Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36362e302f32332d3233203d3e20323638363539.roa
File:                     34352e3136352e36362e302f32332d3233203d3e20323638363539.roa (raw, json)
Hash identifier:          LnoZdP27LUlWbbyKMby3lB/78CFuRCPp72mZlS399mk=
Subject key identifier:   1A:89:04:98:29:28:3D:7B:9B:B3:3B:0B:B9:30:BA:D6:DF:58:08:22
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       6545DE081EFAE6890593D69DB813F961717FC26B
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36362e302f32332d3233203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:21 +0000
ROA not before:           Tue 01 Apr 2025 13:49:21 +0000
ROA not after:            Tue 31 Mar 2026 13:54:21 +0000
asID:                     268659
IP address blocks:        45.165.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:45:de:08:1e:fa:e6:89:05:93:d6:9d:b8:13:f9:61:71:7f:c2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:21 2025 GMT
            Not After : Mar 31 13:54:21 2026 GMT
        Subject: CN=1A89049829283D7B9BB33B0BB930BAD6DF580822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:13:93:9d:1d:38:a7:be:2e:97:76:62:f7:
                    f8:34:e6:ee:91:e0:e4:db:79:8e:92:a7:1b:78:b4:
                    6e:1b:03:21:95:85:7b:be:30:5f:dd:d1:a3:6a:06:
                    a9:17:c3:5b:d0:2d:4e:cd:e3:96:de:e1:79:47:c1:
                    d9:64:11:f2:48:af:ae:35:8a:7e:b7:81:e5:cf:1e:
                    f8:8c:2a:40:16:fd:aa:ed:53:01:b0:d4:a8:83:21:
                    56:fb:8c:ef:7f:59:0c:f0:32:29:5a:84:43:e5:83:
                    2e:41:5d:9b:a1:bb:f1:66:c9:b1:af:4a:94:4a:3d:
                    dc:7e:af:84:c5:c3:b8:ed:ae:85:9c:1d:f0:2a:95:
                    a0:b4:c9:20:b9:3c:c5:fb:61:8e:c4:b8:05:ce:7d:
                    8f:e5:41:85:37:e5:6f:2f:b2:06:07:27:3f:cb:a4:
                    ed:f3:13:d9:a4:8a:5c:c5:da:9a:9c:fc:c6:26:cd:
                    6e:f6:1e:c3:e4:f3:72:40:8f:31:0f:1b:fc:5d:4b:
                    12:23:af:f5:17:e4:a5:ad:5f:67:8f:95:1e:fd:20:
                    aa:1a:ef:f2:3b:b1:a8:16:de:d7:b5:f6:72:f8:84:
                    ad:b6:f8:de:52:ef:94:f4:67:df:a3:6e:c2:d8:c0:
                    ca:89:e8:61:86:46:9a:ab:05:2f:41:e2:a0:b9:0e:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:89:04:98:29:28:3D:7B:9B:B3:3B:0B:B9:30:BA:D6:DF:58:08:22
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36362e302f32332d3233203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:a4:af:c5:90:6b:6f:d4:ad:81:50:a9:a8:08:45:25:47:53:
         1c:01:83:56:fb:60:85:fc:1d:c5:2f:b7:44:de:b9:ce:79:b0:
         fe:2b:f2:b1:ba:d0:14:91:eb:7b:9d:cc:1d:86:b2:7f:53:bb:
         19:6d:cc:b8:c3:fc:9a:ea:2a:bf:e1:e2:55:07:24:af:42:47:
         35:77:97:5b:cf:e8:9a:a5:ff:77:e9:b2:0c:9e:e8:bd:16:0e:
         ef:db:a0:ed:cb:db:98:34:1f:48:99:5b:29:5e:c8:5c:68:8b:
         a8:bd:de:81:4f:b7:6c:12:10:a0:f0:48:61:bb:3c:af:c3:f8:
         45:50:2b:2f:bd:ab:61:d3:47:16:43:d6:b9:4f:65:13:00:12:
         32:aa:72:38:2d:8f:cb:56:ad:86:cc:fc:e1:fb:44:c0:30:16:
         95:47:f3:f0:41:e4:44:11:3f:d0:1b:76:fa:ab:65:83:e0:4e:
         51:fd:10:d3:f9:74:73:b5:31:75:bd:af:74:77:89:6b:4a:e0:
         d2:d1:8d:5c:41:9c:99:45:b9:8c:b3:2b:53:08:5a:6d:81:11:
         00:df:f2:8c:db:3a:7b:cd:4f:ec:14:4c:54:08:1a:21:5e:e1:
         cb:c5:c9:95:e0:67:a0:0a:d4:bf:c4:5f:6a:38:e6:01:8c:ea:
         36:54:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:23:55 2025 by rpki-client