Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e34382e302f32342d3234203d3e20323638353239.roa
File:                     34352e3136322e34382e302f32342d3234203d3e20323638353239.roa (raw, json)
Hash identifier:          eyngkNuVxIP6bQ12NWStu3AxE81NgcqYmUv4CwzkAYw=
Subject key identifier:   9F:78:95:90:EB:AB:94:46:C9:B0:7C:1C:F7:98:7D:F9:49:86:C1:59
Certificate issuer:       /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Certificate serial:       0364A2AC832EA55D7533D78D75A803E0E27B97D3
Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e34382e302f32342d3234203d3e20323638353239.roa
Signing time:             Tue 04 Feb 2025 13:36:00 +0000
ROA not before:           Tue 04 Feb 2025 13:31:00 +0000
ROA not after:            Tue 03 Feb 2026 13:36:00 +0000
asID:                     268529
IP address blocks:        45.162.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
                          rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:64:a2:ac:83:2e:a5:5d:75:33:d7:8d:75:a8:03:e0:e2:7b:97:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
        Validity
            Not Before: Feb  4 13:31:00 2025 GMT
            Not After : Feb  3 13:36:00 2026 GMT
        Subject: CN=9F789590EBAB9446C9B07C1CF7987DF94986C159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:84:c1:8b:25:e0:9e:f1:d7:f6:f9:39:6e:
                    db:8e:cb:33:a9:b4:01:33:2d:12:fa:9a:56:6e:3d:
                    92:e0:49:3e:6a:f1:88:22:ee:a8:a6:88:fd:27:06:
                    36:38:2a:10:80:8f:2d:84:78:a6:42:c1:08:93:5f:
                    de:ab:a7:35:9a:94:1b:10:75:95:a4:0f:16:e1:2b:
                    c9:b1:83:bd:9c:15:24:47:2e:55:9b:ac:ab:79:97:
                    f2:65:ea:60:73:a4:e1:9d:ad:bf:c0:46:7e:44:f8:
                    36:e0:4f:2a:28:f0:dc:fe:c2:76:46:f8:cc:63:4b:
                    1b:bc:5e:52:f4:69:28:5d:b2:f8:d4:c7:bd:42:0e:
                    c3:56:ed:27:57:22:3d:9d:24:d4:a5:60:de:e6:6b:
                    1a:d8:e4:6b:d9:08:d2:09:9e:0b:fb:4e:b7:26:c9:
                    83:63:c2:c7:6e:d0:a3:37:e0:4a:99:ba:45:97:68:
                    b2:f1:4b:8e:8b:4e:0c:38:eb:0c:cf:91:a6:cc:8a:
                    a0:73:f5:c8:75:89:c7:18:33:b1:a8:1d:69:8e:34:
                    1a:05:44:40:5b:a8:3d:e9:43:8b:37:53:6e:04:86:
                    60:e7:41:b7:ac:40:a7:d7:8c:0a:b2:92:71:2b:45:
                    8c:14:6f:b6:0d:55:c5:0e:a4:8d:00:81:10:8f:75:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:78:95:90:EB:AB:94:46:C9:B0:7C:1C:F7:98:7D:F9:49:86:C1:59
            X509v3 Authority Key Identifier:
                keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e34382e302f32342d3234203d3e20323638353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:6b:7c:5e:84:9c:94:83:d7:ec:dc:9a:50:84:6a:95:85:
         3b:c1:35:57:d2:f9:f8:9e:01:26:e2:94:4a:c1:da:93:d3:d8:
         da:bf:8f:8b:b0:4a:49:b9:fe:69:59:e3:7c:c6:c4:46:fc:ce:
         b1:ee:ec:4e:57:f9:d5:25:ee:de:77:21:9f:8b:d7:1b:d1:d2:
         61:5b:8c:35:f3:f1:a1:16:3b:62:33:a7:15:0b:6b:c0:cf:24:
         55:fe:70:15:93:e2:67:b2:1a:69:50:f1:5c:2f:fa:86:f2:e4:
         27:34:fa:53:0d:26:8e:8a:fd:90:ce:28:a8:59:ab:ac:44:8d:
         d2:a5:da:51:85:04:82:d2:65:a6:68:1f:14:cb:86:f3:47:fd:
         77:58:c0:cb:40:ea:95:f2:9c:27:03:a4:92:65:5f:a0:dc:a0:
         7b:43:f7:10:f5:c4:ad:ef:87:79:0d:ba:68:ee:48:34:99:ef:
         f8:ee:f8:01:02:ba:2a:11:fc:03:90:03:e7:a0:c1:6f:09:8c:
         93:37:5a:a8:3a:f4:7a:3a:20:39:70:52:a8:a3:f7:6e:84:78:
         6a:41:82:73:a5:eb:eb:0f:c1:db:37:db:5c:af:25:1c:32:a0:
         d6:77:0d:00:da:65:fb:ad:d7:4b:6d:44:8c:e1:8b:af:c1:11:
         2f:4d:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:50:30 2025 by rpki-client