Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31392e302f32342d3234203d3e20323639323534.roa
File:                     34352e3138332e31392e302f32342d3234203d3e20323639323534.roa (raw, json)
Hash identifier:          b5u6D1dGPlvdhp+RvZnpQcEfKI/NXA01576kUO0SZzg=
Subject key identifier:   61:18:2C:95:FD:3A:34:71:D3:F5:EA:7C:D5:0E:48:06:0F:25:75:C5
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       40C02640EE63580FB8C78033566019732E267E7F
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31392e302f32342d3234203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:44 +0000
ROA not before:           Mon 10 Mar 2025 13:44:44 +0000
ROA not after:            Mon 09 Mar 2026 13:49:44 +0000
asID:                     269254
IP address blocks:        45.183.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c0:26:40:ee:63:58:0f:b8:c7:80:33:56:60:19:73:2e:26:7e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:44 2025 GMT
            Not After : Mar  9 13:49:44 2026 GMT
        Subject: CN=61182C95FD3A3471D3F5EA7CD50E48060F2575C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:1a:cd:5f:a7:c3:4e:81:a5:5a:7f:30:16:
                    83:3e:95:db:ba:4d:8d:c3:07:ad:9f:1d:21:fa:44:
                    cd:b6:19:c2:3f:4e:58:95:a0:ec:73:67:43:a1:bc:
                    a0:16:ae:ba:ec:7c:62:4f:8c:ac:ce:1e:c2:4b:f7:
                    38:d8:4d:d4:a6:bd:17:20:0b:6a:78:78:82:64:fd:
                    ec:e8:2e:6f:20:45:01:a7:d3:14:a3:74:b0:e7:df:
                    9a:df:19:54:46:d9:59:d7:95:16:aa:69:a6:1e:2c:
                    e4:ed:04:bd:c1:9a:42:b3:31:94:76:13:6f:73:e1:
                    c7:5b:08:0d:85:66:2e:6e:5a:9a:f8:cc:0d:c9:16:
                    f8:86:7d:c9:b6:a2:ec:bd:69:11:49:9f:57:5e:1c:
                    2f:5f:a4:54:f1:96:4a:5a:4e:89:7a:0b:8d:97:4f:
                    e6:ef:9f:3e:06:6a:25:b4:77:9d:d7:f0:09:de:58:
                    e0:18:30:e9:62:a5:ed:49:55:a1:70:ca:8b:f2:82:
                    b3:3c:87:d7:41:54:d1:57:d3:f5:3c:1d:18:44:dc:
                    20:c5:d4:7f:96:db:06:21:bf:1c:1b:91:f1:a5:ea:
                    fe:f0:21:cb:18:62:7d:ea:fa:cd:a8:4e:a0:40:22:
                    b3:67:2d:a5:33:7c:b4:c9:a6:45:6f:3c:01:bb:7d:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:2C:95:FD:3A:34:71:D3:F5:EA:7C:D5:0E:48:06:0F:25:75:C5
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31392e302f32342d3234203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:69:b8:c2:e3:88:ba:e6:8c:ec:56:72:4f:10:08:fb:e7:bb:
         30:19:ef:3b:b9:01:ff:1f:20:11:12:3c:5d:81:ee:a8:53:a8:
         40:f0:99:dc:cb:9b:52:90:59:90:dd:18:d4:bb:b5:8b:1b:62:
         c9:6a:7c:fa:a5:76:b6:93:5a:02:ca:33:0f:fc:0f:3a:54:f6:
         8a:e5:a1:cd:b4:3d:5d:db:2c:84:47:6a:c8:ef:c5:81:01:c5:
         ae:70:00:eb:35:fa:90:5a:5a:2d:87:e8:6e:3f:da:e1:49:9b:
         6b:76:7d:1f:5f:ee:96:64:eb:8d:66:0f:c8:c6:7f:24:7c:7c:
         1a:02:2a:ee:17:d7:00:54:15:ac:46:34:70:c6:6b:be:ce:11:
         5a:89:09:72:16:1f:0a:47:ab:d7:9e:8f:33:31:80:c1:46:7d:
         c3:20:03:1b:e8:86:1c:fe:e3:fd:f7:c2:ac:09:fd:41:f5:19:
         dc:91:0f:fc:6c:c0:0b:d8:b0:c6:e6:05:fd:de:11:82:a1:89:
         b6:0b:55:03:ba:68:00:14:24:66:1f:06:fe:33:37:0b:ce:36:
         89:03:b8:ad:84:f5:03:b5:ac:b2:5e:fc:b7:df:f3:79:3e:35:
         64:89:78:15:d1:64:69:19:f6:a5:c3:45:9e:96:99:f0:83:93:
         80:ff:8f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:29 2025 by rpki-client