Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35332e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35332e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          fBuHwuqFjOLAOgas54VyS1/ekUT+LjVupqeYa2SK12Q=
Subject key identifier:   C8:63:39:EC:85:EF:88:3F:89:A9:B5:BF:3A:38:A7:DE:0F:04:11:65
Certificate issuer:       /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial:       49FE4ED2600DF9044E918B88FE3FFB5E49D8F4D4
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35332e302f32342d3234203d3e20323637393931.roa
Signing time:             Mon 24 Mar 2025 20:44:04 +0000
ROA not before:           Mon 24 Mar 2025 20:39:04 +0000
ROA not after:            Mon 23 Mar 2026 20:44:04 +0000
asID:                     267991
IP address blocks:        45.167.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fe:4e:d2:60:0d:f9:04:4e:91:8b:88:fe:3f:fb:5e:49:d8:f4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
        Validity
            Not Before: Mar 24 20:39:04 2025 GMT
            Not After : Mar 23 20:44:04 2026 GMT
        Subject: CN=C86339EC85EF883F89A9B5BF3A38A7DE0F041165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:b2:be:79:ee:c9:93:43:5c:28:80:ff:f7:
                    f2:4c:fb:9d:07:e8:11:45:ab:53:b2:a8:ca:6a:8b:
                    61:6c:ee:d6:86:06:9a:18:4f:94:e5:bb:52:50:e8:
                    bd:87:c5:fe:d4:90:c1:16:6e:ee:8e:32:ae:60:73:
                    b0:d5:a6:4b:62:ae:ab:d6:d4:65:19:5e:60:39:f2:
                    b6:fb:6b:58:18:0d:6a:cd:28:7d:02:56:02:87:90:
                    47:01:b9:34:f1:a3:a8:8b:a1:b6:f9:be:e1:94:8d:
                    c0:d0:8a:25:07:57:85:ed:f4:73:4b:d9:9e:16:97:
                    22:15:b3:26:3f:61:c1:65:1b:ae:47:1f:2c:78:ee:
                    a2:39:4d:8d:60:e5:62:42:eb:19:96:70:3a:3d:e6:
                    25:73:59:92:00:82:95:be:d4:49:a6:ee:73:cb:0d:
                    b6:9a:8a:83:f8:61:96:52:c4:af:cd:26:a7:95:4c:
                    9c:d8:ea:d7:3f:fc:87:44:f7:1e:ff:e1:ce:b1:ab:
                    76:cb:72:20:61:4e:57:9a:40:4b:20:41:de:1c:c0:
                    5a:03:7c:ab:87:f3:5a:18:80:cf:46:09:22:82:fb:
                    84:04:f4:4d:f1:79:c6:f9:38:7a:ba:e0:7d:8d:09:
                    cf:1d:42:22:a2:3d:1f:e6:b5:87:35:4b:d2:c4:4c:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:63:39:EC:85:EF:88:3F:89:A9:B5:BF:3A:38:A7:DE:0F:04:11:65
            X509v3 Authority Key Identifier:
                keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35332e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:a8:8b:f3:9f:6e:7c:48:c0:53:70:82:10:1c:c5:2c:81:
         fc:8f:9e:bf:c1:86:a1:f0:58:ab:7b:ce:60:d4:33:c4:07:59:
         c5:97:76:a8:f8:25:02:8f:1a:32:eb:7a:b9:1a:a5:10:a5:db:
         8a:44:1f:8c:50:40:16:10:48:11:3f:88:59:4b:2a:a8:dc:50:
         0b:5e:ee:23:53:cf:1b:a8:ca:b1:b6:3d:ab:87:0e:00:6e:f9:
         e2:73:f1:48:ae:30:d5:2c:73:0a:cf:e0:41:66:a8:01:d9:7b:
         17:a1:84:84:d9:75:d6:c9:b5:29:b7:63:78:3e:70:da:ff:50:
         05:db:4c:76:ca:0e:0c:f3:b4:40:68:b9:06:cb:7c:50:91:1f:
         6b:f5:d4:26:ff:e5:3a:a6:d2:4d:cc:7a:e7:0c:68:c4:01:12:
         c3:d7:0a:2a:f1:d3:53:04:b1:3b:c6:91:6b:f4:ea:b8:79:06:
         34:01:68:e4:c7:b0:e9:65:37:5f:cc:9e:5e:85:11:04:29:ba:
         42:62:37:b5:c7:3a:8f:38:be:a8:95:1d:b6:cb:5b:2f:9b:ae:
         10:71:3d:e2:86:19:dc:0e:50:16:a7:93:e8:ed:4c:34:93:a3:
         81:ad:1d:60:0e:30:57:63:cb:2e:03:31:48:0d:3d:a9:63:60:
         eb:f6:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:28 2025 by rpki-client