Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32322d3234203d3e20323638383239.roa
File:                     34352e3232392e3230302e302f32322d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          aoR4SWmGzpQPG69zKzbTb09O3XY3+zdRv+Fu0NAqgaA=
Subject key identifier:   0A:0B:A7:DD:99:78:66:10:BF:46:E6:40:A3:C5:F0:34:6C:CD:D7:D8
Certificate issuer:       /CN=2E8650E1A7B09F7749A5126450B8242131048354
Certificate serial:       2B390324AB4F526FE4DAB84A40434EA0C95F9667
Authority key identifier: 2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32322d3234203d3e20323638383239.roa
Signing time:             Mon 13 Jan 2025 19:10:45 +0000
ROA not before:           Mon 13 Jan 2025 19:05:45 +0000
ROA not after:            Mon 12 Jan 2026 19:10:45 +0000
asID:                     268829
IP address blocks:        45.229.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:39:03:24:ab:4f:52:6f:e4:da:b8:4a:40:43:4e:a0:c9:5f:96:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8650E1A7B09F7749A5126450B8242131048354
        Validity
            Not Before: Jan 13 19:05:45 2025 GMT
            Not After : Jan 12 19:10:45 2026 GMT
        Subject: CN=0A0BA7DD99786610BF46E640A3C5F0346CCDD7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:a4:0a:fd:eb:77:c5:e9:26:f4:a0:47:5b:
                    15:03:cd:d9:ce:40:44:ab:9f:cb:10:84:25:cf:d3:
                    cc:20:ab:66:97:37:d7:1f:bd:1f:e9:bb:2f:c9:3a:
                    45:d5:c2:1f:30:80:28:55:a2:8e:14:6a:b8:79:65:
                    37:e0:e6:c4:18:73:1f:5c:4f:4b:24:d7:64:d5:55:
                    b8:7c:14:68:d4:09:f2:98:75:41:aa:54:1d:e6:98:
                    32:8e:94:91:86:ee:ad:cc:15:25:9b:36:00:5c:76:
                    a2:8e:17:eb:2f:46:65:ec:63:6f:1d:70:13:89:f6:
                    69:d8:29:c6:80:41:47:97:56:ea:ef:54:ed:4a:e2:
                    1b:2a:d6:4d:4f:08:81:7c:f2:8a:43:83:6c:ab:b8:
                    ec:28:af:c7:d1:fd:c1:c4:cd:62:c2:06:8b:25:6c:
                    b0:5d:86:27:db:aa:25:8d:87:cf:64:93:7f:bd:18:
                    5a:23:b6:25:3c:44:b0:37:4c:ed:2b:14:11:ce:c3:
                    1b:e7:ca:df:c0:71:a1:b8:f7:71:98:00:9f:4d:bd:
                    4b:e8:5c:99:af:74:6b:97:5d:c7:80:a9:1d:27:8c:
                    87:26:0e:a5:88:f4:54:30:f7:7b:0f:35:92:95:c4:
                    42:12:6f:48:ff:c6:cb:d3:62:b0:43:68:09:a4:2c:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0B:A7:DD:99:78:66:10:BF:46:E6:40:A3:C5:F0:34:6C:CD:D7:D8
            X509v3 Authority Key Identifier:
                keyid:2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32322d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:ce:55:df:9f:91:c0:55:be:0e:51:c4:6f:95:77:01:1f:ec:
         8e:17:c7:72:57:55:2d:db:d1:1d:a5:f7:14:5e:c3:a9:2d:97:
         ee:51:e3:f1:7d:ec:49:f1:89:9e:d1:2b:a8:2f:e5:b3:67:6f:
         0f:76:42:89:c7:06:4e:02:36:8a:fd:d4:f9:04:99:c3:7d:d6:
         97:b5:e0:01:3f:51:e0:64:c9:f9:e8:98:ad:dd:94:31:f7:b0:
         d7:e9:06:96:d0:25:23:b2:35:7d:30:e1:1e:24:e0:0b:56:f7:
         e1:5b:ed:f6:ae:3c:56:61:e9:dc:e4:43:7b:44:48:24:b4:89:
         b9:20:9b:71:c1:ad:7b:1b:7c:f9:73:71:04:73:b1:27:25:38:
         61:8c:b5:84:1d:d9:41:a3:0f:78:60:3f:f4:c5:5c:bd:9f:24:
         dc:fd:19:a3:48:75:a6:59:dd:ec:15:72:a7:ec:85:ee:68:cd:
         c0:f2:04:26:83:8b:5a:9b:b3:1e:ae:51:9d:09:ba:53:74:6e:
         3e:55:e9:9e:40:a6:7a:19:4d:33:d9:a6:fb:c7:77:f6:b6:54:
         ca:79:72:fe:8b:a2:ea:3b:82:95:62:b2:68:a8:17:50:8f:f0:
         35:da:8e:51:98:cc:0f:ad:e0:d4:19:d0:9c:3f:87:8a:95:2c:
         40:5e:11:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:36 2025 by rpki-client