Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38322e302f32342d3234203d3e20323639353837.roa
File:                     34352e3138382e38322e302f32342d3234203d3e20323639353837.roa (raw, json)
Hash identifier:          eFZpq7/lysWMyCeALQauJV3pZgyFoGyONpbY4mt4A3E=
Subject key identifier:   85:B1:0D:DA:86:07:69:97:93:D8:D4:EE:05:4C:9A:0E:AC:3E:AB:DD
Certificate issuer:       /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Certificate serial:       0F2F97E39779C62C4FA8E90E9D3EE70468B44326
Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38322e302f32342d3234203d3e20323639353837.roa
Signing time:             Mon 31 Mar 2025 19:44:31 +0000
ROA not before:           Mon 31 Mar 2025 19:39:31 +0000
ROA not after:            Mon 30 Mar 2026 19:44:31 +0000
asID:                     269587
IP address blocks:        45.188.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl
                          rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2f:97:e3:97:79:c6:2c:4f:a8:e9:0e:9d:3e:e7:04:68:b4:43:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
        Validity
            Not Before: Mar 31 19:39:31 2025 GMT
            Not After : Mar 30 19:44:31 2026 GMT
        Subject: CN=85B10DDA8607699793D8D4EE054C9A0EAC3EABDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:cf:0d:c6:a3:79:40:cc:82:ee:86:9b:c7:
                    35:d8:96:08:6e:50:17:b2:a7:c4:27:ec:63:cb:a4:
                    ff:29:80:2c:78:20:db:ca:cc:bb:5b:2a:e3:cd:18:
                    dd:e1:64:86:b3:2f:2f:3f:2f:e8:cb:3e:1f:a5:05:
                    d9:d4:b0:c6:4a:16:11:e0:23:16:56:df:48:d4:88:
                    e2:f5:59:f0:e2:ea:94:43:49:36:b4:c2:e6:eb:dd:
                    ac:67:71:39:e9:1f:e4:6f:90:2d:45:1f:b0:1e:7d:
                    aa:35:1b:48:70:75:6a:ac:7f:f0:21:8a:eb:98:98:
                    ca:37:75:5e:1d:73:28:41:4e:92:ca:c0:7e:dd:94:
                    53:93:74:8f:e7:1f:ce:50:45:c7:d0:c3:c2:8f:0a:
                    a4:79:a1:19:c5:45:65:84:02:46:00:e7:85:dd:c1:
                    60:6c:75:43:37:b1:44:7b:a4:7e:18:36:cf:7d:ee:
                    0e:9e:57:b5:af:e7:8e:36:e1:3b:fa:6c:98:3f:48:
                    99:fe:ab:e1:c8:4c:90:8b:ba:09:fb:75:14:74:76:
                    96:cd:c6:85:99:d0:e7:77:ac:75:f6:8e:73:00:05:
                    2f:c8:68:80:a9:64:fb:45:f0:19:48:f1:96:5d:5d:
                    65:a7:06:52:07:79:10:38:d5:7a:29:d8:a6:6e:a6:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B1:0D:DA:86:07:69:97:93:D8:D4:EE:05:4C:9A:0E:AC:3E:AB:DD
            X509v3 Authority Key Identifier:
                keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38322e302f32342d3234203d3e20323639353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ff:53:56:89:a6:4f:b3:fd:45:8c:82:ff:69:c1:fc:ce:c1:
         ab:e9:e6:54:c1:a9:17:35:60:6d:a9:15:04:4a:65:21:f7:e2:
         ba:65:e4:ec:b2:34:f4:ca:e3:78:2b:94:d0:72:9c:64:f5:6c:
         6f:d1:4e:85:63:c4:0e:46:00:05:02:eb:8a:d0:e8:a7:e2:bc:
         ae:41:ac:74:da:15:1f:5b:00:88:fd:8a:0e:dd:63:ce:0c:2d:
         1f:41:5f:82:fe:47:17:d8:62:64:fb:01:c7:88:33:87:ab:3a:
         f2:e6:ab:72:8c:62:c2:af:1a:5b:ef:73:7e:d9:6b:08:b9:ae:
         75:42:11:7f:4f:73:fb:37:de:c5:80:70:20:03:e4:fe:ae:ec:
         ff:d5:6c:51:80:b6:3e:a1:98:b9:b7:85:1f:ae:2c:d7:60:ac:
         df:b4:c8:a1:40:a7:ca:32:ef:a9:19:d5:d1:96:b5:0a:bc:83:
         38:bf:b8:1a:ae:31:cb:fa:f2:93:e8:cc:fc:7f:cd:14:3b:b6:
         f8:36:95:f6:43:1b:b2:f2:e4:1a:1b:45:0f:70:bb:8c:cc:aa:
         eb:fb:cf:38:3a:90:06:3d:b9:9a:8e:df:24:5c:77:0d:fb:91:
         35:23:f0:60:10:f9:93:a8:f7:d9:64:24:94:59:51:dc:df:39:
         65:7a:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:31:46 2025 by rpki-client