Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32332d3233203d3e20323639323534.roa
File:                     34352e3138332e31362e302f32332d3233203d3e20323639323534.roa (raw, json)
Hash identifier:          sggJjmqx194SHXTtxF8BTg1bkPzo9GcFyFq3xs9fSzI=
Subject key identifier:   71:73:BE:5E:09:73:7D:C3:2B:05:F8:1C:13:7A:49:9B:7F:45:62:93
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       1BF65D5686CB105A43F5B38B838254D811238042
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32332d3233203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:47 +0000
ROA not before:           Mon 10 Mar 2025 13:44:47 +0000
ROA not after:            Mon 09 Mar 2026 13:49:47 +0000
asID:                     269254
IP address blocks:        45.183.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f6:5d:56:86:cb:10:5a:43:f5:b3:8b:83:82:54:d8:11:23:80:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:47 2025 GMT
            Not After : Mar  9 13:49:47 2026 GMT
        Subject: CN=7173BE5E09737DC32B05F81C137A499B7F456293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:a9:6c:b8:0b:b3:31:40:5b:6c:64:5b:6c:
                    0f:1d:aa:95:36:d7:db:a1:18:69:73:df:3d:b5:73:
                    ae:00:7b:b0:75:6a:6e:36:68:5f:d4:44:9d:41:40:
                    1a:e4:f9:93:58:79:5b:76:11:7a:5b:fd:43:03:82:
                    8e:fd:51:44:d1:bc:80:b3:2d:a8:05:45:cf:2b:c6:
                    1d:18:1e:3a:20:49:1d:cb:69:98:aa:97:8f:fb:c4:
                    e7:36:ee:a6:2b:69:40:e1:84:69:d1:1c:33:0e:d9:
                    d8:06:75:4b:83:41:af:f6:cd:8b:ff:e8:ed:15:78:
                    95:aa:18:97:cc:bd:09:1f:67:94:92:c3:fb:5b:64:
                    84:7a:24:45:94:b4:40:76:af:db:03:03:f1:e7:44:
                    ec:23:74:d9:a8:59:0f:52:f6:b1:dd:78:42:46:33:
                    ed:17:f9:f5:5a:67:65:40:58:10:69:79:f4:49:7e:
                    ad:81:c8:5f:ce:28:f0:09:08:da:6f:ac:dd:72:6e:
                    b5:dd:c3:0b:f8:91:df:d7:35:4d:9a:3d:4e:e7:24:
                    44:ca:c0:6c:07:4d:fc:c1:94:13:a7:3d:94:51:fc:
                    85:68:b4:28:bf:99:9f:90:f5:90:43:14:70:85:6b:
                    91:25:d3:8e:c1:b2:f0:14:99:1d:a6:6c:ca:00:87:
                    c7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:73:BE:5E:09:73:7D:C3:2B:05:F8:1C:13:7A:49:9B:7F:45:62:93
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32332d3233203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:5b:f0:56:39:16:54:96:41:d6:a4:dd:6e:df:32:03:42:
         77:a4:05:a5:9d:c8:d5:7d:bc:a5:0f:77:e5:e1:d3:c4:fa:2d:
         68:4c:72:1f:db:e3:6b:5d:49:88:8d:3f:26:bf:8e:16:31:e8:
         45:c3:f1:bd:8e:8b:e5:79:83:ea:9f:10:c6:22:fa:a5:7c:6d:
         52:45:9d:e4:de:20:c2:aa:79:4e:9b:8b:67:8c:9a:2a:15:c5:
         e7:80:4a:90:a4:a7:b1:f0:8f:48:89:e4:c3:56:ad:9c:26:58:
         18:fb:04:d8:cb:72:50:93:f4:89:9f:56:e1:31:c8:d9:a8:05:
         1c:47:c2:1b:d2:97:95:96:bd:6e:d7:b6:02:da:89:f0:d5:62:
         22:9d:83:80:a5:3c:10:c5:c4:22:e5:fc:41:55:86:80:87:7b:
         19:a7:c8:37:ac:39:77:d1:25:76:e1:1c:11:81:1f:59:39:03:
         91:f3:27:d7:cc:50:37:e1:19:42:32:ca:67:c0:2a:5d:01:9f:
         22:a5:d5:74:c6:14:9b:5e:50:2e:e3:15:7a:47:fd:b0:63:4d:
         01:0a:6a:12:09:f1:1d:95:52:94:22:9c:d5:ce:1f:7c:8f:46:
         aa:c4:16:23:b4:e3:43:ee:3b:3c:25:91:95:30:81:03:d6:5d:
         c1:d3:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:47 2025 by rpki-client