Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3232203d3e20323639323635.roa
File:                     34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (raw, json)
Hash identifier:          b8STJpsLAVK+105/LwrPEU8i8O/LzpwBiUKVISQEfII=
Subject key identifier:   14:C2:80:D2:63:DB:B7:95:DA:6B:36:AB:5B:AD:F0:63:4E:91:E0:6C
Certificate issuer:       /CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
Certificate serial:       462524DF1D1F525E135483E871920412CE550833
Authority key identifier: D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3232203d3e20323639323635.roa
Signing time:             Fri 14 Feb 2025 00:46:05 +0000
ROA not before:           Fri 14 Feb 2025 00:41:05 +0000
ROA not after:            Fri 13 Feb 2026 00:46:05 +0000
asID:                     269265
IP address blocks:        45.182.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:25:24:df:1d:1f:52:5e:13:54:83:e8:71:92:04:12:ce:55:08:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
        Validity
            Not Before: Feb 14 00:41:05 2025 GMT
            Not After : Feb 13 00:46:05 2026 GMT
        Subject: CN=14C280D263DBB795DA6B36AB5BADF0634E91E06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:7a:9d:01:a5:98:ba:b3:27:42:26:61:ba:
                    56:a0:ce:18:2a:5d:1f:93:3b:1a:e5:3c:cb:b9:83:
                    94:09:86:e1:05:50:cc:fd:fe:51:18:e8:24:b9:a7:
                    01:98:0e:5e:42:1a:6f:4c:2f:86:1b:e0:62:fc:7c:
                    75:e0:64:d8:72:63:c5:e9:74:28:34:9e:c1:41:53:
                    4f:81:38:67:6e:ca:b6:7c:4e:9d:e1:d2:81:3c:88:
                    95:09:5e:03:3a:8d:d2:ee:24:f4:93:a4:bd:ae:09:
                    17:b0:cb:25:78:40:3e:59:2e:02:d3:0c:9d:91:26:
                    41:18:aa:7a:97:8c:af:da:55:f5:2a:44:0b:ab:cc:
                    15:85:a1:44:2e:dd:93:3d:45:73:16:85:0c:d4:69:
                    98:d9:a6:05:52:2c:95:39:65:87:40:5c:a8:78:bb:
                    e9:d4:fa:aa:5f:20:99:f2:cc:d7:d1:c8:61:78:f8:
                    ed:82:52:78:b9:56:fb:ed:18:07:a9:31:55:d9:13:
                    4d:2e:b3:33:84:79:87:02:ac:d5:84:39:80:dc:95:
                    9f:74:80:c1:84:12:da:df:1c:29:9d:91:f6:57:cb:
                    6f:ed:4d:9b:7a:ff:57:e0:a7:ae:4a:f4:95:dd:77:
                    d7:e7:73:b4:a0:68:46:75:0b:67:d8:54:80:ae:30:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C2:80:D2:63:DB:B7:95:DA:6B:36:AB:5B:AD:F0:63:4E:91:E0:6C
            X509v3 Authority Key Identifier:
                keyid:D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3232203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:d6:69:44:47:5e:da:d1:42:54:0d:d0:e6:ea:af:f0:15:
         fc:21:54:16:dc:de:88:ac:53:95:4e:8f:0c:dc:d0:fa:dc:37:
         33:39:cd:c6:49:82:24:36:41:7e:32:79:00:18:80:4c:68:5e:
         14:25:e9:77:d4:5c:e6:53:c8:5c:e6:42:a6:25:90:a4:20:f3:
         07:6c:32:46:74:27:63:66:a7:15:4e:85:3e:46:a2:cf:8a:94:
         f2:3e:1c:f5:05:7a:20:05:36:ab:82:67:d7:71:0c:06:6e:0b:
         a4:6e:2e:79:51:e4:b6:e4:4a:a4:18:4e:db:2f:e0:60:3d:c5:
         87:ac:e0:d4:4a:c5:c6:20:6e:5b:89:39:44:22:ec:6d:1f:40:
         27:c9:f5:8b:a3:0d:af:c8:49:9f:01:47:df:7f:3b:39:e8:be:
         6d:35:7d:e2:a7:45:60:36:1e:6e:0c:e6:2f:1b:4d:86:4c:ab:
         d0:ab:9a:7b:57:b6:a7:a3:ca:e7:28:9d:8a:f7:42:d2:8d:f5:
         89:c2:59:bc:44:58:59:f4:21:06:e5:ce:ac:f3:bb:e3:bb:14:
         cc:73:20:6f:85:76:d0:e2:ed:03:08:ed:4b:77:f8:45:97:a3:
         0b:89:1f:a0:15:35:a4:4c:cd:13:10:91:69:c6:4e:c0:91:de:
         f6:c4:66:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:35:00 2025 by rpki-client