Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35322e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          1fjyI9u9qdG97wmv+bgBKHt5BxIUHA65vdCU8J0e+dk=
Subject key identifier:   24:E1:21:2D:BD:70:4F:17:6B:DB:50:9B:0C:B8:1F:53:C2:21:0B:99
Certificate issuer:       /CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Certificate serial:       4E3D1DCD6B652ACF9850DBCF4D07C9F1F1CD8509
Authority key identifier: FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa
Signing time:             Wed 15 Jan 2025 15:46:20 +0000
ROA not before:           Wed 15 Jan 2025 15:41:20 +0000
ROA not after:            Wed 14 Jan 2026 15:46:20 +0000
asID:                     269411
IP address blocks:        45.186.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3d:1d:cd:6b:65:2a:cf:98:50:db:cf:4d:07:c9:f1:f1:cd:85:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
        Validity
            Not Before: Jan 15 15:41:20 2025 GMT
            Not After : Jan 14 15:46:20 2026 GMT
        Subject: CN=24E1212DBD704F176BDB509B0CB81F53C2210B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:05:2e:fc:c2:f5:d0:5a:a7:79:ed:a7:da:
                    8a:47:1f:34:43:e2:ae:76:a4:90:0e:8c:52:07:17:
                    d0:8d:ec:60:21:6a:1c:c8:ee:b9:8b:7b:6e:72:85:
                    48:eb:6e:8a:30:85:8c:04:98:5a:bd:fb:40:3c:87:
                    9b:e5:4a:e9:c0:f6:ee:5e:b8:59:95:f7:47:e0:9b:
                    49:8a:57:17:ea:f6:db:0d:22:f2:a4:bc:36:c1:42:
                    c8:48:2f:c4:a3:36:b0:9d:2b:6c:7a:0d:c2:0b:42:
                    d1:41:87:75:eb:1a:d9:0f:63:e5:1d:44:38:97:27:
                    d5:89:6e:6b:d2:06:32:58:1c:ad:3e:28:13:cb:cf:
                    0a:bb:35:05:d6:24:81:17:6c:0b:49:65:24:b3:1e:
                    03:97:ba:10:9a:9c:78:bd:66:29:b7:cd:7a:45:d3:
                    ed:f4:70:ce:8e:24:d4:17:cf:37:56:05:a1:c8:62:
                    5a:d4:97:6c:a5:b0:90:44:03:a7:80:42:5a:f7:a3:
                    94:08:0e:e6:11:db:2c:e7:ad:62:03:30:2f:1a:e6:
                    18:b7:dc:dd:2c:29:5b:3e:4f:da:45:9f:77:89:65:
                    f7:ab:88:f9:57:04:05:33:f3:4b:95:38:af:a9:df:
                    49:11:87:58:90:cb:63:cb:f9:b9:89:3e:21:0f:7d:
                    b1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E1:21:2D:BD:70:4F:17:6B:DB:50:9B:0C:B8:1F:53:C2:21:0B:99
            X509v3 Authority Key Identifier:
                keyid:FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:3a:54:e5:aa:14:a1:ca:9b:d8:0c:85:10:8d:e5:51:4a:a0:
         66:37:e8:a7:13:30:e8:3f:29:c9:95:e4:e3:8c:b3:9d:60:3e:
         06:dc:7f:e6:d5:38:de:1f:61:28:83:a5:e3:c6:cb:f4:22:06:
         bc:2f:55:61:40:b6:e8:2d:be:a5:9a:41:97:41:15:21:22:5d:
         f9:ad:9e:ad:6b:bd:85:18:9f:b4:1b:5f:2f:07:b6:1d:b5:f9:
         8c:6e:37:f6:97:04:da:06:20:87:fe:89:ce:40:00:a2:dc:e9:
         ca:e1:dc:0d:a8:37:44:78:8f:53:d7:35:14:68:80:7a:02:0f:
         67:30:fe:03:ba:3d:1c:ef:b1:be:55:38:6a:85:e0:ce:07:c9:
         5f:b2:0c:27:a7:9f:90:d5:73:16:b3:6a:c9:75:2d:e4:8f:50:
         6b:41:98:42:06:ae:b5:e0:83:28:55:3a:6f:bc:09:5f:59:be:
         56:6b:54:89:1c:d7:21:e5:a2:33:57:31:33:ec:c7:4f:3a:2a:
         ed:23:ea:e9:6f:28:88:bc:66:4a:cf:46:a3:a9:cc:3a:f1:27:
         4b:b1:b9:93:90:50:87:f7:3d:54:3a:7a:1a:60:fd:75:bf:ae:
         5c:24:71:41:53:ed:c4:f4:b5:75:bf:e1:64:c5:59:e7:51:00:
         fd:e7:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:50 2025 by rpki-client