Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/34352e3139312e31322e302f32322d3332203d3e20323730323538.roa
File:                     34352e3139312e31322e302f32322d3332203d3e20323730323538.roa (raw, json)
Hash identifier:          Kx1+VS4CE56JzsKMngRhwYURQ5XplGCrGtLmsznwNaU=
Subject key identifier:   D4:AD:D4:FD:6A:A8:34:0D:72:8E:F4:01:37:51:1D:D0:2F:01:E7:CF
Certificate issuer:       /CN=208F84112F1A4B695E56F4EB839321D9C18D523D
Certificate serial:       0A0154334F38AA16C0100A06AE77CA77F09EEE2A
Authority key identifier: 20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/34352e3139312e31322e302f32322d3332203d3e20323730323538.roa
Signing time:             Thu 26 Dec 2024 11:29:11 +0000
ROA not before:           Thu 26 Dec 2024 11:24:11 +0000
ROA not after:            Thu 25 Dec 2025 11:29:11 +0000
asID:                     270258
IP address blocks:        45.191.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl
                          rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:01:54:33:4f:38:aa:16:c0:10:0a:06:ae:77:ca:77:f0:9e:ee:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208F84112F1A4B695E56F4EB839321D9C18D523D
        Validity
            Not Before: Dec 26 11:24:11 2024 GMT
            Not After : Dec 25 11:29:11 2025 GMT
        Subject: CN=D4ADD4FD6AA8340D728EF40137511DD02F01E7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:e7:b4:0a:92:e0:c1:7b:5b:8b:49:12:ca:
                    23:0f:73:12:68:44:7c:7c:8f:43:8b:12:17:bc:dd:
                    23:48:12:53:a7:8f:10:74:cd:29:84:92:d1:f5:ca:
                    8f:77:4f:46:26:10:e7:0a:5e:5f:c2:79:35:4c:ad:
                    c9:13:07:c7:e5:12:02:32:38:ab:a2:1f:4e:bd:d7:
                    43:e3:ca:7f:79:82:b3:2c:3d:25:00:41:2a:05:54:
                    91:ca:47:b0:41:54:ca:e6:8a:5a:46:3e:c0:73:9b:
                    4b:06:99:6f:9c:2f:67:47:9b:e0:77:41:1a:b5:f3:
                    63:aa:6f:37:d1:ed:c8:f9:5e:3f:b8:07:b8:3f:4a:
                    3c:11:00:2f:29:e2:1b:cd:f4:a4:87:e5:18:a1:90:
                    c7:9b:fe:23:c6:14:bb:fa:ce:a2:60:b4:bc:fc:40:
                    65:d2:c0:d5:d4:9f:33:e1:fb:50:ae:52:01:f0:ab:
                    cd:a7:02:2d:bd:c6:33:e3:80:c6:40:94:7b:bd:c8:
                    55:2b:ba:40:2f:fa:7c:cd:c3:71:e3:80:a3:d3:54:
                    ac:74:90:c9:91:72:44:9f:4b:f3:cd:f5:b2:e8:c5:
                    ff:57:cb:d8:9c:58:2f:40:1c:0f:58:be:a2:19:86:
                    b9:56:1d:9d:87:04:45:48:98:2f:3e:35:4b:19:6e:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AD:D4:FD:6A:A8:34:0D:72:8E:F4:01:37:51:1D:D0:2F:01:E7:CF
            X509v3 Authority Key Identifier:
                keyid:20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/34352e3139312e31322e302f32322d3332203d3e20323730323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:ac:ee:43:f7:71:31:7a:3f:00:13:cf:58:73:5a:cd:50:
         1b:a6:da:e8:cd:a5:89:72:e4:b9:be:6d:8e:e4:22:fe:d4:dd:
         bf:a0:b3:1b:f7:af:0c:82:4c:19:ec:58:b4:c0:7a:94:51:65:
         7c:f9:f2:13:bd:da:15:3e:a7:f1:21:be:fc:9a:f9:93:55:df:
         97:e3:a3:b4:dd:75:11:0b:8c:77:4d:77:00:68:25:4e:a0:63:
         0f:9d:91:bd:7b:b0:de:57:4d:a1:c9:ff:0a:7c:94:38:54:57:
         fc:5e:3b:1a:20:7c:49:22:ba:18:29:89:b0:f0:60:5c:91:29:
         21:41:c1:fc:9d:6f:67:2d:78:09:61:f3:57:8d:9a:35:6d:ec:
         35:dc:ae:0c:e7:90:4a:a3:89:75:33:6a:52:0d:35:d0:85:ca:
         da:81:28:a8:52:c2:73:dd:fa:06:3d:5d:34:9d:f5:7f:cc:30:
         56:09:b7:42:27:c4:fc:49:f0:63:20:73:f4:f3:66:01:59:11:
         26:40:ed:e8:bc:4a:c3:2d:d5:57:ac:50:28:8e:57:67:a9:bf:
         d5:b0:a3:8b:4a:83:87:a8:6d:23:ed:ee:73:b7:c3:34:3a:ae:
         2e:24:7e:b1:c7:db:58:64:4a:7a:64:dc:31:a5:8e:55:3a:aa:
         f9:3c:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:18 2025 by rpki-client