Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
File:                     34352e3233362e37322e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          e9k1zD0HTtTNwQWSVP+GkoG98+sXRX+jHTE9sMwf1DU=
Subject key identifier:   92:C1:AC:0C:58:7F:78:55:F7:11:9D:36:D1:D1:D5:D6:64:11:52:AB
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       3D9D6FD1BE32DAD1A91AB195A686B069D7199CC0
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
Signing time:             Fri 13 Dec 2024 15:44:50 +0000
ROA not before:           Fri 13 Dec 2024 15:39:50 +0000
ROA not after:            Fri 12 Dec 2025 15:44:50 +0000
asID:                     271478
IP address blocks:        45.236.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9d:6f:d1:be:32:da:d1:a9:1a:b1:95:a6:86:b0:69:d7:19:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Dec 13 15:39:50 2024 GMT
            Not After : Dec 12 15:44:50 2025 GMT
        Subject: CN=92C1AC0C587F7855F7119D36D1D1D5D6641152AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:f8:c2:f7:12:1a:a7:aa:2d:98:98:04:7f:
                    c5:68:f2:bd:ab:9b:1e:35:80:a2:d6:f7:cb:ec:6c:
                    5a:7d:d6:8f:1c:e7:cf:94:32:f2:e9:8d:47:03:62:
                    2c:00:9e:66:80:be:55:a1:ab:7f:43:1e:c8:92:e0:
                    0d:13:47:54:04:8f:1d:b3:c2:9a:38:1e:ec:37:46:
                    4b:04:3a:7d:43:d7:4d:db:5b:3d:44:78:6b:a7:10:
                    b0:4d:9b:c7:68:48:aa:c2:e3:f7:98:66:1d:e1:0d:
                    04:ad:0b:f8:34:91:6c:ea:14:9e:5e:c3:97:36:a8:
                    f5:2d:6e:2e:4a:54:1c:84:50:2a:88:04:f0:4c:98:
                    87:44:1c:bb:fb:9a:fe:86:5c:75:0e:96:0e:06:73:
                    c6:36:32:d9:2f:b4:3c:60:ba:b1:53:94:28:b0:da:
                    82:bc:a5:c6:63:42:b2:fc:16:bf:a0:4a:25:7e:92:
                    c7:fd:88:c4:04:89:9f:d9:4a:ce:d6:aa:f4:19:4a:
                    46:23:b2:48:4d:24:94:43:e9:b0:ad:7a:9a:5e:c4:
                    dd:77:80:01:d0:06:56:52:ad:51:91:aa:60:7d:1b:
                    5b:72:e0:e8:f1:db:b4:47:34:20:d9:fe:72:54:fe:
                    5e:b1:4a:85:05:e6:25:a1:ad:c1:e5:c7:cd:d8:59:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C1:AC:0C:58:7F:78:55:F7:11:9D:36:D1:D1:D5:D6:64:11:52:AB
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:a7:88:3c:a6:14:3f:21:d0:bb:7e:2b:0e:62:ab:3e:fa:4c:
         f1:3f:83:38:07:74:8a:96:b8:c5:04:6e:ff:2e:cc:31:bb:70:
         0d:ce:f0:76:6c:35:6d:a4:4d:4f:86:d9:d7:35:18:d5:ee:54:
         98:bd:04:72:ec:14:c5:a4:d3:9c:39:e4:f3:e2:2a:32:09:17:
         19:8e:34:80:30:70:63:29:9e:22:b1:7e:f6:9b:28:6e:3c:5d:
         b7:d9:95:24:a2:1d:2b:5b:02:2d:44:ab:54:ac:e8:69:9c:5c:
         7b:ad:f5:90:00:dc:57:c3:78:d4:19:f5:30:c7:e0:68:2a:7d:
         00:02:de:41:50:f5:e1:13:ec:fc:4f:aa:d3:69:14:29:8c:89:
         35:f1:ca:09:34:44:9d:64:74:36:5b:99:6e:ea:ff:de:e5:57:
         e0:f3:45:f1:e8:68:b8:1d:5f:58:97:6c:e1:cd:92:0e:38:aa:
         17:b6:e0:10:78:3e:33:4e:44:0b:a7:32:da:9e:19:a0:f6:73:
         76:23:c6:f4:93:6a:3b:9f:56:5b:9a:30:73:cc:6b:59:bd:52:
         6f:8b:b7:44:5b:8f:58:62:be:e5:e7:07:cf:99:c1:06:3c:6e:
         f2:d8:92:06:3e:61:8e:2c:65:ad:0b:3a:7a:5f:77:c8:4e:19:
         d6:7c:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:42 2025 by rpki-client