Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31382e302f32332d3233203d3e20323637313931.roa
File:                     34352e3233312e31382e302f32332d3233203d3e20323637313931.roa (raw, json)
Hash identifier:          icZvYRtjUIa2omaaO39BN8J7yt6uxYRigp2N/bPBkmg=
Subject key identifier:   DA:9F:0D:C1:A8:E4:A3:96:F6:A6:48:E6:B8:5E:C1:56:22:7B:5A:60
Certificate issuer:       /CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
Certificate serial:       130FBA132C8D80D182A727A1C34E6DDFE2A04995
Authority key identifier: 07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31382e302f32332d3233203d3e20323637313931.roa
Signing time:             Thu 13 Feb 2025 17:03:55 +0000
ROA not before:           Thu 13 Feb 2025 16:58:55 +0000
ROA not after:            Thu 12 Feb 2026 17:03:55 +0000
asID:                     267191
IP address blocks:        45.231.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0f:ba:13:2c:8d:80:d1:82:a7:27:a1:c3:4e:6d:df:e2:a0:49:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
        Validity
            Not Before: Feb 13 16:58:55 2025 GMT
            Not After : Feb 12 17:03:55 2026 GMT
        Subject: CN=DA9F0DC1A8E4A396F6A648E6B85EC156227B5A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:b1:90:5a:da:93:63:af:b2:5b:5e:a3:f4:
                    51:be:19:3c:09:20:81:10:57:5f:de:7a:08:38:65:
                    fd:a9:eb:63:e9:09:00:00:9b:5d:a4:5c:17:f1:51:
                    9f:52:61:fe:01:2f:8a:93:77:53:4b:a9:df:a9:eb:
                    47:c0:f6:56:0e:d6:5c:2c:84:1d:ef:09:dd:53:2a:
                    31:8b:27:d5:2c:04:94:08:30:eb:b6:45:20:b2:3e:
                    fc:dd:3d:9b:0f:54:33:4f:15:0f:cc:7c:a6:4a:8f:
                    37:0e:73:5c:f4:cd:af:c1:e6:65:9b:78:bd:c6:01:
                    34:59:5c:b1:61:ff:c3:1d:af:05:3c:12:0a:0b:a7:
                    e7:67:20:06:f8:e9:d3:84:d0:70:9b:5f:2c:bc:35:
                    06:f1:89:23:72:08:50:c4:ab:11:d3:be:af:3e:78:
                    fd:d2:39:73:99:e4:d1:87:bc:c4:76:fb:ca:fc:36:
                    7b:8a:14:1f:98:17:b2:75:2c:08:db:5d:84:e2:3f:
                    23:46:22:01:34:45:48:0e:3a:90:d8:01:4d:99:79:
                    ee:fa:59:8f:eb:21:cc:53:12:d9:d0:17:01:a3:6d:
                    e3:c6:8b:ff:08:85:6c:a0:c3:2a:fa:c6:16:5c:10:
                    ca:1a:23:73:3f:b9:fa:72:ec:42:98:52:97:a0:2e:
                    d5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9F:0D:C1:A8:E4:A3:96:F6:A6:48:E6:B8:5E:C1:56:22:7B:5A:60
            X509v3 Authority Key Identifier:
                keyid:07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31382e302f32332d3233203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:9f:c5:04:80:78:f4:cd:84:12:10:2d:e7:45:96:b0:31:4a:
         a1:4c:f2:dc:1c:fb:75:ce:c0:7a:41:ec:f7:ef:e8:35:69:7b:
         a9:f9:22:e3:ba:4e:ca:7a:cc:b2:89:d8:3c:0b:5d:10:fa:54:
         64:74:dd:18:55:a1:21:c6:39:e7:aa:2a:01:a1:33:fe:de:91:
         22:25:06:5d:8f:a6:2a:be:dd:59:37:59:62:69:40:c7:59:08:
         a4:dc:0b:73:8a:f0:ae:f1:86:a3:e7:0e:02:d9:0b:ef:e4:e9:
         40:ba:06:65:e6:bc:c9:50:99:af:72:72:3c:1c:f2:d4:41:ce:
         e6:9f:fe:b6:cf:aa:b3:e9:ec:e5:7b:e1:71:1d:10:1a:8a:c7:
         9d:7a:db:3f:be:4b:73:be:dd:c2:eb:f8:98:7c:22:84:f9:c5:
         d0:e2:74:97:e8:b2:00:6e:22:49:ae:be:0d:8d:31:f0:21:0e:
         41:c2:1c:b5:bc:82:81:d5:a0:9b:51:82:4d:3f:bd:ec:06:39:
         45:7f:7a:0d:bf:d0:5f:a7:9d:1b:66:f8:b5:c9:ec:63:05:36:
         6b:61:ab:2e:62:81:4b:9a:e0:ea:ed:c6:8b:32:c7:6e:8a:b5:
         5a:dc:66:d1:ac:ab:30:8d:de:b3:1f:54:a6:f9:10:e0:3e:f1:
         ee:9d:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:53:19 2025 by rpki-client