Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230302e302f32332d3233203d3e20323637303732.roa
File:                     34352e3232352e3230302e302f32332d3233203d3e20323637303732.roa (raw, json)
Hash identifier:          +DKx98nm0hqTCWpTVcXxcr80ezL+pWi7mNJQCNZpx/Q=
Subject key identifier:   DA:4E:E6:E9:A7:1F:A7:F6:75:FB:DF:63:1D:FA:1A:A0:4D:5E:39:18
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       4AAD15A456F0A0A8E4C3EBE5EA9ABDD2B89010C4
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230302e302f32332d3233203d3e20323637303732.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     267072
IP address blocks:        45.225.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ad:15:a4:56:f0:a0:a8:e4:c3:eb:e5:ea:9a:bd:d2:b8:90:10:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:15:55:46:c6:73:1d:52:87:1f:78:83:e1:
                    df:0f:91:31:51:93:ad:f7:e0:88:27:d9:42:a3:e5:
                    f8:78:52:a6:14:06:b5:ab:0e:96:8c:82:d1:f2:f9:
                    d4:cf:d6:3a:a2:f2:18:2e:91:de:7a:fb:34:5b:d9:
                    c8:bc:fa:18:6a:34:e7:94:bb:9f:65:4b:1d:26:f7:
                    0d:09:b4:d8:eb:29:a7:6f:5f:5d:6e:0d:19:db:4a:
                    29:34:9a:b5:5c:74:40:eb:85:2a:0d:26:0d:98:47:
                    b9:81:9f:aa:8e:79:e6:25:a6:9f:a7:4f:1d:eb:46:
                    c6:cb:82:1c:de:15:af:2d:5d:c3:07:92:44:af:98:
                    40:01:d0:d3:a7:8d:60:0a:5c:bd:62:5c:b6:1b:05:
                    69:43:20:b0:55:f8:cf:57:66:ac:0d:73:bc:0a:3b:
                    8e:0f:06:18:17:76:16:73:31:8a:87:16:ff:df:c7:
                    d8:2e:62:ae:2e:e4:e0:fc:85:2b:7c:9c:b8:d8:0f:
                    6c:d0:2f:9e:5b:3b:1d:f8:d9:cc:6a:d1:eb:44:bd:
                    81:1b:15:55:18:68:9c:0d:c6:40:14:33:b3:fd:76:
                    d5:d4:c8:39:55:cf:d5:76:97:07:93:7d:33:b9:a4:
                    6e:f5:da:af:45:05:4f:74:1e:88:dc:5d:6e:3c:df:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4E:E6:E9:A7:1F:A7:F6:75:FB:DF:63:1D:FA:1A:A0:4D:5E:39:18
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230302e302f32332d3233203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:2a:95:b7:99:3c:32:99:e0:86:cd:f0:21:d4:0c:50:d2:
         fe:36:86:dd:bf:55:f0:d8:cd:11:16:89:1b:b1:59:ce:12:0b:
         8c:02:cf:bb:85:4f:ce:02:f0:6f:41:41:db:98:20:5e:83:75:
         3a:44:02:1a:52:63:c5:7f:24:0a:3d:29:da:bd:30:34:8a:f4:
         58:5f:55:d7:6a:19:7b:70:da:52:f1:ef:d9:d3:37:97:ae:64:
         f7:df:e8:a0:e4:5f:8e:56:17:91:99:1f:08:ac:09:cb:94:69:
         a5:2e:63:c0:91:a9:ee:c5:81:27:47:75:bb:e9:03:1b:fb:d6:
         d6:63:5d:4c:14:0b:7b:99:e6:06:4a:4e:de:58:3a:e9:16:c5:
         07:da:31:3a:7b:67:f3:74:eb:e3:24:7b:ab:15:c4:54:39:b2:
         11:9b:0f:92:08:f7:5a:29:fa:27:69:9b:e1:09:66:14:9c:f8:
         e0:81:a9:ad:b4:c8:95:39:59:33:2f:e1:fd:df:04:48:e4:28:
         99:19:83:5d:c3:fe:a0:a1:f6:45:3e:22:b5:ca:b8:0d:16:00:
         44:f0:b2:bb:d9:b7:c9:9c:ab:75:61:b6:6d:47:7e:48:d9:40:
         b2:12:ef:b2:a8:79:bd:21:d0:15:90:a9:92:97:83:22:63:30:
         4b:7c:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:47 2025 by rpki-client