Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133382e302f32342d3234203d3e20323639323239.roa
File:                     34352e3138322e3133382e302f32342d3234203d3e20323639323239.roa (raw, json)
Hash identifier:          iXQqwpRSUDY6fYqoWlsaZJy87PyiXBTzUyDZvkpKUFI=
Subject key identifier:   69:E1:F2:8F:00:1E:E5:BA:1A:78:A1:0F:8F:28:C6:50:3B:5F:BA:5B
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       2A1A7C3CB90A3B0C064AC0F1D46C53D4771AF6FC
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133382e302f32342d3234203d3e20323639323239.roa
Signing time:             Thu 28 Nov 2024 17:22:49 +0000
ROA not before:           Thu 28 Nov 2024 17:17:49 +0000
ROA not after:            Thu 27 Nov 2025 17:22:49 +0000
asID:                     269229
IP address blocks:        45.182.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl
                          rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1a:7c:3c:b9:0a:3b:0c:06:4a:c0:f1:d4:6c:53:d4:77:1a:f6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Nov 28 17:17:49 2024 GMT
            Not After : Nov 27 17:22:49 2025 GMT
        Subject: CN=69E1F28F001EE5BA1A78A10F8F28C6503B5FBA5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:89:79:fa:86:9d:f2:05:66:c1:76:9b:4d:
                    73:8e:92:5d:04:90:47:df:fa:1a:57:b5:4a:6b:76:
                    31:de:bf:ca:4f:68:e4:ff:fb:9b:91:c8:de:58:4d:
                    ff:40:6d:b1:19:36:de:a8:88:8e:7b:f5:bd:74:f1:
                    26:71:54:93:1e:46:32:cc:8b:14:de:54:c7:7f:e8:
                    a2:f2:ca:dc:34:5a:99:ad:5d:ca:f0:ad:8d:a2:75:
                    2c:11:aa:83:a2:fc:50:24:2d:e4:5e:ec:ae:19:d5:
                    cf:e7:1c:89:ae:59:14:21:eb:56:c4:8b:10:dc:6c:
                    18:be:ad:e6:75:52:8b:be:56:92:a4:c6:27:29:d6:
                    39:5c:2d:ee:e5:7b:51:a5:c5:c8:2b:a3:29:b1:21:
                    cd:a7:78:6b:19:9a:16:d6:cb:ab:07:0f:32:40:db:
                    c4:3a:cf:d0:7e:1d:cd:f6:69:90:4a:91:be:8f:e8:
                    13:86:12:f1:65:1e:c7:19:eb:2d:68:92:86:4d:26:
                    11:dc:71:ab:f9:e8:92:a3:8e:78:2d:69:ba:76:a0:
                    66:f1:2b:92:2f:1d:00:08:d2:9e:a3:81:62:f2:0e:
                    8b:9e:db:6a:e7:53:6a:68:23:7e:3c:52:c4:d1:dc:
                    71:6c:0a:fe:e8:e9:02:56:d0:82:02:de:a4:76:e3:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E1:F2:8F:00:1E:E5:BA:1A:78:A1:0F:8F:28:C6:50:3B:5F:BA:5B
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/34352e3138322e3133382e302f32342d3234203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:73:c5:c3:4f:5d:e4:c7:bc:d4:29:20:4f:eb:cf:6b:2d:d0:
         8c:c5:78:1e:ce:2b:5c:e3:24:86:1c:af:f3:e4:5a:31:b2:d9:
         1b:3b:c8:74:20:ee:e5:bc:a2:5d:23:37:16:af:fd:46:57:fb:
         1e:d0:99:93:90:8b:0b:b1:64:b5:3f:11:40:ec:9f:a0:a2:24:
         ca:83:20:17:79:e9:e5:7b:8c:c8:90:bc:b1:fc:af:82:f6:d0:
         84:24:44:7c:4f:37:f4:ea:e7:c1:3c:5d:c8:5c:2a:52:d3:63:
         a0:ee:53:c4:5a:f5:ce:b5:a5:fc:91:e7:b9:8d:f2:ea:0a:81:
         54:ed:05:c3:af:b6:07:fb:da:ec:fd:8f:cd:4f:89:d3:22:af:
         58:c7:ac:ef:3f:c3:6a:a0:43:8c:42:4e:35:03:b2:ca:38:a0:
         88:31:05:06:2d:98:5b:c1:6c:ef:61:f4:36:5d:08:a7:8f:d5:
         c1:ce:d6:bc:35:08:74:fe:30:99:27:d9:cf:09:7d:b0:a8:c9:
         08:7c:e8:98:2d:2e:7f:ce:70:b4:4f:e6:05:2d:c6:93:35:b6:
         95:e5:a2:4a:5b:00:2c:80:cb:32:c9:2a:5a:2c:56:d6:c5:ab:
         8f:48:c3:e6:57:40:27:2e:99:7b:9d:21:e3:07:0c:dd:1a:1a:
         6e:95:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:55:19 2025 by rpki-client