Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa
File:                     34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          LgCihLjaa6TkI74pcr9VCc3frgxhRfMycC0xhrSeMy8=
Subject key identifier:   32:6E:FA:D2:32:4F:ED:1E:E3:88:FF:DA:B0:AE:56:41:27:79:B0:F9
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       6AF83564F656280C8FC863273555F1783A9ED898
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa
Signing time:             Thu 06 Mar 2025 17:33:28 +0000
ROA not before:           Thu 06 Mar 2025 17:28:28 +0000
ROA not after:            Thu 05 Mar 2026 17:33:28 +0000
asID:                     270417
IP address blocks:        45.225.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:35:64:f6:56:28:0c:8f:c8:63:27:35:55:f1:78:3a:9e:d8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Mar  6 17:28:28 2025 GMT
            Not After : Mar  5 17:33:28 2026 GMT
        Subject: CN=326EFAD2324FED1EE388FFDAB0AE56412779B0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:12:29:88:95:1c:b3:94:40:e4:7c:82:f4:
                    35:55:94:30:11:20:2f:4b:9c:2b:28:0a:af:a3:5b:
                    1c:7a:1b:54:f8:60:33:e2:8f:fb:9f:06:9d:e7:d0:
                    80:df:a7:7b:31:4a:95:b4:29:41:5a:9a:fa:f7:03:
                    b0:30:96:18:a8:81:02:23:85:8a:56:fe:7c:7e:02:
                    f9:29:ae:84:50:a7:f6:81:cf:5c:10:bd:27:cb:ba:
                    d9:fc:c3:44:ab:47:0b:c7:db:12:59:6a:54:f5:b9:
                    5c:c4:d7:a5:e9:dd:5a:d4:b9:79:65:9d:4f:a3:fb:
                    99:30:8d:51:f1:de:c8:30:36:66:93:31:e1:2f:4a:
                    43:97:55:1c:91:d7:3c:ae:e2:b4:c3:10:93:93:69:
                    ed:d6:65:73:48:4b:26:6e:51:57:d8:b6:83:68:8e:
                    c4:7d:05:7f:d8:15:78:a7:74:af:2b:c3:6a:a2:0a:
                    98:a9:c9:d5:fd:40:42:fc:6a:e9:e8:cd:a6:f6:37:
                    bf:9a:18:23:c4:27:43:94:99:db:03:ed:09:ea:2d:
                    e8:41:d9:92:ba:98:bc:16:f4:db:57:63:ee:28:33:
                    98:0e:da:47:90:9e:17:d2:5e:fd:74:6d:06:45:40:
                    66:08:6e:2a:8a:5f:f8:b9:53:ef:6f:b8:d6:91:29:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:FA:D2:32:4F:ED:1E:E3:88:FF:DA:B0:AE:56:41:27:79:B0:F9
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:68:c6:5e:e8:39:77:22:70:7c:a7:86:ea:03:b8:5f:ee:31:
         cd:1d:e8:ac:c3:e1:f5:d5:27:08:5a:82:69:9d:3c:17:db:bf:
         59:76:95:a6:5b:9c:2f:8b:4f:83:5d:78:54:0f:50:66:b8:8c:
         ed:08:4d:e2:97:d0:cd:a6:e6:b9:24:4c:f7:46:27:69:d2:1d:
         2e:5e:35:ff:44:28:3f:88:3d:7e:15:7b:9a:9b:f9:18:69:56:
         d9:55:97:31:0a:eb:2d:0c:cb:45:ed:71:ae:59:05:03:4f:cd:
         5f:fa:68:54:41:42:90:0a:3b:ab:18:84:7e:f3:7d:6c:e0:40:
         bb:8e:b4:61:f3:5d:b0:ad:fe:09:30:fd:f1:e6:2b:8f:6f:a7:
         36:a8:f0:0c:57:e0:ab:81:b7:ae:fe:71:3b:9a:3b:67:63:0d:
         c0:5e:45:2f:6b:1c:a1:25:4b:72:98:37:55:4a:d1:ac:c9:48:
         1d:d5:e1:b4:e1:8a:5c:0a:19:63:06:c8:a1:54:68:5e:b7:94:
         2e:53:d7:cc:e8:c2:e1:37:cc:6c:0e:5f:53:5f:26:25:55:1a:
         5b:e1:01:e1:8b:0b:49:92:6c:18:5d:89:0f:60:13:6f:48:d0:
         26:53:ad:bb:90:37:33:70:45:0e:54:3b:be:3f:e7:ed:35:ae:
         72:30:7c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:40:32 2025 by rpki-client