Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa
File:                     34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa (raw, json)
Hash identifier:          x6Q2qMvdUxTPrKCTSyxwhhkb8FVIWPoqAjARmXx8HNM=
Subject key identifier:   86:0E:67:5C:9E:F8:A5:38:93:9C:23:B4:F5:32:55:88:58:5F:58:93
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       367B1B038A4E58FDD582555B7188D9D460C32D00
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa
Signing time:             Thu 06 Mar 2025 11:12:02 +0000
ROA not before:           Thu 06 Mar 2025 11:07:02 +0000
ROA not after:            Thu 05 Mar 2026 11:12:02 +0000
asID:                     267209
IP address blocks:        45.230.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7b:1b:03:8a:4e:58:fd:d5:82:55:5b:71:88:d9:d4:60:c3:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Mar  6 11:07:02 2025 GMT
            Not After : Mar  5 11:12:02 2026 GMT
        Subject: CN=860E675C9EF8A538939C23B4F5325588585F5893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:18:c9:bc:db:b2:5f:83:d7:66:e0:ec:51:
                    d6:3c:46:3c:a0:a0:ca:f2:c2:92:60:c3:1c:37:4e:
                    c5:04:b7:27:8a:0e:79:2e:51:4f:a3:71:5b:d6:eb:
                    9e:46:f3:99:0b:15:b0:23:40:29:ef:73:83:ba:6b:
                    7f:0e:d2:11:e3:67:cd:e3:36:be:93:b7:f6:c5:e3:
                    a0:92:2a:f5:36:b7:62:50:94:32:1c:f5:14:09:4f:
                    6b:7f:8b:5b:4e:18:1b:5b:d7:a1:92:59:09:fc:4d:
                    62:d1:3e:df:36:a5:70:10:b4:f4:08:d7:e8:bd:e2:
                    20:65:92:e1:5e:b8:8b:f1:5c:72:0e:f0:a5:42:e2:
                    34:33:c4:b6:4c:6c:99:52:86:18:30:8d:66:2f:99:
                    85:92:0a:a3:25:18:f8:84:24:96:0a:e2:7f:a6:22:
                    43:e7:34:65:35:f0:b7:7a:9e:45:d5:59:20:6a:9e:
                    a5:45:e6:a5:36:c8:9d:e4:50:58:5d:d3:f8:73:ab:
                    e0:52:e5:88:d7:18:3b:0e:d8:bf:85:d5:cb:7f:01:
                    f4:46:61:66:cf:8c:b4:56:d9:eb:7d:e4:f4:5b:6d:
                    1c:a8:73:c3:49:1a:ab:90:d8:20:bc:dc:fc:08:08:
                    9d:46:9e:4b:5f:0a:cb:33:f2:1e:72:f4:3b:8e:b0:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0E:67:5C:9E:F8:A5:38:93:9C:23:B4:F5:32:55:88:58:5F:58:93
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:7e:4f:b4:e0:93:45:4e:ea:31:18:12:c4:19:15:56:b5:5a:
         2c:6b:80:75:68:d5:df:21:e8:3e:68:f6:33:37:41:da:50:20:
         74:88:e5:39:74:25:5d:0b:95:f4:b6:4f:82:49:77:c9:af:f7:
         bf:27:96:90:4d:7b:35:a9:a8:3f:62:e0:70:04:dd:84:fb:60:
         1d:3e:19:a1:9f:c1:4d:de:18:be:7f:a3:d7:bd:c5:f3:30:b7:
         47:40:bf:42:2f:04:97:30:c4:6c:a6:75:06:61:c7:ac:27:0b:
         1d:11:2b:f2:5f:7c:ce:08:74:7e:23:c0:31:f7:42:f1:65:41:
         d3:96:c2:a6:4f:28:cd:63:f9:44:3f:a7:5e:7b:37:02:b1:2a:
         f8:5d:e9:d6:4b:61:82:44:37:ce:69:42:3a:76:60:b0:1d:90:
         55:e3:b2:2d:1f:71:ed:0c:12:09:50:d8:95:fa:ab:69:7d:7a:
         72:00:58:a4:f0:af:1e:37:c5:e4:04:16:1a:73:5e:22:55:db:
         21:a0:4d:3c:62:1f:db:bf:51:1c:16:76:c0:5d:59:94:0d:be:
         80:71:87:46:19:e9:c0:7e:cb:f7:ce:d3:e3:f4:5b:c7:7c:07:
         53:3f:41:43:9c:55:6c:61:3a:60:94:91:5f:2c:15:04:24:69:
         1e:08:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:40:54 2025 by rpki-client