Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa
File:                     34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa (raw, json)
Hash identifier:          N9grxltOROc+ux6E/qeZmK2RCXheOYXSNWp+YJl41vA=
Subject key identifier:   37:19:D0:3E:D0:2B:1C:4D:CE:53:DD:13:82:96:7F:A6:53:BA:9A:73
Certificate issuer:       /CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
Certificate serial:       3FE1A8F3A912F9300DF79CE8F9BD364619FBA32E
Authority key identifier: 0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa
Signing time:             Thu 06 Mar 2025 13:00:15 +0000
ROA not before:           Thu 06 Mar 2025 12:55:15 +0000
ROA not after:            Thu 05 Mar 2026 13:00:15 +0000
asID:                     269302
IP address blocks:        45.182.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl
                          rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 06:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e1:a8:f3:a9:12:f9:30:0d:f7:9c:e8:f9:bd:36:46:19:fb:a3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
        Validity
            Not Before: Mar  6 12:55:15 2025 GMT
            Not After : Mar  5 13:00:15 2026 GMT
        Subject: CN=3719D03ED02B1C4DCE53DD1382967FA653BA9A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2f:b5:13:55:18:dc:71:82:85:94:cd:3a:ce:
                    ba:e8:3a:d9:3f:73:86:4e:af:69:f2:70:c0:0e:cf:
                    22:28:04:ef:79:1f:74:f0:71:2d:44:75:87:8c:63:
                    cd:fb:c4:a5:7d:31:0c:17:ff:a2:49:47:01:33:8a:
                    a4:c8:0d:48:05:59:f8:aa:f4:f9:b2:f5:db:1d:f0:
                    34:88:be:59:1d:b3:ba:f2:58:19:35:3f:69:f1:2f:
                    2d:3f:07:8c:fe:3a:d2:18:c6:ab:e6:90:54:08:07:
                    e3:a7:e5:79:12:28:1f:21:d1:c6:33:bf:3a:5f:ef:
                    ef:9b:4a:cc:84:c6:4f:11:90:70:db:d3:f4:69:b1:
                    29:64:ef:d0:2c:c0:d4:73:c8:85:6b:e9:d3:a7:8c:
                    6e:54:c0:30:cf:02:b5:b0:6e:19:e0:68:8c:33:f2:
                    8b:26:de:4a:65:7a:0a:5b:4d:87:e5:ff:b9:b1:cc:
                    0f:89:8e:b4:72:46:47:e4:2d:d5:97:19:36:0e:97:
                    9c:fc:05:09:62:36:fb:f8:10:ca:ab:54:3f:df:a0:
                    53:7c:0c:21:94:a9:03:7d:9c:c7:6f:f0:fa:d9:0c:
                    05:ee:d4:a4:c7:32:f0:de:11:21:0d:de:19:45:9f:
                    6c:ef:44:c8:27:c3:f8:17:2f:e6:d7:90:ce:07:1c:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:D0:3E:D0:2B:1C:4D:CE:53:DD:13:82:96:7F:A6:53:BA:9A:73
            X509v3 Authority Key Identifier:
                keyid:0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:59:42:0c:36:d3:8b:e7:fc:93:1e:6f:4f:b4:8d:b7:0e:13:
         d9:68:90:ce:54:4b:76:80:5c:c0:84:b0:e6:c3:97:8f:4d:e6:
         f2:9d:9b:40:49:c5:ef:ae:c0:e2:4d:42:94:40:80:7a:d6:66:
         f0:ea:d8:7a:1a:75:95:59:66:de:ca:d0:08:ea:22:23:74:9d:
         e8:0e:26:b3:cc:81:0e:07:7c:99:52:a5:dd:4d:1a:75:28:42:
         a6:d8:8e:68:12:e2:c8:51:49:ea:a3:3b:68:bf:02:90:29:91:
         d3:f4:97:b5:46:d1:2b:ed:ff:4c:c1:78:c1:9a:81:ba:5b:14:
         8b:1a:16:94:da:22:db:29:e5:2e:30:4f:16:70:71:18:c4:b4:
         49:8a:22:13:cf:af:9e:fb:59:85:cf:6a:d5:81:2d:3d:f6:a8:
         64:c3:1b:a1:8c:13:c2:03:91:42:c6:63:f1:26:dd:0c:48:75:
         19:96:f7:00:3c:34:28:68:92:27:61:21:1e:3a:2d:a3:3e:6e:
         88:e4:7a:25:28:42:f3:7d:29:ab:4f:4f:68:ec:d3:34:77:86:
         78:e7:2e:ef:45:1f:1a:d2:50:6c:4a:42:36:29:82:45:77:ac:
         9d:45:d0:bf:e6:87:90:b5:66:4a:19:c9:5c:4c:06:2e:c6:8a:
         ae:c3:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:28:58 2025 by rpki-client