Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa
File:                     34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa (raw, json)
Hash identifier:          VnWIAqSVaHXdTXIZ/wEUsCSR/06CNKfLZWKo2bUcMdI=
Subject key identifier:   D9:7A:1D:4C:86:25:DD:5B:0D:F7:7C:E2:BA:4D:92:F9:1C:8F:5E:1A
Certificate issuer:       /CN=0F44F5750AB24A7D6E844281A724F470994C316E
Certificate serial:       256192670D977BCD7718F7CF0E22998012332112
Authority key identifier: 0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa
Signing time:             Fri 27 Dec 2024 02:39:14 +0000
ROA not before:           Fri 27 Dec 2024 02:34:14 +0000
ROA not after:            Fri 26 Dec 2025 02:39:14 +0000
asID:                     266952
IP address blocks:        45.225.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl
                          rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:61:92:67:0d:97:7b:cd:77:18:f7:cf:0e:22:99:80:12:33:21:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F44F5750AB24A7D6E844281A724F470994C316E
        Validity
            Not Before: Dec 27 02:34:14 2024 GMT
            Not After : Dec 26 02:39:14 2025 GMT
        Subject: CN=D97A1D4C8625DD5B0DF77CE2BA4D92F91C8F5E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:d0:95:38:e5:34:72:fe:20:ef:67:e6:6b:
                    51:e9:83:81:19:63:cb:83:43:d4:e4:12:1f:aa:c2:
                    e1:d3:60:42:65:50:56:ce:2e:f9:28:53:9b:c0:62:
                    ff:95:e5:cb:69:f7:bc:f5:19:87:41:4a:ab:07:f8:
                    95:ea:97:be:85:d4:df:db:d6:f2:23:2e:ef:5b:2d:
                    d1:a3:04:44:4c:84:26:51:10:54:52:9b:ea:18:0a:
                    41:60:91:fc:c5:48:8b:15:7b:30:d1:6b:6a:30:e7:
                    e3:58:aa:6b:a4:ac:6e:18:d7:b4:2f:bd:7e:33:da:
                    f6:19:8e:09:7d:0a:bd:1b:40:a4:d2:dd:32:43:19:
                    e6:d8:df:00:d2:10:14:a5:08:5f:d7:ec:e8:f1:3c:
                    70:df:3a:7b:00:63:45:40:af:56:6e:19:a9:3a:b5:
                    3f:38:d5:e8:95:f0:7b:2e:9f:d7:d2:ea:70:14:a2:
                    6a:18:1e:f1:7a:3f:bd:dd:4e:fc:2a:fb:bc:8f:ce:
                    89:54:cd:6d:de:b4:4c:10:91:44:78:75:74:5d:c7:
                    7b:0b:83:71:2c:97:62:56:3e:7f:a2:8d:09:44:b3:
                    e1:53:b0:6c:3d:5b:96:80:a6:75:89:03:77:8d:c8:
                    19:e5:fd:29:ad:d9:8d:f6:2e:1c:46:71:99:34:48:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7A:1D:4C:86:25:DD:5B:0D:F7:7C:E2:BA:4D:92:F9:1C:8F:5E:1A
            X509v3 Authority Key Identifier:
                keyid:0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:98:ee:06:5b:3f:dd:3f:78:62:58:c2:80:ed:e5:c2:3c:
         11:bd:2e:b8:0d:b0:1f:ca:65:de:6f:68:5c:e7:8a:50:e5:b2:
         ff:2d:58:32:16:6f:69:1c:9e:64:26:d8:71:5f:c1:d1:97:14:
         87:a4:08:ec:b6:81:1f:ba:e5:80:e1:a4:26:75:25:a4:c9:93:
         c7:c5:ad:01:73:02:6a:cc:0e:6d:c9:5d:aa:7e:6a:0b:86:39:
         c3:1c:7b:b8:50:67:47:31:66:b6:63:7b:20:cc:d1:3c:74:14:
         42:c3:8d:21:48:a0:b9:83:fb:7e:fa:97:e7:7d:9c:df:7e:9b:
         c3:ac:55:83:c9:0f:73:8f:b6:d7:3c:bf:33:5c:36:a7:74:fe:
         b8:f9:cc:32:ae:00:d9:4e:3e:13:87:25:3b:89:8e:59:25:d4:
         4c:ce:06:da:b1:06:49:e8:92:b7:89:f7:1f:18:c2:0f:2e:9a:
         f8:ba:31:ce:1f:ff:a9:59:2b:16:29:27:f9:5c:4e:e8:18:de:
         4f:c0:84:91:9e:1a:c7:16:53:77:e8:55:1a:68:1f:99:20:77:
         63:74:fa:d6:f5:da:84:d3:8b:00:63:8d:7c:be:4c:ff:4b:3c:
         a4:7f:7f:88:16:96:2c:f3:0b:65:c4:5d:1c:4f:02:01:3f:08:
         f4:fb:18:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:38:51 2025 by rpki-client