Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa
File:                     34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa (raw, json)
Hash identifier:          k8WHvroGzNVDRDKZ/1KYZipIDUsh8phyDXftCUcck54=
Subject key identifier:   43:DA:65:F5:60:58:F3:66:6A:46:D8:EB:DB:51:12:BC:0A:77:9B:37
Certificate issuer:       /CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
Certificate serial:       30B3067703BFEF06E6FD12B50C2B5836C15D81BA
Authority key identifier: 34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa
Signing time:             Thu 06 Mar 2025 01:48:17 +0000
ROA not before:           Thu 06 Mar 2025 01:43:17 +0000
ROA not after:            Thu 05 Mar 2026 01:48:17 +0000
asID:                     268977
IP address blocks:        45.176.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl
                          rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b3:06:77:03:bf:ef:06:e6:fd:12:b5:0c:2b:58:36:c1:5d:81:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
        Validity
            Not Before: Mar  6 01:43:17 2025 GMT
            Not After : Mar  5 01:48:17 2026 GMT
        Subject: CN=43DA65F56058F3666A46D8EBDB5112BC0A779B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:35:92:54:59:78:e3:5b:3a:fe:7c:53:0a:
                    94:ed:8e:76:90:02:c1:a6:22:d5:9f:1f:c4:eb:3b:
                    18:8f:92:de:c9:30:e2:40:20:43:66:4f:13:e6:97:
                    68:b1:f0:9a:2a:aa:f9:d7:2b:6e:3b:08:da:35:29:
                    16:d3:cb:64:82:7c:64:38:25:91:22:58:6a:ae:35:
                    68:8f:51:4b:d1:59:7b:64:1e:0d:14:e8:1a:2d:31:
                    f6:ad:c0:5d:6e:0c:8f:e3:41:95:21:7b:cf:3f:26:
                    0d:e7:b0:81:57:4a:05:ce:8c:f4:92:42:02:87:43:
                    6c:78:15:e9:5c:0b:0e:f3:0e:47:22:43:f2:c8:26:
                    26:4d:a2:be:af:35:dd:bd:1d:29:a7:ad:d5:68:32:
                    55:9f:ca:00:87:50:30:ae:a4:ac:14:2f:07:24:a8:
                    45:dd:12:92:6c:0d:91:3c:aa:ee:53:59:5c:12:b9:
                    07:8a:09:cf:cd:ae:12:5b:bd:04:af:20:46:00:b5:
                    d4:f5:cf:c3:90:50:ad:d0:01:e5:38:ce:91:9a:91:
                    d6:ba:63:ef:8e:ca:3f:6d:bb:4d:ec:ba:e7:e3:2d:
                    5b:83:e5:08:4b:e5:87:34:8e:25:8b:79:82:6c:59:
                    e7:9f:69:17:4a:39:ec:8b:d0:46:91:14:3c:ec:94:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:65:F5:60:58:F3:66:6A:46:D8:EB:DB:51:12:BC:0A:77:9B:37
            X509v3 Authority Key Identifier:
                keyid:34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:b2:92:5a:fa:cd:57:b7:34:9e:6c:eb:86:4c:79:a8:9b:d0:
         61:dc:c0:9a:82:c7:98:3d:97:88:72:3f:2d:24:18:ed:a5:9a:
         c8:fa:66:89:e9:f9:16:55:3e:87:35:72:a3:f9:75:e2:04:3f:
         1d:ab:af:01:34:cd:5a:10:83:a4:61:e4:f8:73:2d:a5:66:7e:
         50:90:06:ba:56:f5:35:54:a0:16:cf:ec:67:a7:40:5b:b9:e5:
         af:11:1a:db:30:ec:be:30:d2:78:ec:f7:30:2a:51:dc:6b:d1:
         30:0e:3e:e0:3f:62:d3:d9:ab:8d:cc:1b:43:3e:63:c9:f4:3c:
         49:55:53:3f:23:61:67:0a:19:23:51:b1:56:57:66:66:15:7e:
         f5:3a:4b:cd:54:d8:fe:a9:44:b1:bd:b2:82:23:68:2c:83:54:
         e6:18:85:17:46:6e:7f:11:ab:b2:79:f1:1e:bd:91:a7:83:e8:
         92:d2:2a:b3:ea:c8:3f:eb:37:40:28:66:8b:5a:2c:fd:a5:74:
         a6:9f:a4:9b:fa:d0:23:6d:d1:d7:cb:63:35:aa:ff:52:7f:3b:
         1c:1c:f0:e2:e7:0a:48:24:fa:c0:6e:9d:5c:5e:92:83:6b:72:
         24:6f:98:c4:9b:72:c6:b9:93:13:eb:8f:42:b0:f8:4d:54:f8:
         d3:a7:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:23:38 2025 by rpki-client