Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
File:                     34352e3139312e3230342e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          Uo36vrye49oGthLPNIhZ+GGkZASR/X/56IjUoE5uCb8=
Subject key identifier:   ED:33:10:57:76:9C:75:A1:21:42:73:6C:DA:22:85:48:EC:41:A8:9B
Certificate issuer:       /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial:       38864A22C3B86960278F007317EBFCB45936EC2A
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
Signing time:             Fri 07 Mar 2025 00:06:08 +0000
ROA not before:           Fri 07 Mar 2025 00:01:08 +0000
ROA not after:            Fri 06 Mar 2026 00:06:08 +0000
asID:                     3356
IP address blocks:        45.191.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
                          rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 20:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:86:4a:22:c3:b8:69:60:27:8f:00:73:17:eb:fc:b4:59:36:ec:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
        Validity
            Not Before: Mar  7 00:01:08 2025 GMT
            Not After : Mar  6 00:06:08 2026 GMT
        Subject: CN=ED331057769C75A12142736CDA228548EC41A89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:f1:8a:d3:60:43:22:b8:75:29:64:d2:1b:
                    0b:99:15:07:4e:ed:dd:90:c1:9d:d7:96:e1:38:5a:
                    12:3c:81:a5:df:ec:94:96:80:0c:71:fc:b2:ec:1a:
                    f4:78:2d:b7:42:db:01:73:bb:a7:e7:1a:26:5a:fa:
                    27:a3:0a:0c:59:fe:e8:3b:2c:14:a5:68:20:19:6a:
                    62:d6:20:34:d9:d8:b2:09:35:0d:f2:cd:71:3a:4e:
                    d3:ee:a3:64:1a:ce:6a:5d:3a:fd:15:c8:ff:13:9f:
                    97:fd:9f:7d:26:31:0d:7f:f7:78:6c:b1:49:5d:2a:
                    ef:98:4c:e2:e2:6d:98:61:77:02:f3:27:7f:af:72:
                    d3:1b:58:cd:23:b4:2e:1c:b8:b4:80:b2:cd:05:e0:
                    fd:b4:47:c1:f0:04:b8:22:6e:5e:de:fb:25:c5:01:
                    02:61:24:5c:56:90:fb:8b:bd:4c:38:19:61:c8:9c:
                    95:86:5b:db:86:f7:4f:15:61:28:d9:60:56:42:01:
                    3b:db:09:5f:c7:05:a3:ef:a0:94:a4:fc:fd:b5:59:
                    8a:f1:8e:fa:b0:cf:9e:1b:d4:d5:9c:84:15:81:3e:
                    18:54:3c:9e:82:04:ef:91:d1:1a:0a:cb:1d:ec:e6:
                    d6:f9:56:b5:ce:49:3a:5a:fb:e2:d2:23:75:32:0e:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:33:10:57:76:9C:75:A1:21:42:73:6C:DA:22:85:48:EC:41:A8:9B
            X509v3 Authority Key Identifier:
                keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:9b:83:89:50:e8:bb:34:c3:bb:76:cd:05:98:d9:30:01:
         60:3d:56:b1:23:c3:43:40:94:aa:16:86:2b:38:14:0a:21:b8:
         8e:2f:37:24:a2:65:b4:6e:66:53:9c:02:8b:f7:33:70:05:74:
         f0:e3:40:92:a1:a7:24:36:69:70:c5:a9:3f:ff:f8:54:39:38:
         a4:00:1a:56:24:02:e0:4b:b5:1e:d0:cd:d5:ed:e8:cd:c9:ee:
         26:78:52:b6:fb:54:c3:55:7f:b2:2a:fd:65:9f:d1:ab:d5:e0:
         48:6b:10:93:38:17:43:8d:62:41:d6:3a:ec:5f:ca:f7:c2:a0:
         8d:71:43:91:b3:e3:dd:db:12:7c:09:c2:60:fb:58:7e:f4:e3:
         4d:94:65:8e:aa:f0:45:b0:32:6c:49:19:c7:25:92:e4:6c:1f:
         40:eb:35:6c:67:8f:4b:08:e3:cd:5a:f1:55:2b:c4:d5:20:f4:
         8e:d0:2c:49:e0:12:13:bc:10:ef:89:0a:6f:13:84:94:2d:6d:
         e2:e6:92:00:e9:c8:05:62:72:e2:a7:b3:69:cb:26:8e:78:65:
         86:8b:f6:5e:2a:e1:af:95:d5:28:22:da:18:99:64:55:e9:74:
         ae:b5:d0:b9:5d:ab:b0:09:0e:21:e1:19:91:eb:f3:e6:25:c1:
         09:7a:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:51 2025 by rpki-client