Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/34352e362e37322e302f32322d3234203d3e20323636313236.roa
File:                     34352e362e37322e302f32322d3234203d3e20323636313236.roa (raw, json)
Hash identifier:          fqgs2eFmIRLdUTGy5kMf68dcobrxQa4f6/bOtmUuRGc=
Subject key identifier:   4E:65:A1:19:28:D6:2C:BE:18:CE:AF:AB:58:3C:96:69:16:EB:36:A7
Certificate issuer:       /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Certificate serial:       656403D600E96DEB6AC5C1C125C250D671342495
Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/34352e362e37322e302f32322d3234203d3e20323636313236.roa
Signing time:             Thu 26 Dec 2024 22:12:37 +0000
ROA not before:           Thu 26 Dec 2024 22:07:37 +0000
ROA not after:            Thu 25 Dec 2025 22:12:37 +0000
asID:                     266126
IP address blocks:        45.6.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl
                          rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:64:03:d6:00:e9:6d:eb:6a:c5:c1:c1:25:c2:50:d6:71:34:24:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
        Validity
            Not Before: Dec 26 22:07:37 2024 GMT
            Not After : Dec 25 22:12:37 2025 GMT
        Subject: CN=4E65A11928D62CBE18CEAFAB583C966916EB36A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:57:45:4c:27:36:d1:d8:9e:7a:ab:c8:d5:
                    68:b8:01:ba:b8:22:2b:5a:c3:30:df:42:17:f4:bd:
                    9c:3c:8c:e4:2d:4b:55:35:04:f7:0f:a8:8b:33:8e:
                    75:c9:d9:43:3e:3b:1b:2b:8b:dd:ac:ac:3b:b4:92:
                    d5:82:22:32:5e:cf:dd:e3:6f:b9:b4:57:32:ac:8f:
                    f4:84:7d:13:23:05:9a:09:55:af:0a:4e:81:2e:96:
                    a5:3f:4d:51:46:22:07:30:4c:b0:c3:20:27:be:04:
                    eb:bf:fa:dd:9d:b3:c2:fe:4b:7c:92:00:af:11:c4:
                    f3:d9:fe:fb:2a:9c:27:a1:a6:ad:5c:c5:a5:ad:ca:
                    b4:ba:c3:69:46:38:3d:b9:4c:b3:1b:7c:c7:6b:66:
                    d5:c0:38:91:f2:5c:fd:5f:c0:22:c2:35:f6:8b:1e:
                    a1:17:d9:e3:a8:16:99:3c:21:76:17:76:62:49:c9:
                    36:2b:c3:c5:80:b4:a2:e2:ac:b2:ad:b8:e2:9e:38:
                    55:7a:e1:ce:79:38:56:01:67:65:b2:fa:a0:63:5e:
                    8d:d9:8a:10:e6:4d:b1:66:66:4e:d6:34:65:18:7f:
                    34:33:8d:e9:e9:dc:56:f5:fa:6b:78:6d:9b:35:01:
                    26:da:51:29:07:df:c0:a2:be:a1:6f:37:ab:c9:c1:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:65:A1:19:28:D6:2C:BE:18:CE:AF:AB:58:3C:96:69:16:EB:36:A7
            X509v3 Authority Key Identifier:
                keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/34352e362e37322e302f32322d3234203d3e20323636313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:f4:ef:a3:e3:4d:81:30:b5:23:6f:57:74:73:af:64:92:
         27:49:f7:24:80:29:af:6a:c3:76:5b:bf:bf:9c:59:fd:6d:f7:
         0b:83:6c:f0:1b:f6:cc:d0:0b:4b:b1:7b:88:23:62:1a:c8:71:
         36:0d:f8:7b:44:8e:10:51:c1:43:40:13:46:52:b1:28:a0:61:
         d4:3e:e1:0d:16:6b:65:d7:a1:3d:fb:2e:25:6a:dc:90:3c:8d:
         a9:29:5f:e8:78:bd:72:36:97:d7:b9:7d:28:d8:b2:93:89:56:
         4d:d7:b4:87:7a:e8:36:32:8c:96:a8:bd:19:07:d9:24:e7:a4:
         99:7b:61:27:f5:70:0a:50:b5:93:80:8c:c5:a9:d2:c7:17:ba:
         81:50:eb:82:8d:ae:bf:1f:ac:48:cd:d3:5d:18:4f:77:f3:30:
         75:7d:59:48:00:61:1f:ec:47:f2:7e:9b:0b:f8:9e:f1:8f:1e:
         ed:72:8b:3d:07:d8:5a:2f:6f:ef:dd:5f:09:52:80:98:ad:ad:
         21:74:32:d8:b6:d5:4d:eb:7a:f4:29:e3:70:08:7d:ba:cf:57:
         0f:1c:96:95:fb:01:3d:03:d1:26:8f:7b:f8:0d:35:d1:c9:33:
         ea:8e:46:4a:05:02:96:db:2d:e5:31:64:4d:4f:e2:ba:29:70:
         1d:74:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:51:17 2025 by rpki-client