Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32332d3233203d3e20323637323039.roa
File:                     34352e3233302e3232342e302f32332d3233203d3e20323637323039.roa (raw, json)
Hash identifier:          rqtXOutXk3wXMCQ9dokMdi+Qd24lv5UC79g9A7sLKEE=
Subject key identifier:   E0:34:6C:A9:44:3E:00:FA:DF:95:05:30:98:1C:FB:B4:43:62:20:07
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       300F3347FCF3B7FEEE42B3142D9CA32D09C8C5F5
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32332d3233203d3e20323637323039.roa
Signing time:             Thu 06 Mar 2025 11:12:03 +0000
ROA not before:           Thu 06 Mar 2025 11:07:03 +0000
ROA not after:            Thu 05 Mar 2026 11:12:03 +0000
asID:                     267209
IP address blocks:        45.230.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0f:33:47:fc:f3:b7:fe:ee:42:b3:14:2d:9c:a3:2d:09:c8:c5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Mar  6 11:07:03 2025 GMT
            Not After : Mar  5 11:12:03 2026 GMT
        Subject: CN=E0346CA9443E00FADF950530981CFBB443622007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:5e:42:f0:9d:46:43:35:04:44:46:20:dc:
                    54:0f:96:c6:d8:89:7b:eb:aa:f9:b2:9a:e3:f1:f7:
                    58:4a:f3:06:fc:7b:10:e7:93:d8:b5:ab:4c:04:7f:
                    aa:34:92:6a:65:23:d2:7b:1d:63:5e:3a:45:53:d8:
                    e9:20:24:44:0a:fe:7c:5c:c1:7f:19:6b:82:38:cb:
                    72:6b:6f:12:99:cd:75:4e:a6:39:a4:e5:b0:fc:00:
                    d4:91:81:07:17:1d:35:e6:fd:c4:1f:82:70:c8:62:
                    30:de:0b:e9:67:7e:73:f5:c5:d9:41:e8:ca:a4:1c:
                    50:83:9f:fb:a0:eb:fd:f4:92:e3:71:83:52:b2:16:
                    6a:c1:1c:57:b1:23:66:d3:0d:03:cf:f4:c7:3c:c5:
                    33:fc:34:28:e0:b8:e6:d2:03:70:92:2f:ae:dc:59:
                    7e:9a:ec:68:70:be:87:eb:fa:44:1b:8b:70:ac:7b:
                    39:c4:83:22:72:fb:cd:66:51:21:6e:1b:fb:12:f1:
                    7d:e2:be:40:45:bd:b6:79:83:ef:b0:79:b9:32:e0:
                    65:4f:96:a1:2c:3e:63:20:79:82:bb:bf:cc:6c:91:
                    77:a6:a8:1d:07:18:fc:aa:06:07:e1:26:30:63:2c:
                    1d:83:c0:be:83:eb:91:18:40:4a:fd:40:6a:3f:ce:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:6C:A9:44:3E:00:FA:DF:95:05:30:98:1C:FB:B4:43:62:20:07
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32332d3233203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:52:db:16:05:99:ff:1a:55:e2:e5:15:86:3d:9b:61:e0:da:
         2a:77:aa:7b:f4:f0:7f:0d:e6:28:c6:e9:c5:71:30:34:44:78:
         c9:d6:a3:b8:1b:a7:38:33:19:7c:1b:d9:44:44:03:c5:38:85:
         3f:90:02:a2:db:bc:13:f2:30:d0:93:ef:6a:2d:bb:0d:27:f4:
         41:5b:ea:a2:1d:35:ed:11:9c:74:e9:f8:b8:b7:55:58:91:5d:
         29:67:87:2d:75:bf:1e:e4:28:50:69:1d:68:ab:24:9b:5d:27:
         9a:fb:37:d7:60:19:1d:85:05:5c:b3:fb:00:99:18:b2:47:10:
         e1:57:4f:1f:12:03:ed:70:de:d3:90:86:04:cf:db:84:2a:78:
         ff:5b:7e:17:39:df:00:9d:6e:7c:67:c2:1f:e7:e9:32:f5:33:
         b6:03:fa:d8:3a:5a:3b:85:97:aa:5e:18:7f:5b:a5:b0:1b:b0:
         3a:eb:0b:41:55:55:8f:5d:77:46:be:ee:cf:ad:31:b2:c7:0a:
         96:20:c8:c3:1b:bb:fa:d1:97:b5:c2:a7:fb:18:01:06:36:99:
         c0:8f:12:1d:81:69:a3:f4:f1:5a:df:9a:f6:ed:70:fb:30:bb:
         54:f6:19:65:3d:19:7a:09:fe:12:aa:84:4e:de:ca:9e:2c:80:
         b7:13:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:45:47 2025 by rpki-client