Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
File:                     34352e342e35362e302f32322d3234203d3e20323636303338.roa (raw, json)
Hash identifier:          SR8dydi+1iVoW7zBEQ0VcIPAnkjRFRGMnUS8mcxxkkU=
Subject key identifier:   EB:44:B1:32:6A:3E:66:FF:6F:4E:54:2C:35:33:BF:6A:C8:C8:D2:82
Certificate issuer:       /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Certificate serial:       2D7ADBC5C98C4DD49EB80B83A0067330F72C446C
Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
Signing time:             Thu 06 Mar 2025 19:07:56 +0000
ROA not before:           Thu 06 Mar 2025 19:02:56 +0000
ROA not after:            Thu 05 Mar 2026 19:07:56 +0000
asID:                     266038
IP address blocks:        45.4.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
                          rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7a:db:c5:c9:8c:4d:d4:9e:b8:0b:83:a0:06:73:30:f7:2c:44:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
        Validity
            Not Before: Mar  6 19:02:56 2025 GMT
            Not After : Mar  5 19:07:56 2026 GMT
        Subject: CN=EB44B1326A3E66FF6F4E542C3533BF6AC8C8D282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:1d:ba:65:75:cb:60:20:5d:b8:75:31:bc:
                    14:59:f0:1d:5e:08:10:da:92:c5:7d:e7:2a:ca:4f:
                    9c:79:f0:db:28:ec:70:3d:0f:b6:21:b1:8b:4d:14:
                    7d:e0:0c:a3:a5:f7:b6:77:14:5c:d8:15:8d:e5:5c:
                    8d:e7:67:12:eb:c1:b3:1f:c8:a9:11:bf:0a:00:69:
                    76:5e:8b:34:06:9d:41:68:91:70:fc:1b:21:0e:d9:
                    48:29:f6:fa:41:a0:0f:31:c2:02:65:6d:59:c9:e7:
                    db:41:f9:62:e2:a3:ca:ff:98:be:16:f7:7e:4f:25:
                    bf:b6:c4:78:8a:0c:1e:55:43:01:e6:f9:2f:0a:0b:
                    0b:9c:0a:5e:f3:72:a5:8b:ee:da:53:5b:07:25:8d:
                    3c:01:80:31:fe:14:f8:55:bc:79:d4:e7:8b:f3:d2:
                    08:26:38:b1:1e:b3:56:02:b0:8f:89:45:91:dd:d5:
                    e2:84:bc:4d:65:fc:fa:35:43:8b:ef:e3:fc:81:1b:
                    c1:57:ad:4f:0d:5b:6a:a2:79:58:e7:9f:cc:74:fa:
                    17:2a:d9:9b:2e:63:27:aa:32:51:ac:f0:ea:59:ad:
                    fd:11:7c:b7:12:0c:45:98:7a:0a:cb:dd:ce:7e:ee:
                    67:b4:d5:76:31:68:cd:c8:0c:56:73:c0:03:da:1b:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:B1:32:6A:3E:66:FF:6F:4E:54:2C:35:33:BF:6A:C8:C8:D2:82
            X509v3 Authority Key Identifier:
                keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:cf:21:e7:cf:59:d1:49:a8:21:6d:bc:49:44:bf:cd:8f:
         a5:a0:c4:5d:2f:52:32:79:16:1b:48:e1:fa:90:69:85:8f:c0:
         db:a2:81:9e:ab:fe:f3:0b:be:c4:0c:41:fa:cc:3d:89:e5:95:
         42:85:fa:4b:01:64:00:84:f8:b7:77:78:df:b5:d5:67:6b:5d:
         f8:ab:d1:50:b7:e9:bb:d4:f1:57:70:27:1f:47:8b:f8:e6:1a:
         d5:c5:c5:ca:4c:96:7c:ce:fd:4f:b3:8b:c9:c0:73:4a:d4:36:
         ef:bc:69:50:49:29:7b:26:95:de:ce:48:5a:72:43:ed:3f:3f:
         85:c4:42:ef:c4:46:2f:c7:30:40:56:76:01:14:05:34:2e:f4:
         e7:4b:83:b9:ed:49:a3:9f:f8:89:8e:0d:55:86:49:96:8f:6b:
         59:5d:e1:ef:ca:bd:40:8c:64:e9:dc:6a:a6:ae:7a:0d:99:48:
         39:fc:71:61:ac:d7:fd:16:53:ea:79:43:86:cc:1c:a5:bb:48:
         82:d0:14:c0:51:79:68:c5:ef:b3:d2:c3:17:ff:2d:63:18:03:
         18:b0:73:58:ca:95:88:73:0c:77:6e:c4:b1:c1:1c:52:0e:33:
         b4:8a:de:8d:84:45:b2:b6:d0:bf:26:33:39:ce:8b:f1:76:09:
         f0:9b:ef:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:36:54 2025 by rpki-client