Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa
File:                     34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa (raw, json)
Hash identifier:          uA1K/FdiF8Z6Ml5Eljz+PA4a2CnpRNZgEwRpHlsG9Gk=
Subject key identifier:   51:9D:93:3D:38:51:AF:1F:12:B0:F2:0D:69:F1:E7:2C:AB:DE:3B:D7
Certificate issuer:       /CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
Certificate serial:       4983E7B5B195931DCAE7FB5073D9A3E96A7BA6F9
Authority key identifier: 9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa
Signing time:             Thu 13 Mar 2025 13:12:16 +0000
ROA not before:           Thu 13 Mar 2025 13:07:16 +0000
ROA not after:            Thu 12 Mar 2026 13:12:16 +0000
asID:                     266933
IP address blocks:        45.225.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.crl
                          rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:83:e7:b5:b1:95:93:1d:ca:e7:fb:50:73:d9:a3:e9:6a:7b:a6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
        Validity
            Not Before: Mar 13 13:07:16 2025 GMT
            Not After : Mar 12 13:12:16 2026 GMT
        Subject: CN=519D933D3851AF1F12B0F20D69F1E72CABDE3BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:14:22:05:c9:dd:60:fd:d3:70:c2:c1:c4:
                    82:26:37:65:4e:19:db:3b:09:15:6e:02:33:a7:bf:
                    a3:1f:e1:e9:6d:2e:1f:bb:74:a6:1d:1a:7e:d8:ab:
                    b1:fc:df:46:e6:c9:37:29:f2:32:0b:b8:c9:c4:d5:
                    54:2e:41:5e:08:58:72:8f:15:e2:d2:99:eb:4c:fc:
                    04:77:ac:3e:7f:49:37:81:19:41:5b:4d:24:0b:22:
                    0f:fa:b2:f4:4b:6a:ec:92:48:28:1b:a0:c4:69:b6:
                    44:50:aa:d8:d1:4e:22:0f:a6:13:c4:12:96:52:5a:
                    c4:30:d5:5b:3d:dd:b2:c8:78:a6:c7:10:ce:da:1b:
                    d5:3c:b1:7e:d0:e4:6e:26:d2:17:f5:dc:b3:e3:31:
                    a5:af:57:00:d3:05:8d:96:95:10:61:81:a3:50:3b:
                    1e:d8:92:cc:c8:f1:06:dd:f2:79:b8:d5:bf:15:8e:
                    db:84:8d:96:1a:be:0f:71:4d:49:63:6b:c9:ce:cf:
                    14:79:06:c0:e6:3f:22:8c:42:d9:57:c3:11:cf:04:
                    31:66:75:e6:2b:03:39:8c:21:48:59:5b:8a:91:28:
                    74:6f:a1:43:2e:0e:11:5a:b4:c0:9c:44:74:cd:9d:
                    bc:4c:ff:ba:3c:d6:e3:15:eb:49:b2:b7:94:60:d2:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9D:93:3D:38:51:AF:1F:12:B0:F2:0D:69:F1:E7:2C:AB:DE:3B:D7
            X509v3 Authority Key Identifier:
                keyid:9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:68:9f:b2:af:18:3c:6f:c4:63:93:93:77:f2:87:43:9f:53:
         0a:4b:6d:fa:bc:da:5a:22:6d:68:40:75:25:fc:4a:7b:2c:0b:
         6a:c5:56:5c:92:c5:0b:9a:95:a1:c7:ba:c3:1e:41:f6:18:2a:
         3b:a6:c3:d4:f7:4d:13:33:38:ba:c6:54:47:ef:ab:4c:e8:12:
         c4:cc:92:ec:0e:17:9d:79:c5:bc:d4:71:48:f4:33:b9:76:b0:
         c8:0f:20:a1:87:36:2e:dd:69:bd:fe:af:eb:4a:db:71:92:da:
         9a:68:3b:2d:99:d4:e0:34:3e:bf:da:af:85:1a:6f:eb:3a:0d:
         b4:a3:50:94:cf:09:ad:6e:bc:b6:75:82:bc:95:50:54:4b:e9:
         42:8b:3d:61:d0:6e:24:3b:3d:93:76:d7:00:27:14:77:6e:cb:
         38:af:24:90:d7:75:30:71:f9:0a:9d:36:70:02:0d:7f:36:fc:
         41:66:03:d0:d5:26:06:b8:c2:c1:01:50:ed:0e:10:de:11:05:
         6f:22:b4:db:58:2c:36:2a:12:f3:45:52:09:d1:c1:e5:ea:fe:
         00:8b:30:a7:42:86:62:d3:e2:3f:bb:0e:81:9d:af:cb:01:2a:
         a2:8f:33:cc:9d:53:dd:78:63:de:5a:b6:d6:b6:8e:6a:99:1d:
         76:ae:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:45 2025 by rpki-client