Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa
File:                     34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa (raw, json)
Hash identifier:          doFZycdK74IAch35EEoQ9Wd/wGNFT0zHxIpbI/Z5hD0=
Subject key identifier:   50:81:03:72:8B:39:9C:C4:40:A6:80:AA:B7:72:9B:08:B2:2A:49:4D
Certificate issuer:       /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial:       4E359D3BCFDC2E4B231154440EBBC708F1B71A8B
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     269192
IP address blocks:        45.181.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
                          rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 07:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:35:9d:3b:cf:dc:2e:4b:23:11:54:44:0e:bb:c7:08:f1:b7:1a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=508103728B399CC440A680AAB7729B08B22A494D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:6a:e4:25:d5:f4:36:1d:cf:7d:ba:31:ca:
                    b9:2e:d5:40:c2:83:c4:c5:24:82:cf:ee:1f:19:49:
                    c6:b9:8d:6e:8d:6c:66:fa:8a:46:b9:69:cd:de:74:
                    d8:f0:83:c4:46:a7:75:ca:20:3c:18:f4:18:ae:2c:
                    f6:31:a0:f6:87:80:ae:b1:91:9f:82:5e:1e:6a:be:
                    28:9d:91:cb:e6:63:c0:ba:cf:a1:5a:54:62:53:44:
                    6a:b6:8f:9e:b9:92:d4:79:e1:98:a4:49:38:14:21:
                    d5:6f:05:19:d4:93:65:fc:e5:5e:d1:62:e7:43:a5:
                    7f:79:47:e1:b3:96:18:f6:bd:5c:aa:c5:42:55:1a:
                    3f:6d:eb:a2:7e:52:29:84:50:ec:46:40:24:f2:dc:
                    5f:c1:8b:3d:6a:5d:1a:65:aa:1e:19:8c:7b:6f:54:
                    42:32:5c:75:71:34:a0:da:4d:8f:89:2f:50:9f:42:
                    df:da:2d:d8:60:fc:d3:db:4b:ea:5d:f7:9a:7d:8e:
                    5f:69:78:8d:69:36:3d:40:ee:58:42:2e:20:a0:91:
                    90:12:3d:b7:50:7b:d0:9b:cf:d8:58:17:2c:c4:02:
                    5f:cb:d4:b4:b1:57:d6:e4:77:3a:2d:93:5b:92:2f:
                    61:cc:9f:b4:b6:61:d0:87:93:1d:f0:09:72:fb:65:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:81:03:72:8B:39:9C:C4:40:A6:80:AA:B7:72:9B:08:B2:2A:49:4D
            X509v3 Authority Key Identifier:
                keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:52:5f:22:c0:79:26:cf:95:ae:25:2e:06:14:d1:dc:d6:
         87:3d:7d:52:63:29:e0:d6:e3:1d:c1:a8:c4:b3:cb:ea:43:ca:
         91:43:e5:7e:b2:cd:65:56:de:80:59:61:88:28:1a:8c:2e:30:
         eb:9f:98:01:50:3e:0d:d1:f1:ca:b7:f3:e5:1f:10:33:3b:2b:
         e7:05:78:2a:af:b6:f1:26:12:73:e3:60:00:97:fe:8e:89:26:
         06:63:4d:2f:6f:99:a8:96:b2:f1:1b:d1:d7:a5:14:a7:5d:ae:
         b8:7f:42:75:64:59:d2:4d:3c:22:d1:33:0f:af:dc:f0:48:5c:
         a1:fd:6d:92:c7:a7:d2:d3:01:4c:40:f4:c2:50:73:f5:7e:18:
         43:42:94:c9:21:34:a7:ba:48:ac:0e:07:6b:b6:45:c9:b5:7a:
         58:20:a7:57:40:a9:80:4a:8a:6f:cc:f8:e2:a8:df:37:f8:db:
         a9:02:bf:df:0e:f6:9e:93:fd:d9:75:7e:a8:e5:82:36:82:22:
         93:d9:6a:36:54:e4:53:3f:c2:a3:8f:c5:ad:68:b3:c3:03:03:
         88:24:05:d2:9d:9f:ae:3f:07:20:df:76:24:db:88:dd:36:d6:
         4c:51:43:b0:05:f0:2e:6d:84:d4:61:8a:cf:27:40:9c:cc:6e:
         41:fe:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:31:16 2025 by rpki-client