Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35342e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          djVEgew/8xsRlCc3vQ7eGGCSjki2zavEDj335fo6XvI=
Subject key identifier:   C3:46:66:29:57:52:1D:F0:9A:F7:8A:0E:79:26:76:9F:7F:ED:CB:B2
Certificate issuer:       /CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Certificate serial:       6EF110EBADC0DE07E69480B6A26E2133C0CF2008
Authority key identifier: FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
Signing time:             Wed 15 Jan 2025 15:46:21 +0000
ROA not before:           Wed 15 Jan 2025 15:41:21 +0000
ROA not after:            Wed 14 Jan 2026 15:46:21 +0000
asID:                     269411
IP address blocks:        45.186.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 18:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f1:10:eb:ad:c0:de:07:e6:94:80:b6:a2:6e:21:33:c0:cf:20:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
        Validity
            Not Before: Jan 15 15:41:21 2025 GMT
            Not After : Jan 14 15:46:21 2026 GMT
        Subject: CN=C346662957521DF09AF78A0E7926769F7FEDCBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:85:c9:34:3c:df:33:cb:c8:f6:26:01:ce:
                    de:4d:a3:42:07:c8:2b:a2:db:8f:7b:c5:de:ad:5b:
                    d9:9d:48:ef:eb:c2:ba:3b:e1:f2:5e:f6:54:a1:53:
                    62:e1:09:21:09:d3:0f:87:a0:09:2d:d5:73:44:0c:
                    c4:8c:1d:0d:e6:63:3d:6a:71:2a:8a:74:dc:bc:5b:
                    ab:9a:ea:45:ec:b7:23:e1:86:9e:58:12:83:93:d0:
                    ea:db:73:aa:be:88:69:af:dc:87:a0:93:f8:e0:10:
                    55:69:be:d6:fd:ce:d7:9b:13:a4:cc:8a:f1:53:05:
                    13:18:fb:f7:05:a3:dd:c3:b1:49:4c:ad:85:c3:18:
                    2e:1c:b6:ff:c2:44:ee:50:a8:32:49:7d:33:65:de:
                    24:73:0c:ae:09:f9:1c:bd:8e:15:83:4b:7d:46:12:
                    41:7b:ca:8a:a9:91:73:7b:0c:88:a2:25:42:5e:67:
                    eb:3f:a1:21:af:61:e3:0b:25:68:60:e8:bb:68:69:
                    c2:42:21:61:23:69:01:da:43:b0:6a:88:9c:33:10:
                    e1:71:44:86:23:e4:5b:9a:c0:23:0b:43:e1:8d:f2:
                    f9:b7:5d:41:85:22:f5:73:65:e8:96:d8:70:e2:06:
                    77:b1:5d:c3:58:5a:95:5e:aa:62:19:4f:12:3a:79:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:46:66:29:57:52:1D:F0:9A:F7:8A:0E:79:26:76:9F:7F:ED:CB:B2
            X509v3 Authority Key Identifier:
                keyid:FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:2b:91:15:17:d4:ff:c6:35:19:04:35:3b:27:d6:cd:64:25:
         99:f7:71:ed:19:9f:9d:aa:3b:96:13:a0:95:19:48:11:6e:44:
         d9:26:ff:6c:ae:74:bb:4e:51:29:97:12:f8:82:72:85:6a:f3:
         4b:17:24:d3:7a:50:8c:0c:58:ca:f1:65:9f:55:24:a9:06:61:
         56:2c:d7:ea:f8:09:b1:bc:f7:fa:e0:ca:c5:bb:4e:6e:c3:0c:
         22:28:98:43:85:44:9c:ba:16:d6:ff:79:c7:68:77:1d:5e:f2:
         3d:8c:97:97:64:b8:18:c2:76:cf:bd:ac:4b:2b:26:fb:6b:9f:
         e8:91:66:cb:3f:6b:73:94:40:cc:5b:f5:9b:92:8c:54:16:73:
         6a:4e:8d:df:57:b8:a8:f9:36:bb:01:74:7c:cd:71:3e:56:a0:
         31:20:33:4f:e0:98:be:5c:1b:64:3d:dc:e1:20:dd:55:b9:b1:
         81:7d:0c:e0:56:b9:ed:5d:ce:d4:9a:4d:d8:ae:60:b5:8b:93:
         69:eb:93:dd:fd:1e:c4:3c:ec:6f:6f:51:53:f6:bd:8f:93:6a:
         ff:d5:ee:87:0c:73:20:10:3c:33:ae:52:d6:56:ed:14:8e:b3:
         cc:ff:d2:cc:d7:66:e3:3a:8d:b5:af:db:23:e5:17:d8:9d:86:
         9d:ad:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:43:01 2025 by rpki-client