Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa (raw, json)
Hash identifier:          7IVEz0ZI9Y42RErODdhYZWmBkuuOcxQhMXYN8lqN+iU=
Subject key identifier:   D4:8D:64:3B:1F:5C:19:AB:AA:41:F8:1C:36:AF:EE:E7:4B:75:73:5B
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       61FABE8E27D0338DEB9D4AB65D00CCFCEE8523D5
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267334
IP address blocks:        45.233.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:be:8e:27:d0:33:8d:eb:9d:4a:b6:5d:00:cc:fc:ee:85:23:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=D48D643B1F5C19ABAA41F81C36AFEEE74B75735B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:0c:cb:85:0d:d5:ea:c6:ab:dc:f0:e7:ae:
                    6e:f6:55:aa:1a:66:e9:ff:f6:df:0d:e4:b3:8b:06:
                    b2:09:74:e0:17:be:3b:77:11:92:47:af:31:c4:b3:
                    c5:a7:c7:7a:e0:6d:57:c6:cd:c3:ec:91:9b:4e:46:
                    a5:f4:d3:62:ce:ee:b8:17:2d:53:15:fe:ba:89:86:
                    8d:1e:9d:7c:99:6d:71:3d:5a:b3:2e:f8:c4:a6:1c:
                    26:af:f4:d9:38:cf:71:67:08:29:39:7d:21:50:40:
                    b5:f1:88:fc:5e:34:25:e5:4a:af:e8:eb:eb:cc:dc:
                    63:1a:2e:9c:e8:4e:26:23:87:67:10:6a:d6:a9:25:
                    17:94:0b:c6:e1:0a:40:47:ef:57:d6:6d:80:58:45:
                    eb:c3:4f:97:e5:93:4e:00:c2:bd:5d:bb:6b:d7:5e:
                    c8:6a:5f:5b:f7:d0:f1:9a:33:00:7e:ca:89:86:cd:
                    6c:b1:ac:35:ad:60:a9:8d:1a:c2:e3:2d:73:a5:a1:
                    a7:8e:bc:1a:8c:ec:a4:21:a8:10:29:b4:0b:99:47:
                    72:e0:1f:b6:db:05:e2:15:44:11:8c:c5:36:fa:15:
                    98:9c:b9:eb:59:eb:5a:b9:70:22:8a:6e:65:d1:c5:
                    e5:52:fc:83:2e:c0:34:00:ac:74:82:c6:2c:a7:b8:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8D:64:3B:1F:5C:19:AB:AA:41:F8:1C:36:AF:EE:E7:4B:75:73:5B
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:bc:cd:f7:23:eb:35:0c:f1:93:69:4b:3c:75:01:d6:a2:
         d9:da:d2:c2:6c:3f:f1:39:97:96:6d:81:20:e9:d0:59:1a:8d:
         b2:4d:5d:76:7e:c1:b3:07:98:5a:91:81:fe:94:6d:16:c9:6b:
         ba:ae:c9:a0:4e:cf:c6:f6:dc:e6:ef:6f:a0:cb:0a:51:18:77:
         af:d8:1f:65:1e:d2:24:4f:18:1f:9c:a4:1a:23:d3:1f:f8:80:
         07:f9:ce:ab:3e:96:8a:ec:f0:02:28:b3:44:e3:af:2a:ca:ec:
         5f:50:f4:52:61:3f:8e:7d:c6:d2:8b:f8:f2:af:52:b6:52:6f:
         da:5d:85:a2:31:d6:60:a7:54:ac:ed:8d:18:96:23:9c:20:eb:
         da:34:9b:6d:df:8f:61:0e:7a:f8:8d:ee:34:ee:21:25:9f:44:
         2f:a0:15:c5:16:0c:1d:1a:c8:d3:5e:1c:13:c2:43:4b:7b:5d:
         31:12:31:99:51:06:1a:f0:0a:fa:6a:46:51:96:26:de:2b:36:
         f5:ed:3a:90:ad:ed:43:9b:e0:dd:f1:e8:85:7f:14:e9:bd:51:
         40:d2:d0:71:b5:78:00:9b:fb:b4:f3:41:13:27:cf:76:76:d7:
         1e:27:53:98:d7:6c:e3:f2:6b:a7:03:fc:9a:13:a7:99:3b:83:
         18:64:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:25:10 2025 by rpki-client