2D:EB:75:2F:2A:76:ED:7C:9B:4C:09:8C
Certificate issuer:       /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
Certificate serial:       15D645FFE49FC2E79FF9661957913E956063E49A
Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa
Signing time:             Sat 01 Feb 2025 21:53:47 +0000
ROA not before:           Sat 01 Feb 2025 21:48:47 +0000
ROA not after:            Sat 31 Jan 2026 21:53:47 +0000
asID:                     267229
IP address blocks:        45.231.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d6:45:ff:e4:9f:c2:e7:9f:f9:66:19:57:91:3e:95:60:63:e4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
        Validity
            Not Before: Feb  1 21:48:47 2025 GMT
            Not After : Jan 31 21:53:47 2026 GMT
        Subject: CN=118949BD4AAF351A2DEB752F2A76ED7C9B4C098C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:fb:70:75:cc:0c:08:bf:a9:9a:ba:b5:f5:
                    c9:47:40:57:ff:85:51:ca:f3:fc:7c:8a:b6:a7:2c:
                    5d:60:31:55:a5:93:1f:0f:9c:ab:3c:70:b8:d7:6d:
                    09:6f:44:bf:ae:d3:d0:69:2f:2a:47:a2:d2:89:a6:
                    32:d3:cd:d9:b2:56:99:6d:fc:7d:86:82:f7:63:57:
                    90:0c:16:a3:c8:f9:90:26:ce:ab:f9:c6:6b:88:2f:
                    35:1a:2c:a7:26:7f:af:9e:4b:be:44:2d:f2:7c:de:
                    de:90:50:6e:ba:ad:7b:6d:08:78:fc:d5:60:8f:55:
                    94:55:b1:a8:45:d8:75:f8:9c:bd:08:e2:5e:7c:59:
                    5f:7c:ed:54:d8:89:42:10:f2:eb:2d:64:13:e3:99:
                    b8:77:50:76:4b:32:fc:8f:50:8f:f9:80:f2:27:73:
                    4b:35:5c:fb:1c:7c:c6:09:a3:2e:dd:01:6a:34:7f:
                    83:40:30:8e:aa:0f:52:48:f5:4c:6e:eb:f1:e5:44:
                    24:48:69:ca:d8:af:f2:c6:c7:08:a5:cd:ea:ea:ea:
                    dd:50:3e:24:2c:d7:ce:d3:af:f7:5e:39:94:77:e2:
                    fa:b2:62:c8:9f:f2:54:75:6f:78:90:ee:d5:15:50:
                    ee:26:02:ca:62:db:a2:97:22:17:87:a9:30:5f:21:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:89:49:BD:4A:AF:35:1A:2D:EB:75:2F:2A:76:ED:7C:9B:4C:09:8C
            X509v3 Authority Key Identifier:
                keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:cc:35:47:9f:fc:00:3e:87:05:db:39:a5:04:09:6a:55:1e:
         57:04:5c:89:f2:d6:40:e5:6c:eb:7e:5d:d4:d9:5a:47:5b:a2:
         38:0b:12:b6:e4:ca:9a:da:26:e5:9a:d4:a3:23:0a:9c:68:e0:
         c1:27:43:9b:dc:58:9c:f0:96:07:6d:73:eb:59:1b:cb:cc:c8:
         eb:18:57:1b:86:88:0b:6c:47:13:8d:f1:6a:ce:76:5d:85:fe:
         dd:dd:10:92:82:0e:ed:20:ef:a4:9a:d7:a5:ca:aa:2e:ef:88:
         a3:c9:49:e0:14:16:78:2c:7f:7b:04:06:6d:ae:7e:1a:24:de:
         25:0d:0b:46:fc:3a:43:15:e1:77:a0:a3:8d:96:b6:ac:59:b4:
         c1:fe:28:54:33:26:ec:b1:d8:6c:27:81:af:2f:9c:ef:ec:00:
         3b:d3:2b:4a:64:0b:05:58:f2:3e:aa:d2:40:42:5b:ea:de:77:
         90:4e:58:13:9e:f9:57:4c:3b:b2:f8:b6:32:8d:c0:3b:9d:a9:
         96:18:b0:8e:2a:9e:60:1d:74:92:3a:ba:81:1c:1b:3a:f0:9e:
         37:49:e9:7b:66:49:4c:2e:40:a6:2d:af:71:02:a2:2b:5b:e7:
         ea:da:ac:49:3f:e3:05:d9:a0:0c:66:0f:74:ab:b5:1b:29:d6:
         1d:d2:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:13 2025 by rpki-client