Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa
File:                     34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa (raw, json)
Hash identifier:          5kbGQmtMSUXnQ85UisUjiY9kbAz/gT1NL86pPgSn2QI=
Subject key identifier:   84:88:AB:72:5A:E9:68:05:D1:73:5C:2F:64:A4:A0:B3:60:D2:01:03
Certificate issuer:       /CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
Certificate serial:       0C9E478748FFABA1A93D8B77A0103BBBB71CE460
Authority key identifier: 3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa
Signing time:             Thu 12 Dec 2024 00:38:43 +0000
ROA not before:           Thu 12 Dec 2024 00:33:43 +0000
ROA not after:            Thu 11 Dec 2025 00:38:43 +0000
asID:                     267056
IP address blocks:        45.160.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9e:47:87:48:ff:ab:a1:a9:3d:8b:77:a0:10:3b:bb:b7:1c:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
        Validity
            Not Before: Dec 12 00:33:43 2024 GMT
            Not After : Dec 11 00:38:43 2025 GMT
        Subject: CN=8488AB725AE96805D1735C2F64A4A0B360D20103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:25:62:e7:23:40:26:44:02:0e:a1:da:d0:
                    26:b7:74:d1:c5:9a:80:ba:30:9e:05:09:c0:43:d4:
                    a5:41:8f:53:f3:90:23:be:04:de:93:ab:03:7e:07:
                    3f:96:d4:fc:22:3c:2e:50:93:ce:ed:df:2d:14:de:
                    5c:a9:59:ab:16:86:57:b9:5f:93:f7:d2:a6:70:35:
                    13:1d:73:3e:e4:69:41:ef:df:52:73:6e:5e:43:39:
                    d8:d7:f5:f9:10:e7:56:92:2a:1a:46:6b:08:4c:c9:
                    f2:45:64:f0:50:54:7b:51:fe:eb:04:52:5a:71:49:
                    e7:65:28:e5:c1:f2:e7:9b:52:28:96:c1:57:f8:eb:
                    7b:33:5c:c4:81:9c:23:c7:22:8f:3e:4a:05:c1:d0:
                    f5:60:5d:38:ad:5a:f8:87:67:aa:aa:98:ee:70:c4:
                    b0:04:d6:1c:5c:32:cc:44:61:87:f5:b2:d5:98:54:
                    5c:67:9a:b2:5e:db:79:94:fd:ac:e5:0e:91:8f:0a:
                    d3:03:a0:e4:91:38:d1:34:92:b1:e0:84:6b:9c:10:
                    46:f1:54:d9:03:83:b8:55:32:cd:d3:30:48:cb:d8:
                    fb:fe:bd:88:a9:e5:49:71:a2:35:39:1b:9a:c0:b8:
                    1c:fe:c8:47:73:27:84:13:2a:00:e8:f9:48:29:5c:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:88:AB:72:5A:E9:68:05:D1:73:5C:2F:64:A4:A0:B3:60:D2:01:03
            X509v3 Authority Key Identifier:
                keyid:3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:2a:60:58:fb:b6:ec:9d:9e:37:2c:41:30:42:df:d6:4f:f1:
         8b:a4:bb:4e:4b:7b:26:a5:ed:fa:aa:e6:9b:d9:45:28:b7:b7:
         a6:d6:82:46:64:3e:2a:74:b4:aa:70:a3:56:64:3a:7d:08:6f:
         58:bc:f8:9f:5d:d8:44:b7:93:1a:19:7f:32:40:e1:5a:24:74:
         51:77:cc:ab:70:b6:44:43:11:63:95:d4:af:ef:4f:c6:5b:f1:
         31:02:96:ed:a3:ff:7c:4c:90:c2:85:8d:ad:01:9a:62:99:37:
         b2:43:64:0e:65:ed:76:78:8f:68:3a:9e:6a:3d:21:39:42:04:
         b5:cc:61:81:37:e5:d3:bf:d1:2e:2f:3b:02:5f:6b:9f:a3:fa:
         e1:b2:be:f2:54:a2:b1:f9:b3:b9:46:1b:f9:5b:ce:9a:3a:a3:
         6b:1b:53:79:7d:43:37:43:a6:31:37:a6:1f:a3:52:4f:93:97:
         46:f2:c4:04:86:32:63:9c:ed:a2:25:76:ce:89:7c:27:50:b6:
         cd:cb:85:a7:64:b1:c1:00:3c:43:53:79:79:41:c9:4c:f4:fb:
         c7:a5:71:43:d7:75:1d:a6:87:5f:03:a0:55:d3:80:b7:d6:94:
         54:2e:05:40:84:61:ee:68:99:58:88:cf:e6:3f:f8:75:17:c1:
         9d:3a:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:54:04 2025 by rpki-client