Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa
File:                     34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (raw, json)
Hash identifier:          ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=
Subject key identifier:   1D:ED:9E:0B:51:1B:F0:AD:EF:FF:E4:30:9B:43:B2:D6:8D:7C:2B:F0
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       02A5CF32CBD787B1ACBADC82F0F11FF92F751EA4
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa
Signing time:             Thu 03 Apr 2025 19:14:55 +0000
ROA not before:           Thu 03 Apr 2025 19:09:55 +0000
ROA not after:            Thu 02 Apr 2026 19:14:55 +0000
asID:                     263250
IP address blocks:        45.180.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl
                          rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 12:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a5:cf:32:cb:d7:87:b1:ac:ba:dc:82:f0:f1:1f:f9:2f:75:1e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Apr  3 19:09:55 2025 GMT
            Not After : Apr  2 19:14:55 2026 GMT
        Subject: CN=1DED9E0B511BF0ADEFFFE4309B43B2D68D7C2BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:79:f2:9d:a4:70:98:8a:da:9e:27:bf:fe:
                    19:0d:c0:e5:4a:ff:f6:9b:6d:71:af:b2:43:0a:89:
                    88:1c:57:59:6e:5c:c1:eb:28:6a:07:8d:71:53:15:
                    bc:c0:a5:2b:bd:fa:ad:f5:48:25:7c:0b:0c:bd:26:
                    f9:6e:69:92:c2:c0:2f:ac:1f:f4:cf:9c:d3:ad:43:
                    f3:38:1a:3e:37:ca:01:9f:5c:80:ab:fb:1b:ae:af:
                    f8:41:fe:b8:a0:8b:d2:48:66:40:c9:de:ee:f5:6b:
                    75:6e:13:ac:8d:3e:76:c6:6b:85:85:a3:f2:b8:cb:
                    9f:67:e1:f2:e1:c6:aa:72:00:86:83:a3:45:9d:11:
                    19:8f:a9:e8:a5:45:78:01:92:ba:d7:ca:2a:b3:9e:
                    44:d1:a9:39:0c:16:66:fa:a9:29:a3:39:a2:9b:72:
                    ce:bc:79:82:7a:42:c6:67:a7:07:d2:4a:37:8b:bb:
                    67:1f:e2:a1:31:16:ef:81:2e:66:2a:20:54:30:ed:
                    76:5c:6d:ab:14:5b:24:79:b9:96:25:5e:54:08:76:
                    6b:41:dd:66:39:a3:86:3a:53:31:b7:59:79:30:fb:
                    52:90:90:09:f5:6d:7a:30:1c:b3:0a:92:d3:57:0b:
                    00:36:ec:e2:ba:6f:bf:21:39:84:ce:32:2c:3c:9d:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:ED:9E:0B:51:1B:F0:AD:EF:FF:E4:30:9B:43:B2:D6:8D:7C:2B:F0
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:d3:84:14:55:03:fd:a8:eb:7a:81:25:c4:e8:3c:f0:78:ea:
         ef:e2:2f:98:96:50:b5:e1:78:fe:31:d5:f2:44:46:53:65:f9:
         c6:99:d7:24:62:2f:ed:6d:74:05:d4:0c:47:28:fc:b3:19:98:
         e9:17:66:5d:23:d4:13:c2:28:2a:2c:49:41:69:4b:f0:15:6d:
         bf:3a:c2:63:63:99:a4:2d:0d:7f:91:36:94:d6:c4:1e:aa:a4:
         7a:59:a6:83:c5:b9:f4:96:64:b8:f9:01:64:e4:ce:d6:b5:29:
         51:08:0a:50:74:53:7d:f7:c1:52:f7:64:af:cc:1c:d9:3d:2a:
         c4:6b:8b:75:1b:c6:7b:ce:43:6d:17:56:a7:03:95:8f:04:95:
         f1:0e:61:04:81:d5:e1:63:12:27:91:95:e6:b8:34:c7:bb:5f:
         4b:f4:54:1a:20:ce:46:ae:5c:6b:a0:94:4f:bb:27:2f:1b:4c:
         1a:a5:dd:4b:e2:f4:bf:02:d7:12:d2:20:60:33:66:ca:b0:3c:
         ca:ff:a0:a2:8e:ff:66:de:3d:03:dd:a8:82:d6:96:fc:79:08:
         72:ae:8b:9f:b8:6f:70:a4:a2:39:71:c3:e9:05:4d:7c:75:34:
         21:e2:c9:65:3f:15:ce:d2:6a:76:81:27:eb:56:0d:af:64:9d:
         ba:c3:5e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:47 2025 by rpki-client