Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32322d3232203d3e20323639353839.roa
File:                     34352e3138372e38342e302f32322d3232203d3e20323639353839.roa (raw, json)
Hash identifier:          tpRDIoZPa3lke+7IhnnqaoT+6jgyg8ydpVDdU3RAQpA=
Subject key identifier:   48:A3:D9:43:FB:57:A1:25:5C:87:AC:6D:3C:0D:49:D4:FD:17:C0:6F
Certificate issuer:       /CN=26E9DBB375A429F2518B7433EA4000CA577E9AC3
Certificate serial:       110FF86EEF83F27DCF1169767BC76BF631F23E5E
Authority key identifier: 26:E9:DB:B3:75:A4:29:F2:51:8B:74:33:EA:40:00:CA:57:7E:9A:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32322d3232203d3e20323639353839.roa
Signing time:             Wed 12 Feb 2025 14:05:41 +0000
ROA not before:           Wed 12 Feb 2025 14:00:41 +0000
ROA not after:            Wed 11 Feb 2026 14:05:41 +0000
asID:                     269589
IP address blocks:        45.187.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.crl
                          rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 22:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0f:f8:6e:ef:83:f2:7d:cf:11:69:76:7b:c7:6b:f6:31:f2:3e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E9DBB375A429F2518B7433EA4000CA577E9AC3
        Validity
            Not Before: Feb 12 14:00:41 2025 GMT
            Not After : Feb 11 14:05:41 2026 GMT
        Subject: CN=48A3D943FB57A1255C87AC6D3C0D49D4FD17C06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:ec:7f:99:fd:85:2d:94:c8:85:0b:58:15:
                    19:10:d4:51:4b:08:cc:36:62:2f:6d:0c:ef:c7:6d:
                    97:08:5d:e4:3e:22:39:3f:db:a4:b4:22:49:e5:1f:
                    32:e5:67:8a:8e:6b:a0:d0:f2:09:ba:66:6a:7a:e3:
                    7b:17:83:8b:d3:42:0f:45:c2:ab:b9:8c:58:a7:e3:
                    ad:4d:f3:92:f6:cc:4b:85:af:18:e1:1a:ad:b9:69:
                    61:65:4d:3e:ef:ef:6a:b1:b9:f7:c2:14:63:bc:02:
                    5b:39:b1:34:af:49:64:b9:01:0f:fd:57:98:c9:6b:
                    2d:60:c4:5a:a9:d0:f8:08:67:af:0b:9b:f1:42:6b:
                    c0:20:a9:ee:ac:01:5a:88:74:d4:c0:88:84:f0:25:
                    b4:5f:a4:55:e2:d6:07:58:3f:0b:94:7c:f9:27:bf:
                    91:8b:67:4b:7f:04:0e:ff:8d:dd:4a:dc:5d:db:a4:
                    59:36:7f:55:ee:8d:c4:55:5c:5a:61:f1:01:67:15:
                    99:f0:7a:0d:83:6a:7e:60:55:96:9b:f3:11:23:53:
                    f3:dd:e6:c5:f0:f0:f6:40:80:7d:f6:cc:c3:81:10:
                    9d:8d:d5:f2:ba:93:eb:58:f6:05:e8:c0:a4:32:32:
                    3a:f1:79:47:de:11:7b:71:3f:fd:41:9d:b6:c5:1b:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:D9:43:FB:57:A1:25:5C:87:AC:6D:3C:0D:49:D4:FD:17:C0:6F
            X509v3 Authority Key Identifier:
                keyid:26:E9:DB:B3:75:A4:29:F2:51:8B:74:33:EA:40:00:CA:57:7E:9A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32322d3232203d3e20323639353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:62:fb:ee:d9:fe:8c:7b:89:28:36:08:08:2a:21:a7:43:
         9e:fa:d2:f9:75:b3:cd:ff:fb:19:70:e5:1e:cc:b2:d0:4e:bc:
         51:fc:96:a3:87:a1:60:91:4d:6f:40:d8:17:e4:1f:58:33:35:
         28:f1:16:37:a1:a3:89:f8:ea:34:21:50:e3:a9:fc:32:85:c5:
         9d:f4:84:26:71:b7:0d:b0:eb:02:6a:2f:0b:61:1e:96:92:a3:
         f9:e0:88:68:df:13:50:b4:77:8c:d9:73:9e:3b:79:12:76:a1:
         fc:53:9c:01:ad:89:37:68:ff:8a:7f:f5:42:9c:7f:21:02:1c:
         af:46:a5:73:6a:8e:28:13:9f:9e:6c:b0:05:36:a7:9c:59:a4:
         50:79:b0:b8:66:65:83:7a:aa:f8:ab:74:c2:0e:52:28:20:eb:
         25:59:45:a8:12:cf:d9:55:19:a1:7b:91:6f:2d:59:28:53:d0:
         5d:ad:f1:ed:38:97:04:6b:58:ba:ee:09:5b:d2:5f:50:5b:06:
         31:b4:4f:aa:e1:0b:a6:91:c6:fb:fa:88:13:bb:5f:82:ca:9e:
         87:75:6b:3f:68:e9:0c:13:71:1d:75:bf:63:14:b0:e8:c6:43:
         65:f8:ad:e7:4b:43:1b:66:6c:11:22:50:e5:ac:52:ca:e2:69:
         14:9e:49:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:27 2025 by rpki-client