Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa
File:                     34352e3233302e33302e302f32332d3233203d3e20323637313435.roa (raw, json)
Hash identifier:          8mq7LAyV4zpphQCT6aJXBf9deHUkCKF3FjC0r+TIX70=
Subject key identifier:   DE:B2:AF:90:80:32:28:84:A0:C5:18:0F:5E:18:08:A0:A2:15:13:5A
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       01832B86C67E19AFEBA2D5A48B7F07D075BA0426
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa
Signing time:             Thu 06 Mar 2025 03:03:25 +0000
ROA not before:           Thu 06 Mar 2025 02:58:25 +0000
ROA not after:            Thu 05 Mar 2026 03:03:25 +0000
asID:                     267145
IP address blocks:        45.230.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 02:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:2b:86:c6:7e:19:af:eb:a2:d5:a4:8b:7f:07:d0:75:ba:04:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: Mar  6 02:58:25 2025 GMT
            Not After : Mar  5 03:03:25 2026 GMT
        Subject: CN=DEB2AF9080322884A0C5180F5E1808A0A215135A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:da:09:21:da:6f:1d:a9:fc:c9:38:e0:c8:
                    55:a8:ba:c8:f1:ab:63:44:c2:3f:4d:71:61:4f:1f:
                    de:ed:71:04:a5:b0:68:ac:22:3b:6c:c7:99:1a:db:
                    eb:e5:54:b4:65:8b:44:fd:c5:8c:c4:64:6b:51:1f:
                    01:ad:08:0a:8c:04:69:82:de:a9:40:aa:ac:34:e1:
                    90:81:ef:2e:ba:49:a0:e5:34:43:0c:d9:50:76:6d:
                    ba:0d:e8:1b:14:5f:ec:b4:4b:e7:5b:a5:20:dc:9d:
                    25:31:e0:29:fd:7b:89:5f:0b:a9:2d:5b:68:1d:52:
                    bc:52:ac:1b:0c:b9:ae:f2:06:57:16:2b:86:cb:5b:
                    4e:18:e8:e5:1f:e3:26:23:72:87:68:5f:cd:27:2f:
                    2c:d8:5b:b3:cc:d1:b0:45:fd:47:61:c8:d5:cd:08:
                    a9:8b:8f:9e:cd:1e:4b:06:8a:cf:f5:ab:a5:a6:88:
                    87:97:a4:d8:be:31:1a:ec:84:05:b3:e7:48:09:da:
                    8d:13:53:65:3e:c7:18:84:f2:04:54:15:f0:10:af:
                    4b:80:6b:ca:65:0b:0e:10:05:a0:72:7b:8d:fc:4b:
                    21:60:f6:2a:7d:11:ce:74:9c:b8:49:29:d7:1f:75:
                    2a:a1:02:41:85:80:8f:74:0f:e0:2b:88:c8:db:99:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B2:AF:90:80:32:28:84:A0:C5:18:0F:5E:18:08:A0:A2:15:13:5A
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:5c:ca:b9:ea:14:0b:8c:9a:d2:6e:b5:2a:e8:97:97:80:
         22:72:21:16:df:6e:f6:27:b6:ba:5c:c8:d0:1f:8c:99:1e:76:
         91:a3:a2:3c:4b:1b:31:78:2c:e9:52:d3:a5:69:23:42:1b:47:
         d2:d3:a2:06:37:f0:e7:0c:6d:5d:dc:e5:04:8a:fb:da:0d:94:
         1b:e6:ef:c1:05:16:c6:44:f2:6b:62:fc:5d:cb:4d:21:66:23:
         78:ea:22:8e:e4:64:af:e6:78:09:ff:50:7a:4c:ae:6e:82:0a:
         7a:e6:f4:f0:e9:3c:ab:2f:4e:b9:07:a4:dd:e8:f7:2c:03:91:
         85:9c:53:e3:c4:6b:d9:e3:f9:85:4d:1f:d3:ac:d9:75:50:c0:
         77:0a:bf:09:ba:df:07:0a:c9:e2:bd:75:51:a1:0b:9f:08:44:
         56:6a:4c:26:ce:a5:90:d0:81:c7:b8:10:3b:4f:2b:ea:80:9d:
         79:d3:cf:3f:4e:3e:4e:6c:4e:58:b0:de:9b:9a:46:33:7a:77:
         6d:9f:39:68:90:c0:52:57:85:0f:f2:49:9e:1c:eb:80:03:73:
         8a:ce:0d:24:7a:17:d9:77:6e:34:be:31:2b:2d:e5:aa:48:43:
         99:7d:6d:dd:85:ea:ec:be:ee:70:de:f6:e5:b1:58:00:1d:2b:
         4c:70:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:57:57 2025 by rpki-client