Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          8bUbI/KyyQpfn6MeYH3bFY2rgwyxDFDZtCFnCJAH9kA=
Subject key identifier:   A6:C6:EB:83:1D:B6:64:BF:A9:92:AE:45:6D:FC:76:F9:7D:99:8F:1B
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       02B255682474F09CD7680840B132529CE88F0764
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     267334
IP address blocks:        45.233.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b2:55:68:24:74:f0:9c:d7:68:08:40:b1:32:52:9c:e8:8f:07:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=A6C6EB831DB664BFA992AE456DFC76F97D998F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:41:ee:0d:af:89:d4:96:e5:92:4d:c6:da:ac:
                    cc:d1:8d:fb:23:08:fa:73:ad:19:fe:c5:ba:b9:e3:
                    68:28:07:30:9f:9b:5f:95:34:57:8f:f2:a2:e3:8b:
                    18:f9:45:12:ce:79:74:c9:d9:92:7a:1a:bc:d2:29:
                    91:1c:1f:86:e7:bb:cf:e5:0a:22:70:83:7f:1d:7e:
                    a4:cf:45:2a:93:18:ec:7b:e3:5b:cf:1e:a2:98:e3:
                    7d:17:10:69:e6:ff:31:5e:a4:a3:85:bb:6b:1d:7d:
                    1d:46:cf:be:b7:cf:38:28:f1:f0:5b:dd:ff:5a:f9:
                    45:1f:24:64:23:d7:05:04:3f:cc:39:26:45:3b:47:
                    f8:ca:65:ef:d3:ad:11:b5:53:19:e6:8f:53:96:ce:
                    18:db:fa:af:e6:5f:43:a1:70:c5:23:4a:9d:2d:1b:
                    40:47:ce:0d:5f:d9:6b:1f:e9:54:f8:b1:3a:40:9a:
                    6f:e5:ac:a4:5c:af:2c:b3:05:c1:41:1f:1b:71:1b:
                    a4:c2:7b:56:2d:41:3d:47:3c:07:cc:09:71:e3:08:
                    35:8f:e0:d3:da:85:9a:e0:73:59:b9:93:4c:38:6c:
                    ee:6c:bb:d5:aa:7a:e0:77:a6:1a:ef:aa:91:97:1d:
                    6c:73:d1:d5:b0:cd:fe:bb:0e:be:cb:67:9c:f0:24:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:EB:83:1D:B6:64:BF:A9:92:AE:45:6D:FC:76:F9:7D:99:8F:1B
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:35:47:31:83:f1:18:6d:6e:82:28:1e:25:7a:f7:a4:6f:f8:
         bc:ab:93:74:84:d8:fc:40:cb:67:7d:e3:c2:2a:6b:4b:d0:b9:
         ec:2f:36:94:c0:b6:0d:bb:56:d3:7e:68:cb:da:c2:14:c7:b0:
         df:a3:e5:0d:59:9c:62:25:f3:ee:26:b0:60:de:e1:19:cc:87:
         a7:da:53:2d:99:e4:fe:11:5e:9b:26:51:bd:7d:c1:a3:d2:23:
         fc:a7:0a:71:6b:1d:b0:ae:ae:ee:27:b9:e2:3c:20:b0:59:30:
         83:1e:6b:de:20:dc:d9:6b:b4:3e:b5:6e:9a:be:db:95:e8:3c:
         fb:9c:f4:47:93:af:30:15:45:5f:31:6e:d7:0b:38:0d:b3:0c:
         a6:ec:81:ff:6b:e3:ab:a8:af:24:4a:19:39:7d:ea:f3:be:43:
         9b:08:96:3c:13:b0:2b:eb:31:40:78:8f:fc:3d:35:86:dd:77:
         7a:ad:fe:dc:76:51:17:fe:29:16:50:dc:75:e8:45:ce:82:4a:
         90:f0:8a:d1:a1:75:61:d7:84:14:70:da:c1:78:d3:aa:7e:88:
         64:92:c7:8f:50:57:b1:76:6e:93:fe:f7:37:7d:6a:38:5b:4a:
         fd:1a:dd:fa:c5:a2:53:d6:5a:1a:48:09:74:ba:2d:cd:67:c3:
         1d:cd:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:27:52 2025 by rpki-client