Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa
File:                     34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (raw, json)
Hash identifier:          RDnMpCGErqrYs9Q6XA1TAHUGJhU3/4KpjGHihSLBOFw=
Subject key identifier:   92:9D:7B:F2:17:8E:9B:57:42:B8:6B:41:DA:6D:F7:59:10:5F:2F:0B
Certificate issuer:       /CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
Certificate serial:       6ED40F4A547DBAB3811292442404D259B8F513BB
Authority key identifier: 3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa
Signing time:             Mon 09 Sep 2024 14:17:08 +0000
ROA not before:           Mon 09 Sep 2024 14:12:08 +0000
ROA not after:            Mon 08 Sep 2025 14:17:08 +0000
asID:                     267056
IP address blocks:        45.226.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d4:0f:4a:54:7d:ba:b3:81:12:92:44:24:04:d2:59:b8:f5:13:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
        Validity
            Not Before: Sep  9 14:12:08 2024 GMT
            Not After : Sep  8 14:17:08 2025 GMT
        Subject: CN=929D7BF2178E9B5742B86B41DA6DF759105F2F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:ec:31:49:18:73:e8:68:88:4e:ed:6f:34:
                    b2:73:11:f6:9b:70:b8:4d:8c:4b:7e:a3:8d:1b:8d:
                    90:9f:40:fc:82:0d:a1:6f:b9:5e:ff:43:45:eb:64:
                    9e:ab:b7:16:d7:ed:e4:f2:f1:4a:0b:5a:06:30:2f:
                    8f:b5:71:e0:2c:ef:bd:92:aa:67:95:5a:15:86:18:
                    5d:23:51:6a:81:5a:c6:9e:04:df:ef:10:a0:3a:5f:
                    99:7a:86:4c:06:d2:f8:dd:3a:53:c7:60:77:9f:f5:
                    0e:17:23:65:77:86:b4:13:c1:f8:58:09:6d:17:65:
                    a5:fa:8a:02:33:c9:bd:2a:d6:ef:97:95:eb:9d:42:
                    a0:59:f2:b8:7b:ce:d4:d5:bd:f0:75:1f:1e:46:93:
                    73:ba:9b:ac:42:7c:4d:99:a3:13:8a:63:3a:ce:40:
                    ea:08:75:cc:8e:f4:e0:b8:41:cf:c1:74:fd:ac:c4:
                    9d:62:bb:71:de:78:7f:73:27:a1:63:9e:db:92:df:
                    60:c6:6c:92:a4:95:05:52:e7:e8:80:20:e3:87:59:
                    04:32:41:95:37:22:ba:f5:6b:83:0a:d9:c9:4a:f3:
                    c0:87:8f:40:15:96:62:f2:c3:48:af:9a:3b:bc:1f:
                    07:ea:cc:b8:e7:28:67:be:ae:27:b1:7f:ca:c7:ea:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:7B:F2:17:8E:9B:57:42:B8:6B:41:DA:6D:F7:59:10:5F:2F:0B
            X509v3 Authority Key Identifier:
                keyid:3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:9f:2e:dc:1c:3a:68:21:99:1c:20:eb:c7:f5:0e:75:6f:
         83:bb:7c:07:e5:1e:2c:49:cf:53:88:7a:b3:72:eb:79:53:24:
         07:eb:97:d2:0e:a2:6a:95:9f:97:df:12:31:36:54:d5:33:64:
         44:24:50:0d:cc:fe:9b:81:39:33:c1:81:25:63:de:07:df:68:
         a6:d6:76:98:57:80:83:bc:23:1e:4a:ae:02:d5:1d:19:58:57:
         00:63:f2:0c:18:d3:88:0b:b5:64:7f:6b:c7:fb:ee:80:8d:bb:
         dd:41:3b:ef:c8:c1:bf:ca:20:9f:cf:97:66:27:6f:8f:28:f8:
         74:13:ce:3f:fd:c1:db:1c:48:4b:06:d1:c0:c6:03:31:49:b3:
         fa:3c:67:e7:a6:dc:9d:2d:05:9a:2a:f3:80:b0:6f:ab:26:08:
         68:29:df:6e:11:0a:f2:1a:f2:39:17:70:fa:ad:e0:5d:2e:52:
         bb:f1:5c:1f:05:2d:ee:d8:f3:1f:e2:bb:ba:8d:1b:79:98:29:
         6c:46:40:8c:49:f0:d1:98:9e:8e:c7:cb:a1:1c:66:c8:d3:7e:
         21:b6:f2:b1:62:1d:8b:72:79:6a:d3:4d:db:1c:25:95:46:45:
         03:0f:90:d1:9d:84:00:ef:f8:ff:ae:a3:7e:fa:4f:bf:ea:5b:
         b0:08:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:23 2025 by rpki-client