Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32342d3234203d3e20323639323534.roa
File:                     34352e3138332e31382e302f32342d3234203d3e20323639323534.roa (raw, json)
Hash identifier:          Q6nf8rzLSj+rYIcqyXSln7mmNq0IIseCkhPedPCNukk=
Subject key identifier:   CE:3E:C1:39:E1:1C:1B:30:A8:A0:43:DD:6B:2C:6F:3D:C3:58:3D:4D
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       211AF4A2DEB6E1059247491C428D784AE6AB9A44
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32342d3234203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:45 +0000
ROA not before:           Mon 10 Mar 2025 13:44:45 +0000
ROA not after:            Mon 09 Mar 2026 13:49:45 +0000
asID:                     269254
IP address blocks:        45.183.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1a:f4:a2:de:b6:e1:05:92:47:49:1c:42:8d:78:4a:e6:ab:9a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:45 2025 GMT
            Not After : Mar  9 13:49:45 2026 GMT
        Subject: CN=CE3EC139E11C1B30A8A043DD6B2C6F3DC3583D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:45:d8:a9:48:7f:1b:6a:d5:d3:33:35:72:
                    32:06:62:9d:ae:d4:2c:5a:f5:43:5f:dd:df:3b:e5:
                    d2:6c:2f:92:b2:b8:96:17:ab:76:ce:01:a9:35:16:
                    db:30:6f:8e:d5:6c:cc:7b:f5:d5:83:62:c7:f4:e3:
                    c8:fe:63:aa:40:0c:6e:39:4e:02:dd:ab:91:44:4b:
                    8d:e2:c1:d7:bb:ec:5f:3c:f5:67:bc:36:7a:04:81:
                    30:42:85:50:ab:52:f0:fa:7e:30:fe:4d:78:e1:9c:
                    37:e8:9f:d1:a8:be:a8:f4:51:d3:71:70:85:11:24:
                    bd:f1:ac:9d:49:fc:8e:95:76:16:2d:9c:ea:b1:16:
                    50:8b:23:bb:ae:3f:07:5f:89:2e:cb:42:92:a8:19:
                    10:0b:9c:d4:c5:3c:e0:5f:63:a7:67:d0:f9:b6:e4:
                    30:92:c7:aa:16:02:12:ed:03:8c:31:62:02:d3:0c:
                    c8:4d:c5:b1:67:c5:f0:3c:33:bd:8f:7a:3b:0d:4b:
                    b8:6a:6e:16:7b:40:0a:a3:90:ce:f1:71:d7:cc:e7:
                    46:8f:2e:86:e5:dd:80:c5:c5:9f:0a:b5:14:45:ef:
                    71:5c:a0:00:78:e0:4e:bc:2a:22:c9:be:29:b9:d3:
                    03:d0:2d:4d:63:a3:d3:35:5c:3e:54:13:77:3c:a6:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3E:C1:39:E1:1C:1B:30:A8:A0:43:DD:6B:2C:6F:3D:C3:58:3D:4D
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32342d3234203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:ef:48:cf:43:28:3a:d7:fb:86:eb:35:be:64:8f:e9:63:10:
         c4:0f:81:f4:95:fc:52:52:66:6a:49:97:ca:9e:d8:df:65:99:
         c1:ce:b5:88:c8:d8:3c:9e:0a:6e:55:37:4a:2b:bb:c9:11:ec:
         a4:2c:28:b6:07:d3:f0:ec:24:90:ac:f8:1f:2e:bf:6c:f8:6a:
         6a:27:aa:5f:37:67:90:67:05:12:4f:bb:f2:d4:34:35:cb:62:
         ac:83:cf:34:64:9f:11:ee:f1:29:57:cf:ce:28:1c:bd:63:0c:
         a6:0e:26:35:13:2e:6f:2e:64:4e:87:bb:35:8d:20:26:11:0f:
         92:fa:4c:c3:b9:61:bb:c1:a7:40:b6:fc:ae:51:d3:59:7c:df:
         f3:3e:8f:de:59:40:46:e8:b8:87:e6:f1:fd:aa:9a:65:9a:f1:
         46:a9:73:05:6b:fc:67:3d:4a:0e:cf:20:4e:42:ff:6d:b2:df:
         0d:9c:e1:43:23:4e:da:5e:7f:f0:68:9f:e0:04:dc:1f:73:9a:
         32:ee:be:09:2f:50:86:7f:5d:32:34:04:2f:37:b4:96:af:04:
         4b:73:8d:a9:65:9b:9b:93:d2:bc:92:bd:92:be:cc:87:48:f5:
         8b:0a:19:c9:e5:1a:ca:47:99:f8:5b:fb:84:20:1c:65:0c:b0:
         a8:90:c4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:32 2025 by rpki-client