Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39392e302f32342d3234203d3e20323639333732.roa
File:                     34352e3138352e39392e302f32342d3234203d3e20323639333732.roa (raw, json)
Hash identifier:          OnUxgDemLEj7S9I8ZJNZZekwbLjguotxgFsYWScttbo=
Subject key identifier:   2B:E8:B5:B0:79:29:71:E9:81:92:C6:F6:57:A4:8B:6E:AD:DC:63:8A
Certificate issuer:       /CN=D4F76BA9615EEF5E66255DB7FC8989EF16037F36
Certificate serial:       6D23A7EFA91BBBB5248805B5913312E5DD334077
Authority key identifier: D4:F7:6B:A9:61:5E:EF:5E:66:25:5D:B7:FC:89:89:EF:16:03:7F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39392e302f32342d3234203d3e20323639333732.roa
Signing time:             Wed 09 Apr 2025 13:04:13 +0000
ROA not before:           Wed 09 Apr 2025 12:59:13 +0000
ROA not after:            Wed 08 Apr 2026 13:04:13 +0000
asID:                     269372
IP address blocks:        45.185.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.crl
                          rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 01:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:23:a7:ef:a9:1b:bb:b5:24:88:05:b5:91:33:12:e5:dd:33:40:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F76BA9615EEF5E66255DB7FC8989EF16037F36
        Validity
            Not Before: Apr  9 12:59:13 2025 GMT
            Not After : Apr  8 13:04:13 2026 GMT
        Subject: CN=2BE8B5B0792971E98192C6F657A48B6EADDC638A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:dd:07:f5:1b:3e:f2:51:17:28:89:91:38:
                    02:53:20:80:59:91:a1:3e:02:a3:7d:ee:7d:34:ab:
                    a1:79:51:6e:a1:6c:48:38:9f:19:fb:36:7d:36:68:
                    a6:18:55:ec:de:36:24:3e:62:63:57:cf:81:c1:d0:
                    a9:8a:32:87:f6:35:10:39:14:bc:c3:9a:a5:1c:76:
                    b4:ae:b0:cb:67:26:16:29:46:35:bd:cf:58:b7:cf:
                    cb:04:38:b6:20:80:0a:c6:ed:d9:8c:e2:10:36:b9:
                    83:3d:37:ff:f7:23:ee:9c:5e:12:72:3f:7a:a9:72:
                    21:6c:2c:94:4a:15:01:70:3f:30:db:82:d8:10:58:
                    60:a3:59:4e:5e:6f:18:96:9f:68:7f:f4:7e:19:7c:
                    37:07:ad:b1:13:d9:4a:29:76:1c:a3:ea:1b:bf:2d:
                    ac:b0:ac:69:cd:93:9f:0e:1e:87:a6:db:5f:c6:47:
                    e8:af:a5:f0:44:82:33:a6:42:f1:da:91:35:fd:a9:
                    3a:4d:c0:7f:2b:7d:32:84:b3:e2:5a:f5:e5:53:8b:
                    8e:3f:ed:f7:2f:c4:15:e5:a7:af:3c:92:f7:b2:84:
                    c0:6e:a4:13:39:cd:41:6b:0f:0b:22:1b:8f:36:23:
                    95:4e:d0:d2:72:8b:13:95:55:67:32:70:12:17:35:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E8:B5:B0:79:29:71:E9:81:92:C6:F6:57:A4:8B:6E:AD:DC:63:8A
            X509v3 Authority Key Identifier:
                keyid:D4:F7:6B:A9:61:5E:EF:5E:66:25:5D:B7:FC:89:89:EF:16:03:7F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39392e302f32342d3234203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:6c:04:7c:36:fc:86:70:fb:19:ee:66:90:90:bf:fa:04:4a:
         73:63:67:48:02:c3:48:db:a9:70:85:ab:5b:45:87:0c:08:d5:
         f2:48:99:3b:77:6f:30:96:53:29:09:f7:7f:bf:df:1b:2c:a4:
         34:8d:00:b4:41:62:02:e5:cc:46:34:ac:b7:dc:67:7b:f5:b0:
         cf:27:9d:24:25:82:8a:89:ac:db:20:9a:ec:00:9e:4a:da:fe:
         80:80:d8:2b:c0:ae:c6:f7:5a:02:60:ce:5b:1e:1b:3a:24:87:
         c3:83:87:61:45:d8:9d:51:21:0f:91:c6:51:f1:b8:d4:fb:b3:
         77:38:c5:e0:c9:ad:b4:a8:46:70:95:9d:b6:3b:8f:e9:38:41:
         c2:ec:79:fb:a8:63:8f:52:1b:67:c6:a0:58:59:97:1b:a9:cb:
         2e:a2:cf:2b:f7:d4:d9:de:7f:72:21:2a:9b:c3:84:45:be:e5:
         c7:ca:91:2f:a9:d6:b6:87:4f:56:1a:b0:8a:a6:f8:5a:a8:a3:
         eb:89:80:32:5c:31:64:14:43:ba:4f:e8:8b:46:b7:13:22:aa:
         a4:15:52:19:c5:09:c7:7a:e7:7c:ae:a4:bb:74:32:b3:8d:96:
         99:bb:96:e0:52:1c:3f:59:9c:e0:a0:40:59:40:da:62:10:34:
         fc:5e:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:29 2025 by rpki-client