Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
File:                     34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (raw, json)
Hash identifier:          l5hk98Te9f3haw4W1qS9Z1091bo5I8zoSjf9ylAx404=
Subject key identifier:   00:E2:69:EC:23:B8:22:32:67:E9:57:ED:AD:59:7D:DC:08:AD:8B:B6
Certificate issuer:       /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial:       15A241C855DFAED4BC39B2A226B25839226E666D
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
Signing time:             Thu 19 Dec 2024 20:12:43 +0000
ROA not before:           Thu 19 Dec 2024 20:07:43 +0000
ROA not after:            Thu 18 Dec 2025 20:12:43 +0000
asID:                     268239
IP address blocks:        45.236.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
                          rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a2:41:c8:55:df:ae:d4:bc:39:b2:a2:26:b2:58:39:22:6e:66:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
        Validity
            Not Before: Dec 19 20:07:43 2024 GMT
            Not After : Dec 18 20:12:43 2025 GMT
        Subject: CN=00E269EC23B8223267E957EDAD597DDC08AD8BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:8a:61:0a:b0:1c:f1:1c:e6:20:32:72:6e:
                    9f:02:14:fa:ed:b3:e3:d6:b4:98:04:f5:56:d4:9a:
                    de:82:dc:74:ff:c6:68:01:fe:a9:f8:5c:62:c0:12:
                    28:cd:e0:65:e7:e0:8d:8c:76:15:90:f4:f6:4e:ba:
                    2a:ab:ec:61:b8:0f:4c:ec:32:14:57:df:f0:ad:46:
                    f5:0a:1e:92:5b:55:ef:86:c0:6d:20:b1:f6:e2:b1:
                    4b:6f:ff:29:47:9a:68:5d:8f:d6:8d:f2:c7:3d:04:
                    cd:58:21:5a:29:dc:f9:f2:38:a3:c0:b3:2e:2b:94:
                    7b:e4:ab:ba:97:93:f5:86:00:8d:b7:6e:b4:0a:cb:
                    b8:62:3f:d9:b5:c4:ca:5c:10:c6:d1:c2:dd:7f:91:
                    25:ab:7e:ba:42:a5:f8:b3:9e:d7:1a:4f:ac:0c:77:
                    1c:f2:47:78:7d:f0:9a:3b:59:09:ae:3d:e0:d8:42:
                    84:95:58:ec:f8:85:7a:9d:c8:f0:48:22:a3:d2:46:
                    49:02:fb:67:ef:79:0a:f2:53:4c:0c:df:f0:4f:9b:
                    58:d2:25:90:40:46:30:78:82:4e:58:9e:53:d9:a9:
                    70:3c:c6:30:f7:21:3e:3f:8e:a1:1b:09:72:ae:10:
                    0f:bc:95:2b:59:0b:be:c2:74:9c:ff:03:93:c3:9d:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E2:69:EC:23:B8:22:32:67:E9:57:ED:AD:59:7D:DC:08:AD:8B:B6
            X509v3 Authority Key Identifier:
                keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:9e:10:f7:19:8d:8a:8f:34:45:bd:f9:1c:58:82:a9:0e:43:
         b1:0f:0f:19:8e:5e:eb:e1:ef:01:cb:5f:fd:40:c8:ce:ed:ff:
         25:2d:05:b6:83:f0:8d:aa:51:3c:8d:99:a9:ec:5e:4b:54:83:
         64:86:3b:ba:41:62:aa:b0:a6:65:a2:ad:a0:23:12:1b:59:5e:
         4e:87:f2:82:01:1b:a8:d7:39:04:2f:24:2a:aa:69:2a:5b:aa:
         9c:53:f7:c1:b1:0e:ac:a5:b7:8d:21:02:33:50:68:b2:13:df:
         6a:70:2d:49:06:99:2f:74:dd:f9:7a:95:9a:88:c9:c9:4b:d7:
         3f:d1:00:b9:1d:10:cc:46:df:ed:51:db:13:1e:ec:13:77:01:
         13:8c:5b:7f:db:bf:e3:52:ad:73:b0:06:3b:e4:ca:61:1b:7b:
         82:6f:62:8c:59:5b:e1:0f:58:7d:6d:65:93:9e:9b:7c:15:53:
         68:fb:8e:6f:3f:af:38:67:a6:64:8e:d9:58:05:2b:2e:22:37:
         3d:8c:3f:9a:72:5c:b8:ba:0e:c9:fd:ef:ef:0d:ca:61:0e:f9:
         78:57:ef:3a:3b:d1:3a:f7:2a:b9:f0:bc:5a:93:61:16:00:f3:
         ab:80:2f:85:33:87:d8:fd:16:c0:c5:2f:d1:81:33:cb:89:d2:
         3e:4c:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:18:16 2025 by rpki-client