Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa
File:                     34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa (raw, json)
Hash identifier:          JH6ju057H4XS8C46Y60zPc+z91M0/zaBhBfHy+PXe+s=
Subject key identifier:   51:B5:9E:7A:4B:5F:C7:84:17:EE:9E:EB:C3:06:05:68:8C:D3:F3:BF
Certificate issuer:       /CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
Certificate serial:       35D62D41C1F8604E0DAD80E601FDFA2369642353
Authority key identifier: 96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa
Signing time:             Wed 09 Apr 2025 18:16:42 +0000
ROA not before:           Wed 09 Apr 2025 18:11:42 +0000
ROA not after:            Wed 08 Apr 2026 18:16:42 +0000
asID:                     269194
IP address blocks:        45.180.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 11:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d6:2d:41:c1:f8:60:4e:0d:ad:80:e6:01:fd:fa:23:69:64:23:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
        Validity
            Not Before: Apr  9 18:11:42 2025 GMT
            Not After : Apr  8 18:16:42 2026 GMT
        Subject: CN=51B59E7A4B5FC78417EE9EEBC30605688CD3F3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:c3:a0:46:71:e6:0d:79:ef:03:23:bc:aa:
                    8f:ac:84:47:57:4d:13:f8:50:a2:bd:ec:19:d6:45:
                    d1:0a:5d:33:15:58:4c:88:19:63:30:23:28:89:3f:
                    59:b0:03:5a:17:98:7c:d5:db:fa:9d:0f:18:51:62:
                    90:c0:c6:ea:9e:b8:0b:2a:3e:3d:d4:ab:a6:f2:20:
                    7f:f3:49:94:b1:aa:1d:ce:8d:af:82:b4:c1:dd:6e:
                    6d:e1:d1:93:2b:3a:5e:f3:3e:b0:85:e8:96:44:a7:
                    a6:6e:e5:08:99:95:9a:e8:5d:b7:67:d7:cf:5c:5b:
                    b1:c7:9f:af:90:3a:64:79:1c:72:a4:fe:f0:5e:a3:
                    cc:77:3c:d4:b2:1b:61:bd:2d:5e:01:b4:95:df:d1:
                    41:db:d4:e0:51:b7:b2:0b:c8:1a:17:7a:6e:8e:4b:
                    f1:98:6c:41:4a:cb:a8:4c:8d:46:50:ee:0d:b9:cb:
                    2f:70:56:9e:51:f1:f3:e4:e3:bd:75:d6:53:a5:7f:
                    31:e5:9d:c6:8c:23:2e:5e:fc:5d:b3:5d:9c:c3:a8:
                    dd:9f:f7:a8:1f:08:c8:db:7d:5a:d4:69:fa:54:9b:
                    11:fa:be:e2:ef:d7:64:8e:51:d5:69:2d:fb:b7:67:
                    0f:cf:8b:65:91:76:33:54:c2:4e:ba:14:d6:8b:e5:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:9E:7A:4B:5F:C7:84:17:EE:9E:EB:C3:06:05:68:8C:D3:F3:BF
            X509v3 Authority Key Identifier:
                keyid:96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:ac:cf:66:02:51:ea:6f:b3:ae:03:a0:1e:8e:03:fc:fa:69:
         59:cd:32:f3:55:87:96:f6:23:c9:bf:e1:6f:29:ed:3a:0d:f9:
         33:4e:22:75:3e:f6:e0:f5:ee:61:4b:3a:70:11:56:b2:4f:07:
         47:4b:bd:0b:01:a9:44:fa:24:c4:90:82:f1:8a:4f:70:c7:d1:
         98:97:55:36:4a:f8:1d:0a:88:5d:5d:92:dc:50:ee:7d:6f:71:
         e4:40:6b:52:80:b5:90:d3:34:9f:e6:c2:0b:60:48:76:0b:43:
         84:71:88:e0:c8:85:14:4c:4f:14:a3:59:c1:b7:a0:36:df:ab:
         27:f8:80:f7:49:f0:09:81:7a:a4:c1:5d:8f:f7:9a:bb:12:27:
         a4:6a:dd:ea:5a:c9:7a:d5:60:53:15:43:0f:0f:82:f6:92:62:
         c8:8d:72:28:31:80:30:2a:57:65:4c:43:88:9c:16:a8:c6:e6:
         c9:ae:d7:a5:cf:a2:c4:09:d8:1d:5e:fa:70:e2:54:4f:7f:ba:
         b9:70:ed:6b:6a:95:89:a4:ab:2d:56:27:65:03:b2:a4:1c:93:
         46:12:9b:74:08:f2:32:79:4b:81:60:a9:45:98:d5:48:02:08:
         c8:ad:90:23:34:2f:33:f6:71:2f:fc:ed:3a:ae:74:db:9c:cc:
         2f:af:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:07:30 2025 by rpki-client