Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa
File:                     34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa (raw, json)
Hash identifier:          4hJYGyjO4344/a8LzwOFXD5KqWdcHB8kPrsJIfROI+s=
Subject key identifier:   A6:E5:66:C5:51:D2:32:01:C3:A0:3B:2C:37:2F:E1:44:D3:19:B6:F1
Certificate issuer:       /CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
Certificate serial:       306DF410B9BB01B4D5F6876F8451B79FE593D27D
Authority key identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     268952
IP address blocks:        45.176.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl
                          rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6d:f4:10:b9:bb:01:b4:d5:f6:87:6f:84:51:b7:9f:e5:93:d2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:f3:d2:ee:44:1e:44:99:ff:96:80:c7:56:
                    e5:bf:87:fa:cd:7c:de:7d:c0:25:66:39:f9:62:2c:
                    a9:26:fe:19:27:4d:54:74:40:87:22:01:bc:b0:bd:
                    6e:9c:c4:49:da:b6:16:d4:43:28:c5:d2:e7:1c:50:
                    1d:89:85:1b:ae:35:8b:35:23:bc:ff:12:8b:bd:55:
                    bd:b7:87:80:58:f3:b8:55:df:7b:11:33:b2:9c:2d:
                    aa:a4:1c:3a:6f:01:d0:e0:f2:6f:d9:e5:88:6b:08:
                    e9:81:19:ed:56:78:0f:ee:9d:dc:96:f4:d2:de:da:
                    8b:1c:c8:8f:6e:4c:00:69:43:e3:52:4b:82:98:8b:
                    f4:77:12:b9:99:30:a7:a2:cc:30:30:ad:b0:ce:c0:
                    a7:13:b3:d2:37:17:79:80:5c:90:c4:7b:2e:00:03:
                    36:10:37:9d:92:91:e7:51:c0:92:ea:ce:d4:b9:c0:
                    79:3f:88:c0:47:dd:3d:65:ec:1b:15:be:1c:ee:05:
                    96:72:15:00:4d:8e:44:7f:49:9f:7c:bc:74:12:e8:
                    1c:57:db:ea:49:c2:35:20:ae:f4:20:f4:87:c2:8e:
                    d4:3d:e1:42:ca:5e:f4:56:93:de:63:32:30:4a:77:
                    a7:66:07:ec:f6:21:6e:6c:a2:6d:18:c9:50:ce:fa:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E5:66:C5:51:D2:32:01:C3:A0:3B:2C:37:2F:E1:44:D3:19:B6:F1
            X509v3 Authority Key Identifier:
                keyid:CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:fe:75:b8:a5:6c:5d:a3:82:77:c8:2b:c3:16:b5:e3:6e:71:
         72:b7:61:40:01:72:44:e0:23:3a:c7:b5:7b:fe:91:c7:2e:0d:
         b4:e1:c7:c7:4b:d4:27:41:f5:f7:b1:df:13:b4:98:58:16:b3:
         11:71:4f:f9:31:2c:d5:ed:34:c0:2a:88:fe:52:9e:58:90:bd:
         12:3d:43:80:ef:88:1a:d1:c9:7a:40:be:8b:93:ec:19:a6:ae:
         33:d8:37:1e:b3:f8:d3:43:69:ce:d0:0d:11:b2:14:c5:0d:c7:
         65:cc:81:3b:12:0d:18:5b:da:36:82:8d:34:a4:47:2c:3f:84:
         e8:4f:26:bd:38:fa:5b:a3:f5:45:43:45:b5:07:35:aa:d3:07:
         f8:44:d7:be:a8:47:10:54:00:d0:5d:15:8d:39:5d:7d:10:8f:
         48:8d:69:43:70:11:46:b2:61:c7:4c:2b:d3:ee:17:35:48:9f:
         01:3b:56:e5:fb:2c:02:cf:43:a3:c0:ea:08:3b:04:7a:57:6c:
         4f:4f:cb:2f:0f:53:ca:dc:af:25:bf:6b:c1:fc:78:ee:1c:da:
         1e:29:bb:f0:41:1f:6e:a5:72:5f:5d:32:ef:6d:c0:26:ad:ea:
         6c:25:ee:4e:d4:5e:e9:86:a4:d2:ad:40:68:31:b2:6c:97:68:
         8f:fa:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:21 2025 by rpki-client