Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35322e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          dL/4O6VU64Lhewx7mAFNapkKqV/YtmNNQFjd3BPzjXA=
Subject key identifier:   B0:4B:E7:E9:6D:BB:38:8D:E7:2A:1C:E1:D7:87:0A:6A:EF:27:E2:67
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       3A97E4D8F32F69B39B140F85CEF03AB93A67A2AF
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:53 +0000
ROA not before:           Tue 03 Jun 2025 15:56:53 +0000
ROA not after:            Tue 02 Jun 2026 16:01:53 +0000
asID:                     267991
IP address blocks:        45.167.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:97:e4:d8:f3:2f:69:b3:9b:14:0f:85:ce:f0:3a:b9:3a:67:a2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:53 2025 GMT
            Not After : Jun  2 16:01:53 2026 GMT
        Subject: CN=B04BE7E96DBB388DE72A1CE1D7870A6AEF27E267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:2e:31:e9:2f:47:88:46:3f:b4:56:cf:63:
                    58:1a:82:d6:95:3a:45:bc:68:fd:79:6e:d0:22:0d:
                    6c:6e:f3:14:6a:13:e5:00:77:36:28:cb:33:13:86:
                    b5:64:99:43:76:18:16:10:69:93:87:db:db:73:ac:
                    ba:b1:e5:a1:98:ef:85:90:33:f8:27:0f:42:ba:eb:
                    ae:e5:19:d6:bf:91:99:08:5f:c9:3c:8e:4a:fc:73:
                    9e:73:c6:5f:9c:62:95:bf:d2:2c:9f:15:9c:bb:4f:
                    9d:b0:71:99:d4:a3:5a:9f:d7:cc:b5:18:10:40:cb:
                    87:3d:9a:a6:ca:ad:00:41:36:12:a9:08:57:03:01:
                    a8:34:96:7b:59:59:47:d9:ff:d5:92:3d:a7:23:72:
                    82:15:48:94:37:48:d1:5e:e1:d6:67:d1:67:f2:a1:
                    d3:70:0e:b5:cf:8c:37:f2:e6:ef:f6:79:fc:bc:b7:
                    23:3d:bd:5c:a0:37:01:f4:00:50:d3:05:1a:ae:56:
                    e5:cb:bf:33:54:c8:0e:57:d8:92:4c:26:7b:e0:f0:
                    1e:3a:c0:b1:39:cb:80:df:13:0f:cc:f2:26:46:e6:
                    95:9c:4e:60:86:9c:3d:81:60:19:0a:f1:30:7a:c1:
                    83:70:73:23:d2:86:60:7e:48:07:e4:cb:f5:ff:e7:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:E7:E9:6D:BB:38:8D:E7:2A:1C:E1:D7:87:0A:6A:EF:27:E2:67
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:d7:21:7b:26:af:92:9f:d1:69:8f:1e:7b:4a:2c:11:7d:
         07:7c:99:05:10:2f:15:6c:16:a5:b7:77:f8:ff:b9:f5:b5:e7:
         dd:58:8f:2b:73:43:b6:fd:8b:bb:15:46:88:ce:fd:81:65:3a:
         57:60:41:a9:f8:0d:fb:5f:9c:a7:5f:cc:e1:bd:ad:ae:a7:b8:
         bf:b7:17:58:1f:2e:da:32:5a:d5:0d:68:6c:68:b9:8d:b8:7f:
         14:9b:41:b1:98:71:66:e6:f0:52:02:6a:41:26:d3:30:3e:f9:
         a6:9d:cd:7e:ff:3b:06:d4:c9:b3:e2:10:56:5c:77:66:1b:3c:
         30:74:47:ce:46:29:b0:e0:97:26:7e:ce:fa:d3:91:92:3e:0a:
         d1:46:33:16:6d:46:a2:c6:e4:e8:bd:d7:0d:35:4b:8c:23:a0:
         9c:cc:34:e6:46:a4:c0:1a:53:b2:31:72:d0:8f:bb:94:dc:68:
         c8:40:3e:c2:3c:25:18:6d:56:63:0b:6b:49:ec:20:66:2a:89:
         02:f2:b1:8d:37:30:3b:b2:05:2c:8b:22:8c:a0:2f:ac:fb:3d:
         c0:22:b1:84:6e:5d:78:b1:d8:6b:0e:13:e3:97:1e:ce:e5:25:
         2c:83:38:73:47:d5:14:75:60:d0:b2:72:34:07:73:87:22:18:
         fc:00:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:22 2025 by rpki-client