Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa
File:                     34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa (raw, json)
Hash identifier:          180zVAPsuUZGr1/SbusIGI2Z8LiBk8E38ZYm3bv+eiE=
Subject key identifier:   B9:E0:19:A8:D3:B7:E8:CD:D0:B7:76:C9:1E:5D:13:8E:EC:D8:41:B5
Certificate issuer:       /CN=251707BFD07C618F959CF8F0ED4E733932A49193
Certificate serial:       5C2DEA915699824CB285B0AB1D0E534D74CA7D30
Authority key identifier: 25:17:07:BF:D0:7C:61:8F:95:9C:F8:F0:ED:4E:73:39:32:A4:91:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251707BFD07C618F959CF8F0ED4E733932A49193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     266979
IP address blocks:        45.226.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/251707BFD07C618F959CF8F0ED4E733932A49193.crl
                          rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/251707BFD07C618F959CF8F0ED4E733932A49193.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251707BFD07C618F959CF8F0ED4E733932A49193.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2d:ea:91:56:99:82:4c:b2:85:b0:ab:1d:0e:53:4d:74:ca:7d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251707BFD07C618F959CF8F0ED4E733932A49193
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:75:2b:fc:f8:a7:47:be:04:57:90:e8:e0:
                    73:91:6e:dd:e3:47:69:78:7f:cc:34:1c:c6:ae:39:
                    0d:30:e9:52:2b:00:05:c2:42:9e:bb:f5:66:18:62:
                    6f:39:06:f7:c7:91:ba:73:b9:94:fa:ba:7d:81:b7:
                    c8:ee:f7:8d:d9:e6:bd:cc:c0:ba:2b:bd:d6:99:c8:
                    f7:9e:b6:76:63:07:fb:5f:f8:b7:ba:ed:cd:3a:64:
                    bd:2d:77:23:d7:30:4f:b7:8a:e9:c2:30:83:fc:16:
                    1e:12:ea:4e:96:b0:18:5b:19:37:3f:ed:f0:c4:36:
                    11:9d:72:72:f0:2a:66:06:20:c9:c3:4b:4e:d9:12:
                    6a:ee:e2:44:9c:24:87:f7:2d:29:62:15:f4:cd:38:
                    f7:6a:dd:24:0c:43:8f:9f:7a:d9:76:47:14:ae:e8:
                    70:b5:48:77:25:95:79:f6:32:2d:5b:2f:e7:6e:b4:
                    d6:3e:92:45:bb:ec:4e:7f:f2:f2:11:63:ac:e1:ee:
                    81:77:d3:18:86:1c:e4:63:ea:b8:67:fd:3a:5b:fb:
                    9f:cc:ed:50:5e:9e:1c:19:02:fd:a5:67:37:ed:15:
                    51:13:11:93:98:fa:5b:22:26:74:a7:92:16:87:90:
                    a3:eb:a5:05:bd:00:80:86:2b:cb:a1:8c:02:a8:b4:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E0:19:A8:D3:B7:E8:CD:D0:B7:76:C9:1E:5D:13:8E:EC:D8:41:B5
            X509v3 Authority Key Identifier:
                keyid:25:17:07:BF:D0:7C:61:8F:95:9C:F8:F0:ED:4E:73:39:32:A4:91:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/251707BFD07C618F959CF8F0ED4E733932A49193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251707BFD07C618F959CF8F0ED4E733932A49193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/1/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:55:70:a5:2c:00:a2:08:88:d9:1b:18:47:b9:d6:9c:07:dc:
         32:78:1d:ed:36:48:09:34:05:7e:20:a2:b0:3d:23:31:43:16:
         08:cd:15:5e:f1:f1:fc:54:cd:24:bb:a1:d9:bb:53:3b:26:07:
         a9:95:dd:11:56:25:60:9f:57:a4:ca:14:c3:8b:e9:74:d5:5f:
         9a:69:aa:8c:a8:ec:60:70:cf:72:c0:7d:d9:b7:26:61:37:74:
         24:32:04:60:98:47:11:89:74:46:fc:20:eb:8f:3d:4d:e5:99:
         a5:92:a1:70:ff:bb:ac:c5:c7:cb:47:ae:dc:6f:c9:09:8a:aa:
         35:c5:18:21:07:c2:8e:5c:c5:f7:e9:ee:37:dc:24:2b:c3:c9:
         52:6f:e0:3d:38:77:6a:d8:8d:d0:bd:ae:f2:34:87:67:60:a7:
         a7:f4:01:29:4c:b6:62:a2:e2:df:a1:fd:db:37:d7:4e:37:17:
         5a:55:17:cd:07:bc:18:a9:fe:a4:58:f3:27:0a:2c:aa:fe:50:
         8f:c4:8c:2b:5a:72:a9:cf:7d:cf:25:f5:58:0d:23:41:86:73:
         0c:5f:a0:f5:ff:44:78:6c:a7:13:94:ae:8b:1c:ea:bf:9d:bd:
         1a:47:fb:54:ed:07:9f:43:af:92:d1:09:11:a0:fb:ae:56:34:
         ea:76:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:54:36 2025 by rpki-client