Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34332e302f32342d3234203d3e20323636353134.roa
File:                     34352e3138362e34332e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          nu92arL1UvxWwhlGOHBjIzZ1dAYn+y63CV6op1pbIio=
Subject key identifier:   19:09:BF:EC:72:B9:E4:3B:B9:64:3E:06:1F:61:9A:D5:DC:6B:4F:0C
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       77EFADB2BFE81B1FFEC849B6BACEAB6DBC4CCBB7
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34332e302f32342d3234203d3e20323636353134.roa
Signing time:             Mon 24 Mar 2025 12:57:18 +0000
ROA not before:           Mon 24 Mar 2025 12:52:18 +0000
ROA not after:            Mon 23 Mar 2026 12:57:18 +0000
asID:                     266514
IP address blocks:        45.186.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ef:ad:b2:bf:e8:1b:1f:fe:c8:49:b6:ba:ce:ab:6d:bc:4c:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Mar 24 12:52:18 2025 GMT
            Not After : Mar 23 12:57:18 2026 GMT
        Subject: CN=1909BFEC72B9E43BB9643E061F619AD5DC6B4F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:0b:a0:b9:08:d7:48:70:08:95:b6:e8:49:
                    d8:86:7f:13:74:42:99:4f:07:54:b9:31:e0:f3:ba:
                    55:ff:6f:22:7c:cc:c1:ff:e8:ec:dd:8c:df:35:a7:
                    37:62:27:32:fa:49:68:48:8f:30:ff:a0:60:79:aa:
                    db:76:16:0a:8e:c6:cc:09:09:6a:91:5a:6c:c8:1f:
                    25:32:fb:c8:fb:46:97:fa:84:51:82:ab:05:e0:66:
                    6d:12:87:1b:e7:e9:da:0d:7b:1f:57:17:c9:3e:92:
                    50:2e:b2:f3:9d:f7:4f:b9:ff:46:18:44:b2:f6:57:
                    68:3a:6b:23:30:73:03:a0:38:d1:44:6b:0b:5f:d9:
                    18:9a:ea:ac:d5:4f:ee:90:88:10:61:09:7c:9a:e9:
                    f7:0a:3b:84:33:72:8a:e2:dc:5e:59:ab:f3:09:4c:
                    c7:ac:d7:27:c6:0b:f0:0e:ef:e1:4e:0b:4a:af:13:
                    d7:aa:9f:91:f3:86:7b:00:31:06:9e:7a:61:7f:b6:
                    40:74:78:1d:78:5a:08:f2:45:09:4c:a8:0d:47:d6:
                    26:90:d3:7d:3a:f4:cd:d7:87:2d:59:cc:da:9b:27:
                    c6:5e:41:ad:ec:8f:e3:18:e8:6a:47:42:1b:e7:8a:
                    9e:45:41:50:3f:04:80:b9:0d:90:49:a4:9f:2a:63:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:BF:EC:72:B9:E4:3B:B9:64:3E:06:1F:61:9A:D5:DC:6B:4F:0C
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34332e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:64:84:41:0c:a2:13:47:a5:b2:78:7c:8f:a4:20:21:90:b1:
         97:2e:7e:9b:e6:f5:fa:fd:a2:2d:4e:3f:0c:c4:dd:aa:aa:9f:
         43:b4:8a:47:86:75:7c:d6:6f:41:33:b2:d6:05:9c:13:49:ab:
         78:c5:6a:9b:24:6d:62:a7:c9:a8:06:1f:99:d6:bf:c5:c5:79:
         5b:ae:33:79:0f:0a:4b:05:d5:f6:ce:89:04:30:ea:81:a2:f1:
         6a:6f:de:9a:57:1e:63:0c:32:34:dd:30:69:4a:75:23:3a:25:
         49:e4:1b:63:e1:73:3a:12:68:a2:b7:eb:af:47:52:fe:f5:b0:
         3e:43:01:2e:fd:99:41:6f:36:43:48:b4:83:af:16:68:63:bd:
         99:7c:11:c8:d9:0e:75:6e:b7:8f:9f:84:05:e4:fe:2c:d8:5f:
         5c:f9:9d:0d:96:3a:60:99:d5:54:c0:c6:5b:32:f7:71:46:97:
         10:88:54:c5:ba:bd:88:f8:da:13:18:62:fd:75:de:b0:93:41:
         17:66:06:d0:f0:9f:6e:97:e8:a9:d6:a7:9a:72:f1:db:62:8b:
         ba:e3:ae:27:9c:79:8f:41:d0:fc:49:6c:37:22:5b:b7:56:78:
         7a:9a:7f:19:aa:ec:2d:74:70:9e:92:55:aa:55:cf:c2:69:6a:
         5f:32:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:03:51 2025 by rpki-client