Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa
File:                     34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa (raw, json)
Hash identifier:          QK7M7Hn95eoxyqK+R5yWsmr5Y3VALC5NN9+0lKedKxY=
Subject key identifier:   98:CF:15:23:91:EE:57:40:27:8D:7C:29:98:E0:6C:58:E7:79:29:FA
Certificate issuer:       /CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
Certificate serial:       34333BF367F10B1B75294920F417E61DB995E63A
Authority key identifier: 0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa
Signing time:             Thu 06 Mar 2025 16:52:19 +0000
ROA not before:           Thu 06 Mar 2025 16:47:19 +0000
ROA not after:            Thu 05 Mar 2026 16:52:19 +0000
asID:                     268418
IP address blocks:        45.160.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl
                          rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:3b:f3:67:f1:0b:1b:75:29:49:20:f4:17:e6:1d:b9:95:e6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
        Validity
            Not Before: Mar  6 16:47:19 2025 GMT
            Not After : Mar  5 16:52:19 2026 GMT
        Subject: CN=98CF152391EE5740278D7C2998E06C58E77929FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:e3:ad:46:e5:6c:0e:69:f0:c8:4a:5f:0c:
                    c1:d7:36:f9:9e:ea:0a:bb:4d:3f:c0:42:cf:cd:a6:
                    b1:4b:54:66:f9:8f:e8:ea:01:4c:37:a8:d9:f3:45:
                    06:cc:79:a6:ee:c0:fa:3b:d7:4b:dd:a6:76:bf:79:
                    db:e0:ad:71:c9:fa:d6:5c:e3:4e:ed:50:2d:89:b7:
                    25:23:42:bf:c5:ce:f6:c5:38:7c:72:bb:14:11:a3:
                    4a:fc:0f:ea:78:40:14:a0:c8:43:bb:21:d3:3d:10:
                    79:13:c1:e5:67:33:13:5f:a6:cd:72:1e:75:6f:b4:
                    70:12:b6:bc:cd:46:9e:ea:30:4b:0d:77:78:6a:e7:
                    17:fd:d4:e5:2f:13:09:5b:00:c2:27:a7:f9:26:dc:
                    f0:6c:85:cc:fe:9a:dd:50:3c:8c:a6:17:64:da:fe:
                    20:62:2d:c7:3b:d0:d3:ab:fc:59:ff:53:44:6f:87:
                    c0:01:1f:ff:1d:03:02:72:30:0f:97:06:b5:5b:e5:
                    10:7d:48:ee:06:df:45:4c:77:6c:be:ad:5d:68:68:
                    58:c1:37:d8:1d:d3:51:e6:b2:17:d1:57:af:ae:af:
                    42:e7:c0:20:7b:e7:3f:d9:61:bd:cf:db:7c:75:06:
                    ce:6c:ac:e7:52:38:4b:03:35:55:25:6b:1f:7f:44:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CF:15:23:91:EE:57:40:27:8D:7C:29:98:E0:6C:58:E7:79:29:FA
            X509v3 Authority Key Identifier:
                keyid:0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:3a:2e:d7:71:3a:7d:8b:7f:72:2a:a7:29:3f:dd:04:ba:
         e9:e2:10:e5:14:ff:cc:33:ea:34:6d:cf:a6:4f:f9:79:70:f6:
         b9:98:a5:a5:dc:33:b6:dd:7e:e1:2c:82:ec:04:2a:87:61:03:
         89:52:f8:b2:36:58:27:c9:48:11:24:57:52:6f:8b:9e:a6:68:
         c4:6b:77:91:b9:50:cb:d8:e8:46:79:6a:e7:5d:75:14:e4:75:
         f9:af:8f:b2:37:ce:07:8c:8d:60:cc:df:39:57:7c:e1:af:f0:
         d0:87:0f:e4:e5:dd:57:f2:9f:b1:da:61:24:1c:f8:11:35:4c:
         06:45:62:63:61:2d:04:39:9f:b1:3e:f3:66:35:79:c7:72:6c:
         b9:b1:36:34:3f:cd:fe:d4:aa:df:97:50:01:9f:9d:bb:98:b8:
         dc:64:2c:f9:85:21:9e:8c:e2:a5:95:49:fc:48:90:ed:ab:93:
         36:b9:f6:b2:5c:94:8d:56:13:d8:3f:ba:2e:7a:89:df:c1:df:
         be:af:02:95:bf:37:b7:be:c7:aa:58:0d:f7:55:82:6c:80:0a:
         25:5e:23:9d:a5:ac:5f:b6:5c:73:e0:01:20:d3:24:e5:ce:5b:
         63:31:73:01:c6:91:ce:73:5d:a1:26:ee:b0:4d:9b:b2:62:a5:
         78:dd:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:16:22 2025 by rpki-client