Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136332e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136332e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          yIdsWHimnJoaW3dwhmBCDTQR9l80xxAJp3DxFqi6nWc=
Subject key identifier:   2D:48:1A:3E:3F:E3:08:D8:9E:EC:F9:A8:C9:03:F7:CE:6D:BD:70:FA
Certificate issuer:       /CN=8723709C4D690CFE7D7971537037FC3C8E195928
Certificate serial:       10ED8882B66DA9CD11EE2B7D93E327BD19BAF081
Authority key identifier: 87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136332e302f32342d3234203d3e20323636313936.roa
Signing time:             Sun 29 Dec 2024 13:32:56 +0000
ROA not before:           Sun 29 Dec 2024 13:27:56 +0000
ROA not after:            Sun 28 Dec 2025 13:32:56 +0000
asID:                     266196
IP address blocks:        45.6.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ed:88:82:b6:6d:a9:cd:11:ee:2b:7d:93:e3:27:bd:19:ba:f0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8723709C4D690CFE7D7971537037FC3C8E195928
        Validity
            Not Before: Dec 29 13:27:56 2024 GMT
            Not After : Dec 28 13:32:56 2025 GMT
        Subject: CN=2D481A3E3FE308D89EECF9A8C903F7CE6DBD70FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:d1:d3:46:90:83:1f:47:45:73:a8:b3:d9:
                    9a:55:8f:ed:ad:1b:39:18:c3:88:7e:e3:ec:fb:8a:
                    fe:e2:01:b7:77:16:72:03:08:a6:3c:d6:4b:c9:40:
                    41:d7:57:13:68:f1:2a:4f:b8:09:63:78:9d:71:c8:
                    8b:e0:de:0e:92:f8:9a:c7:50:ba:cc:c7:36:0e:44:
                    29:1d:1d:72:26:d9:9c:f4:0d:d5:38:e5:bd:4e:e7:
                    b6:e9:b2:03:32:97:38:83:3c:c5:f6:b0:d7:68:40:
                    b2:11:ff:01:0b:cf:79:53:48:e0:e7:ee:be:21:88:
                    59:c8:10:a4:a8:82:34:ff:2f:94:32:de:6e:cc:0e:
                    84:45:aa:da:88:d9:84:a7:57:9f:8e:59:8d:db:23:
                    79:04:a2:f2:9d:1f:67:dd:75:82:cc:a2:4d:3c:91:
                    7f:d1:c6:d9:2a:66:03:5e:df:8f:75:43:ac:84:5d:
                    14:c6:aa:7e:b4:3e:ce:00:e8:f1:18:18:92:1a:48:
                    cb:0e:ff:7b:3a:00:8c:40:fe:8e:05:54:1a:a7:10:
                    e3:6c:e5:f3:12:62:93:ad:96:53:e0:ee:c7:62:15:
                    56:81:47:8b:2b:32:6f:65:7d:4a:49:1a:1d:0d:ec:
                    e2:46:94:5f:a5:19:f3:d2:3a:0a:34:3f:98:06:61:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:48:1A:3E:3F:E3:08:D8:9E:EC:F9:A8:C9:03:F7:CE:6D:BD:70:FA
            X509v3 Authority Key Identifier:
                keyid:87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136332e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:3c:ae:62:c0:de:ff:30:78:08:8b:0a:ac:66:a1:8e:c6:2c:
         0f:37:b8:2e:62:3a:10:ec:43:bc:74:8e:8d:69:2a:c6:12:14:
         5f:36:aa:c9:5b:88:9b:9e:79:e4:7e:86:17:0d:f4:74:51:4f:
         9c:9a:b0:8c:21:b6:03:30:69:37:9f:5f:67:0c:80:ab:bc:3d:
         7c:36:f7:7b:dc:64:07:19:7c:b0:99:00:73:37:a0:6b:cc:a4:
         93:c5:97:d8:56:c4:df:5c:29:62:11:3d:ef:d6:8e:26:a5:36:
         8f:3f:53:6c:18:fa:9f:5d:1b:81:3e:df:d1:3c:6e:71:d8:a4:
         89:9f:40:b2:9c:2c:3d:59:7f:74:ab:6a:f2:ad:b6:e8:f8:b1:
         30:6b:04:f2:72:4d:ce:19:ba:cf:4b:5f:fa:51:66:01:59:79:
         09:39:31:29:29:be:ae:cd:f9:17:c5:4e:7f:92:64:6c:26:a1:
         2f:9d:68:60:fa:86:cc:9d:47:81:77:f4:89:31:d3:65:ca:3b:
         8d:54:b8:75:c3:e8:3e:95:d5:ba:5d:6a:bc:bb:2c:18:94:eb:
         b7:ed:3e:00:31:d7:1e:01:83:c8:e4:66:c9:81:a5:94:ae:a7:
         f4:1b:ad:16:e7:f5:0a:ae:f2:b7:2c:dc:08:08:d6:00:de:19:
         d6:db:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:58:28 2025 by rpki-client