Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e38382e302f32342d3234203d3e20323638363539.roa
File:                     34352e3136352e38382e302f32342d3234203d3e20323638363539.roa (raw, json)
Hash identifier:          Byw4MCUANg1P9b0FjUQvHXwnKbWC8eYKJEI/0+23OW8=
Subject key identifier:   C5:52:C9:0E:F4:46:B1:57:49:3A:5E:CA:5D:A1:7D:97:F2:6D:76:96
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       214526384E8C58615A8BE4712405A069DD6EA698
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e38382e302f32342d3234203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:24 +0000
ROA not before:           Tue 01 Apr 2025 13:49:24 +0000
ROA not after:            Tue 31 Mar 2026 13:54:24 +0000
asID:                     268659
IP address blocks:        45.165.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 04:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:45:26:38:4e:8c:58:61:5a:8b:e4:71:24:05:a0:69:dd:6e:a6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:24 2025 GMT
            Not After : Mar 31 13:54:24 2026 GMT
        Subject: CN=C552C90EF446B157493A5ECA5DA17D97F26D7696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:6a:8a:b8:8e:9c:0f:bf:87:32:33:b3:73:
                    51:b4:be:88:f4:7f:a2:0b:63:70:21:77:8a:00:65:
                    d8:92:e9:3a:74:94:a3:d4:32:a1:9a:f3:20:2f:ed:
                    1f:46:e0:b1:a4:3c:11:ba:42:c3:2f:0c:c8:ad:b9:
                    74:24:94:86:fa:35:6c:38:36:97:6f:b3:ae:55:e4:
                    db:31:35:cb:40:e4:0b:dc:22:f7:46:fc:04:ef:5d:
                    2d:6e:00:64:0b:79:02:ea:06:2b:aa:92:19:b4:ec:
                    f2:e0:de:a4:18:89:83:de:c5:1d:73:9e:bc:c2:b4:
                    2d:f5:52:5a:8b:01:a1:e0:82:7f:76:27:a3:15:bf:
                    1c:f6:16:06:66:ad:af:05:62:d4:04:bf:3b:b8:45:
                    79:9c:31:d0:21:12:1e:79:e5:23:94:0e:6f:94:23:
                    9e:ab:c7:88:58:5f:a1:ef:5c:64:e9:27:fb:c9:09:
                    c1:4c:c1:3d:17:36:6d:e5:6c:90:22:60:5b:d2:39:
                    d6:59:88:d4:7c:cf:b4:8c:48:4f:3d:88:b1:4e:71:
                    cb:59:ae:4e:75:40:6b:22:fd:ca:e3:ab:b5:2e:b6:
                    48:e0:5c:4b:a8:d9:77:14:0c:6f:1c:fb:5a:50:f7:
                    92:5a:2d:c2:bc:49:dc:6d:ab:97:6e:fa:3f:b2:f2:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:C9:0E:F4:46:B1:57:49:3A:5E:CA:5D:A1:7D:97:F2:6D:76:96
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e38382e302f32342d3234203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:e7:f0:e2:dd:88:b7:12:70:d6:29:e9:11:bc:0d:f7:ea:45:
         2d:4c:b9:d8:68:c7:4a:ef:53:16:6e:8e:54:85:49:ec:ff:4e:
         36:58:a6:7b:9b:5d:3b:f1:70:f2:c1:40:3d:85:a6:9e:f5:03:
         a2:3a:3b:2d:5f:17:90:c7:88:ea:62:f1:6e:0b:01:f3:c4:63:
         ac:a4:7c:31:00:fd:f9:20:14:d3:67:3a:c4:2e:55:96:0b:f2:
         2f:e5:5b:be:ab:10:0d:6f:48:c8:2b:86:6e:d4:fe:df:ac:b8:
         55:aa:18:66:73:98:fe:bc:02:e3:28:c1:82:69:22:28:86:c5:
         7a:f2:3f:27:8f:15:b5:6b:1f:b8:64:2b:ad:a4:4a:07:bd:52:
         8d:66:69:7b:18:cb:57:5a:31:be:b1:70:aa:3c:fd:53:25:3b:
         2e:06:4d:8b:48:be:4b:b3:44:c6:09:24:8d:d8:92:6f:f4:4a:
         17:41:ba:fa:fe:e4:59:2b:6b:47:b0:e7:b5:83:88:59:38:82:
         3f:11:08:1d:da:8a:d7:ce:97:6a:ce:05:5c:d2:ef:9c:91:dc:
         38:8a:5f:2c:2b:0e:64:1e:70:f5:f1:b7:58:d7:00:08:60:4a:
         74:d9:f3:53:bf:b9:9c:6a:8a:46:d0:e8:43:b4:b4:5f:84:bc:
         73:0d:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:58:59 2025 by rpki-client