Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa
File:                     34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa (raw, json)
Hash identifier:          zpSX2oamKcSxoqwwx82EraMWBtUNWpQ8FtFA7rsbNeY=
Subject key identifier:   16:4C:F6:6D:10:06:69:E2:B2:34:AE:BC:6B:DA:38:1C:54:B0:17:EB
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       5CA02B820AB19D1F72B588C546C25FB9BD54CB3F
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa
Signing time:             Thu 06 Mar 2025 16:12:11 +0000
ROA not before:           Thu 06 Mar 2025 16:07:11 +0000
ROA not after:            Thu 05 Mar 2026 16:12:11 +0000
asID:                     268261
IP address blocks:        45.236.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 20:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a0:2b:82:0a:b1:9d:1f:72:b5:88:c5:46:c2:5f:b9:bd:54:cb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Mar  6 16:07:11 2025 GMT
            Not After : Mar  5 16:12:11 2026 GMT
        Subject: CN=164CF66D100669E2B234AEBC6BDA381C54B017EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:9b:69:b3:70:cd:5d:21:3e:99:6d:cf:c0:
                    d8:17:49:26:bc:0b:9b:b1:e3:86:b2:3c:df:b4:9f:
                    a7:af:ab:43:b3:8c:5b:33:51:ae:75:cc:cb:0a:62:
                    22:dd:f6:8a:fa:bc:b9:52:fc:cc:90:5e:43:73:0f:
                    73:b4:fa:15:9e:71:94:85:d0:ca:e4:a2:47:22:96:
                    7a:b0:06:59:f7:a3:b2:e0:2c:5a:23:b9:7d:64:4a:
                    95:f0:b5:f9:82:4c:8e:f2:25:5d:e9:d8:d2:73:5f:
                    0e:e4:b7:b6:4b:6e:7f:dc:8d:2c:1b:23:13:e4:e9:
                    71:81:37:2e:4b:4d:c6:bf:0c:7f:90:1b:4b:52:f1:
                    38:ad:90:b4:a0:77:fa:82:f2:09:d1:72:17:30:c2:
                    a9:17:af:df:90:d3:58:c6:c2:73:59:1e:d4:87:09:
                    ac:c8:ba:b6:0b:cb:3c:af:58:5d:3f:66:e4:de:19:
                    a4:31:ee:a3:e3:27:89:8d:ce:fc:cf:2e:1d:8d:87:
                    8c:ef:09:dd:34:84:67:f1:27:3d:e8:85:f0:96:28:
                    1f:23:9a:ce:ac:1d:80:15:cd:ed:a1:63:10:7c:85:
                    cd:60:6d:45:f3:47:08:ad:16:cc:8a:71:bb:15:84:
                    c3:b9:29:71:6d:df:26:2d:07:87:97:f7:07:a9:93:
                    be:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:F6:6D:10:06:69:E2:B2:34:AE:BC:6B:DA:38:1C:54:B0:17:EB
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:1a:60:7f:3c:38:b0:4c:6c:5e:13:97:6d:6c:1a:cc:f6:
         4c:46:61:e1:f7:33:bb:4b:48:5c:87:51:a1:ff:82:64:40:8e:
         3c:1a:20:6d:80:56:16:cd:15:23:8e:75:62:64:29:0d:4b:3f:
         09:ad:83:35:b6:b8:13:74:60:07:9a:9e:e3:1c:d9:9c:8b:36:
         e2:d2:e5:32:0a:8c:5a:ea:ce:0b:c3:86:32:2a:8b:d1:f4:d5:
         66:75:4d:36:d1:a7:0c:be:aa:16:9b:a3:e3:28:14:a8:56:b7:
         0e:78:ca:db:43:f5:f2:8d:57:f9:7d:a2:9d:21:cc:45:c8:23:
         27:62:e2:18:5d:c0:1b:c7:e3:12:f5:84:ff:00:90:3e:9c:93:
         39:27:de:3d:ac:e9:25:52:8c:75:0a:49:56:0b:60:c3:eb:80:
         aa:d2:fd:ba:d2:13:b0:79:d4:d6:34:10:a4:e5:6f:71:be:12:
         2b:5c:3e:43:6c:ab:81:48:ca:60:44:51:0e:e9:04:7e:9c:bf:
         46:25:de:1c:43:64:24:88:69:12:59:c4:b0:ca:34:f4:20:ad:
         01:c1:33:28:aa:94:78:eb:55:93:55:5f:c7:7b:20:12:9f:7e:
         1d:00:f2:65:5d:54:dd:ab:c1:09:1c:ec:0f:f7:c2:e8:48:1a:
         73:84:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:07:02 2025 by rpki-client