Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3332203d3e20323639343834.roa
File:                     34352e3138372e34302e302f32322d3332203d3e20323639343834.roa (raw, json)
Hash identifier:          TFwYW1eAsH2Z0vBz8oMNJ7Db7Yr0FHwQfa7Oj5EHfT4=
Subject key identifier:   65:47:A4:C7:D0:4E:E5:B2:5B:AB:B2:B0:9B:60:82:68:06:26:8F:03
Certificate issuer:       /CN=143298B08D8709A1286FF347632874F903802FF3
Certificate serial:       39A47FF98A24F550BBCA7728C8DCBA68F16DF78B
Authority key identifier: 14:32:98:B0:8D:87:09:A1:28:6F:F3:47:63:28:74:F9:03:80:2F:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3332203d3e20323639343834.roa
Signing time:             Mon 31 Mar 2025 19:00:41 +0000
ROA not before:           Mon 31 Mar 2025 18:55:41 +0000
ROA not after:            Mon 30 Mar 2026 19:00:41 +0000
asID:                     269484
IP address blocks:        45.187.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.crl
                          rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a4:7f:f9:8a:24:f5:50:bb:ca:77:28:c8:dc:ba:68:f1:6d:f7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143298B08D8709A1286FF347632874F903802FF3
        Validity
            Not Before: Mar 31 18:55:41 2025 GMT
            Not After : Mar 30 19:00:41 2026 GMT
        Subject: CN=6547A4C7D04EE5B25BABB2B09B60826806268F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:05:bf:4e:4e:39:33:1a:42:9a:cf:e2:83:
                    fb:ee:39:64:be:dd:33:1e:b8:16:25:3f:3a:e4:88:
                    2e:2e:ee:a3:ab:7c:d7:8c:ac:6a:fd:39:b2:ad:cd:
                    cc:31:7c:22:92:12:c4:d7:c6:a1:bd:9a:bb:da:9a:
                    2e:af:da:84:f0:89:9d:7a:08:6b:d3:2b:8a:a7:b1:
                    ce:5d:ca:e0:0c:d2:64:c8:3b:55:40:ee:0e:b4:9e:
                    8a:9f:9a:f0:3e:32:1e:84:67:aa:25:04:c2:83:4a:
                    57:2c:d9:64:cc:5d:c0:77:79:9a:24:3a:f7:b3:3c:
                    7c:98:8d:95:21:f2:f3:99:f8:59:d6:ef:9c:16:18:
                    6f:53:c1:11:a0:0c:ed:7c:2d:68:08:3c:71:bd:e5:
                    8a:fc:24:8b:ce:56:80:a0:8e:79:b9:c7:cc:3c:89:
                    88:63:bd:03:a6:06:a5:a1:f1:f3:17:41:44:96:0e:
                    98:2c:f6:95:90:ec:f9:21:ac:d8:20:d0:d8:95:df:
                    b0:f9:7a:95:28:fd:d4:8f:db:93:33:94:c0:a5:05:
                    ba:c0:6b:f9:4e:a7:4b:c8:bf:07:0c:04:24:80:4d:
                    83:16:a5:28:7d:6f:ca:db:56:fd:db:36:a9:db:bf:
                    ea:0d:da:84:91:0e:be:06:f0:dd:ee:fc:f7:2a:30:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:47:A4:C7:D0:4E:E5:B2:5B:AB:B2:B0:9B:60:82:68:06:26:8F:03
            X509v3 Authority Key Identifier:
                keyid:14:32:98:B0:8D:87:09:A1:28:6F:F3:47:63:28:74:F9:03:80:2F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3332203d3e20323639343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:bc:40:42:d3:3c:e0:01:3b:45:ea:3c:cc:1c:9b:ef:51:88:
         24:88:e2:50:29:0f:c5:9e:4b:6a:6b:49:d6:bd:32:a4:22:d6:
         39:15:e3:72:82:12:22:94:39:94:c3:03:c5:9c:2d:8d:56:40:
         4f:87:6e:49:32:43:e5:61:36:d5:0a:5d:c3:4b:f3:50:41:9c:
         85:94:ac:56:40:47:3f:78:a9:b1:9c:c8:d9:0f:ec:e1:30:05:
         b8:aa:6f:89:dd:dc:78:7d:fc:fc:77:20:d2:cf:49:56:76:0e:
         ad:6b:3f:94:be:3e:56:14:f6:ea:38:87:9a:e3:9e:85:2a:2e:
         70:ac:6e:f7:d9:43:6b:cb:71:3d:85:f5:f4:77:e6:bb:0f:82:
         09:c3:18:8f:1a:6c:ce:58:9f:28:11:56:32:9b:14:d9:12:8b:
         dc:0f:f8:b4:64:ac:12:cc:5e:92:3b:8a:35:37:d3:89:ed:11:
         ad:c5:09:b7:2f:e8:5d:36:e9:a7:af:95:de:3f:fd:b8:24:a1:
         32:cc:f0:7b:67:20:94:d9:b6:37:f7:25:40:87:37:b6:22:e5:
         d3:65:3a:c6:a1:4d:72:03:db:d3:ba:e2:a8:49:2d:5b:c3:c9:
         c1:6a:bb:bf:18:88:12:d9:37:2b:18:0c:de:28:2a:e2:19:fa:
         14:1b:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:17 2025 by rpki-client