Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
File:                     34352e3233362e37342e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          OWToDLzrI5hquIuNOfHGmh2ckHVreGju+9RfkTUABM4=
Subject key identifier:   CB:B5:F6:EA:A8:46:CC:DF:F1:86:F1:1A:C9:18:D2:EB:91:BB:A7:34
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       6D13014CAC1BAA2BFFA2DF3818C5B327E9F627BC
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
Signing time:             Fri 13 Dec 2024 15:45:01 +0000
ROA not before:           Fri 13 Dec 2024 15:40:01 +0000
ROA not after:            Fri 12 Dec 2025 15:45:01 +0000
asID:                     271478
IP address blocks:        45.236.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:13:01:4c:ac:1b:aa:2b:ff:a2:df:38:18:c5:b3:27:e9:f6:27:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Dec 13 15:40:01 2024 GMT
            Not After : Dec 12 15:45:01 2025 GMT
        Subject: CN=CBB5F6EAA846CCDFF186F11AC918D2EB91BBA734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:a7:c1:df:11:b7:df:3e:00:3d:3b:ff:d6:
                    56:dc:4f:ae:fb:de:ff:37:53:42:bb:04:3b:36:41:
                    b1:e9:db:bc:58:6a:ce:47:3d:79:89:24:05:fa:7e:
                    ff:c6:ac:90:79:b7:67:7b:1b:73:1d:5e:55:46:9a:
                    cb:20:6c:b2:03:c6:70:66:16:ff:3a:4e:d6:4f:77:
                    f4:e7:7b:21:b2:df:94:a6:63:4a:aa:c6:ca:f6:0c:
                    2a:30:e3:db:9e:a1:b3:43:c3:ea:06:2d:34:b0:74:
                    52:cd:4c:95:71:ee:5f:a0:22:e9:83:6b:cb:2e:c3:
                    5b:d9:d9:5b:6c:c2:78:82:bc:e4:33:98:8b:4d:3b:
                    8c:53:47:ff:02:01:4e:82:40:ee:1b:f5:54:95:00:
                    b1:18:ac:d7:9d:77:77:a2:fc:19:dc:6e:93:34:b4:
                    20:34:5b:4c:9b:d8:96:20:e7:37:1e:17:e7:a3:ee:
                    fa:ba:e0:35:95:4e:d4:15:b2:4d:2d:14:3e:cd:26:
                    1b:66:0f:59:fd:74:38:f7:c6:3e:ca:9e:1c:fe:e8:
                    ec:2f:9b:98:c7:a1:6e:da:24:24:0c:c2:f9:ce:fd:
                    3d:dd:54:50:b4:2e:09:c1:1a:13:5f:8d:7e:eb:3b:
                    e4:36:34:45:cf:bc:8a:f9:40:20:d8:db:77:f3:85:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:F6:EA:A8:46:CC:DF:F1:86:F1:1A:C9:18:D2:EB:91:BB:A7:34
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:89:45:59:81:97:b0:91:90:68:9e:94:a5:77:c1:34:87:7e:
         b6:42:8b:bc:29:04:16:b1:96:26:f9:6f:f1:54:b2:c1:2d:bd:
         df:bd:98:85:dc:c8:4d:fa:10:3f:3c:ee:f1:9c:4e:d1:3d:f0:
         20:67:6b:a5:5b:c4:00:f2:1e:25:07:e0:95:fb:07:5a:40:b1:
         a6:b5:e1:ba:bd:8f:09:28:d9:ae:ef:e5:85:5c:aa:1d:de:5a:
         51:fe:69:5b:6f:19:e8:7d:60:8a:a0:58:4f:01:a3:6a:ba:43:
         e4:25:b8:d3:64:ef:21:a7:dd:0e:c5:d6:d5:3a:42:b3:53:d8:
         c4:9b:ce:78:96:1a:b0:8b:f0:84:dc:f1:62:45:9d:74:8e:89:
         27:b6:c5:91:40:ff:eb:40:57:61:20:6a:bf:45:a8:1c:9a:f0:
         6e:17:1d:ab:db:ec:88:4d:43:d9:4b:d4:b4:b2:fd:5f:d1:0b:
         61:cb:4c:fe:81:c5:1e:43:fe:aa:8b:c2:6a:61:40:74:44:0a:
         37:79:3f:4a:f4:54:f5:3d:fa:e8:62:9a:86:a9:08:84:c5:16:
         79:b7:87:2f:af:45:f3:b4:57:ca:f3:e8:08:69:41:5f:6e:15:
         90:f0:bb:34:86:1c:30:91:5b:18:a4:4e:40:dd:ae:a9:ed:f8:
         9b:60:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:03:43 2025 by rpki-client