Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32322d3232203d3e20323637323039.roa
File:                     34352e3233302e3232342e302f32322d3232203d3e20323637323039.roa (raw, json)
Hash identifier:          UNvmrO2x6oJ/MHxm0waAZVfsYamyWjqUkeWJ3J6cHKs=
Subject key identifier:   C7:B4:EC:95:E9:26:EA:65:9D:3A:38:20:E8:18:9E:C4:54:3D:91:EC
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       2F031F9EA9984A83AEE9F559C222CCCD2197B5E6
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32322d3232203d3e20323637323039.roa
Signing time:             Thu 06 Mar 2025 11:12:01 +0000
ROA not before:           Thu 06 Mar 2025 11:07:01 +0000
ROA not after:            Thu 05 Mar 2026 11:12:01 +0000
asID:                     267209
IP address blocks:        45.230.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 04:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:03:1f:9e:a9:98:4a:83:ae:e9:f5:59:c2:22:cc:cd:21:97:b5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Mar  6 11:07:01 2025 GMT
            Not After : Mar  5 11:12:01 2026 GMT
        Subject: CN=C7B4EC95E926EA659D3A3820E8189EC4543D91EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:8a:b2:98:69:70:58:c3:de:ab:5a:fc:c2:
                    f1:5d:1f:fb:56:0f:5b:af:aa:e0:6a:19:15:ee:14:
                    f9:d6:4f:2b:06:36:e6:87:b7:67:d3:39:e4:59:d4:
                    0a:42:b1:51:4e:e8:2e:1a:34:8e:4d:20:a1:d8:4b:
                    a8:85:de:0a:36:03:ff:54:ae:93:a1:ad:b3:b0:ac:
                    74:da:e0:49:06:e8:cb:1f:88:90:fa:df:47:16:23:
                    68:6c:5c:bf:da:f0:1a:99:b1:22:e1:41:f6:a6:d8:
                    27:c6:7a:13:ba:ba:1f:fc:13:e9:6d:42:ff:55:7e:
                    c4:4b:28:43:07:f1:19:12:da:4d:6a:91:b5:bc:f8:
                    bb:50:65:e1:75:d8:9d:d0:e8:0d:a4:38:f7:22:3d:
                    ac:2c:e9:2b:1e:7e:45:5d:ba:c6:59:e4:f3:e4:1a:
                    7c:e6:67:5a:6b:72:b2:98:56:88:6d:6c:53:da:20:
                    b0:4d:d9:c5:a0:ec:5a:01:8d:4c:19:a6:8a:73:c5:
                    f3:ec:ae:93:c5:1b:02:2f:f0:07:44:96:90:91:10:
                    ba:a2:9d:96:a3:83:ca:1b:82:24:2e:50:bf:5b:7f:
                    ec:1a:73:b2:6f:11:94:c5:93:a0:ec:86:da:79:c7:
                    46:cc:67:ac:b4:1e:94:29:c8:6c:cb:de:98:32:93:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B4:EC:95:E9:26:EA:65:9D:3A:38:20:E8:18:9E:C4:54:3D:91:EC
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32322d3232203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:63:1f:3f:35:fc:bb:eb:e8:ce:f8:7c:a1:a5:dc:b5:f9:05:
         55:e0:e3:3f:5e:1b:61:42:cd:64:73:fe:ec:03:86:a2:85:ab:
         6e:4b:e6:8f:4d:5a:f3:25:08:f5:76:6c:f4:b8:cf:80:6e:e3:
         6f:7d:ea:af:3d:9b:e1:29:f0:37:9f:c8:9f:6b:ba:07:57:81:
         dc:43:16:05:30:0b:70:38:c6:8e:bd:12:f4:ff:d6:fd:c1:f9:
         75:7c:c0:f0:51:9d:8e:11:4d:1c:02:20:ae:06:74:1b:95:59:
         a4:d3:f1:1f:4b:21:e8:67:98:2a:43:94:f9:38:62:93:61:23:
         12:9c:94:ff:b6:e1:41:53:5d:22:72:21:b6:39:13:5e:42:34:
         5f:1c:75:fb:f1:57:c7:56:13:6e:8b:ac:66:3f:13:64:b9:19:
         30:57:21:0d:c5:c0:3d:78:d0:5e:da:ac:99:3e:da:1c:bd:3b:
         f1:a7:3d:8b:d4:4c:cd:36:dc:e2:dd:fa:96:14:eb:20:38:52:
         9f:12:cd:45:bc:64:cb:07:71:8e:39:b0:32:c8:f8:b4:f3:15:
         67:e4:6d:a6:81:1a:69:5a:c3:cf:19:e7:40:ca:49:88:b9:22:
         4c:82:e5:59:b0:30:d0:90:6b:81:fa:41:d9:7b:b5:c9:99:73:
         de:7d:90:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:42 2025 by rpki-client