Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa
File:                     34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa (raw, json)
Hash identifier:          a3zK6rS+XKK1dGJk/Pevt/4k0N2Lc7LKPL4RtlMr+3I=
Subject key identifier:   92:26:62:52:E5:A2:31:17:6F:7F:AC:78:73:13:97:89:21:11:1C:D6
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       6AF830C53F179450D5F94AE53E2D42DA8F8E9015
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa
Signing time:             Mon 03 Feb 2025 13:05:18 +0000
ROA not before:           Mon 03 Feb 2025 13:00:18 +0000
ROA not after:            Mon 02 Feb 2026 13:05:18 +0000
asID:                     267963
IP address blocks:        45.166.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:30:c5:3f:17:94:50:d5:f9:4a:e5:3e:2d:42:da:8f:8e:90:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Feb  3 13:00:18 2025 GMT
            Not After : Feb  2 13:05:18 2026 GMT
        Subject: CN=92266252E5A231176F7FAC787313978921111CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:1e:ae:40:ba:a5:31:ff:e2:6f:35:7e:50:
                    21:d1:74:99:81:43:87:ea:a5:d3:61:31:69:a6:a2:
                    a5:c4:42:35:25:a7:48:52:ee:48:64:0c:b4:66:9c:
                    b2:af:c5:53:f1:96:35:33:50:0c:1e:22:dc:ed:da:
                    d8:34:83:36:63:e4:79:87:39:16:8b:fa:54:43:96:
                    ac:69:75:6f:bf:10:8e:6a:c4:cd:db:c5:70:75:1f:
                    89:fa:bf:01:15:b2:23:89:a5:c3:c8:ff:78:bd:74:
                    f7:e9:cf:9a:87:03:85:03:47:49:22:72:d7:fe:ae:
                    05:5a:6b:17:58:bf:94:56:7c:b1:6c:20:34:4b:cf:
                    b0:04:fa:05:96:4e:f8:94:fb:48:59:0f:13:1d:06:
                    0c:6e:6b:0d:ef:69:89:50:51:10:81:c4:f2:fd:df:
                    9f:fd:6b:01:23:01:0c:36:58:98:50:b0:4d:89:29:
                    b9:dd:50:13:56:6b:98:3b:d4:fb:5d:14:19:a3:5c:
                    7d:c4:8b:df:39:95:1b:f5:64:4d:19:24:8c:03:f4:
                    c5:1d:69:63:c8:34:bd:5a:05:26:35:fb:d1:09:57:
                    89:ed:10:9c:17:ee:a0:cc:40:97:3b:29:db:79:64:
                    8f:44:f3:b5:a8:e7:67:40:14:ae:28:ca:8f:ce:0e:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:26:62:52:E5:A2:31:17:6F:7F:AC:78:73:13:97:89:21:11:1C:D6
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:5c:01:7c:81:25:4e:ee:0f:0c:96:8e:de:14:48:ec:f0:ba:
         27:37:11:45:ed:b9:f2:ca:28:86:5d:e2:3a:bc:8e:cd:26:51:
         c6:36:5b:e5:33:fc:cc:1b:06:f5:8f:4b:17:a8:8e:49:ff:48:
         a4:e7:d7:a8:02:b2:db:0c:88:e8:58:ea:6a:0f:2b:c2:95:f1:
         6f:b5:24:0e:15:f8:da:b9:7d:27:02:7e:26:f3:f0:e3:49:62:
         44:82:81:db:dd:61:e8:9c:e2:7f:83:84:1b:40:50:f7:1e:1e:
         a1:1d:48:13:cb:eb:bd:32:9e:2a:23:59:7b:97:ec:5a:dc:34:
         61:ab:1e:79:2b:c0:92:ab:32:ae:44:b4:61:11:3f:1c:a5:38:
         65:d9:55:59:6a:01:d4:76:07:15:39:d9:ff:f4:ef:7d:d0:74:
         29:ae:2b:46:e4:ab:99:c9:7f:85:8a:42:4c:6f:68:7a:33:17:
         a2:90:66:f2:21:20:2a:9c:76:91:ed:71:14:24:9b:39:b6:b9:
         3b:ea:23:be:5d:f1:77:05:d0:5b:fd:f7:e8:c2:9a:cd:58:d6:
         b9:8b:b9:61:92:c1:8d:d4:b9:ad:2c:10:15:33:65:cc:8c:27:
         da:0d:fd:f6:a0:3b:b7:14:08:53:6d:24:7e:f5:df:b7:cd:02:
         e3:5e:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:21:10 2025 by rpki-client