Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa
File:                     34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa (raw, json)
Hash identifier:          Tb/TbO3gsRPJ9qIQuAEQONr/MD3iSMx/6JnEkvMuwLk=
Subject key identifier:   35:19:57:CA:E9:0D:98:E5:74:7E:BA:B0:99:45:F1:00:6F:93:B2:D7
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       666866AABA71A396819C6ADD312F15BE15B84B1E
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa
Signing time:             Thu 06 Mar 2025 16:12:09 +0000
ROA not before:           Thu 06 Mar 2025 16:07:09 +0000
ROA not after:            Thu 05 Mar 2026 16:12:09 +0000
asID:                     268261
IP address blocks:        45.236.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:68:66:aa:ba:71:a3:96:81:9c:6a:dd:31:2f:15:be:15:b8:4b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Mar  6 16:07:09 2025 GMT
            Not After : Mar  5 16:12:09 2026 GMT
        Subject: CN=351957CAE90D98E5747EBAB09945F1006F93B2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:cd:51:f7:69:06:95:f8:54:7a:6e:19:fb:
                    0a:70:a7:6b:87:0e:6a:19:db:dc:4f:f3:55:3f:c9:
                    9c:e8:3c:cb:ad:ce:39:62:b6:d0:e7:84:61:79:8d:
                    40:d8:17:44:e6:8f:91:bf:82:61:e6:49:af:f3:15:
                    6c:0a:a5:b3:57:82:99:44:da:7e:b8:e6:2f:da:4b:
                    fd:2d:35:00:b6:3e:0b:dd:bc:a9:a8:7f:6b:93:fc:
                    c2:4c:90:a6:06:4f:12:37:71:e4:0b:f9:fd:e8:6c:
                    0b:81:ca:fc:88:8b:a4:2d:66:de:9e:1b:3a:fc:25:
                    29:3c:22:38:93:26:0f:98:31:ff:41:58:cc:4c:08:
                    d4:a3:d7:ee:1c:df:07:33:e9:18:00:0d:51:75:b8:
                    ed:76:62:5f:b4:2f:61:4e:3f:ad:b4:e6:89:6c:98:
                    3b:2f:64:18:7f:ae:0f:2a:1e:69:4f:4c:31:6b:c5:
                    00:53:14:73:fb:66:00:89:0c:34:7a:b6:7e:76:6d:
                    dd:ef:44:6f:90:bf:0d:b0:af:67:9b:8a:cb:fd:71:
                    4f:2a:59:a9:c8:a8:5a:2c:9c:75:0f:d5:c6:d3:7a:
                    76:37:b7:2d:d8:20:93:7d:50:0b:02:dc:d8:e8:0c:
                    cc:a1:bd:f5:c7:54:71:7a:7b:3d:f4:44:e0:5c:87:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:57:CA:E9:0D:98:E5:74:7E:BA:B0:99:45:F1:00:6F:93:B2:D7
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:65:26:da:85:53:60:0d:0f:83:8b:18:a2:0f:6c:d7:fd:34:
         6a:d8:2d:53:d9:ea:6c:88:76:dc:e7:58:97:6a:cc:db:5c:fe:
         a2:c9:cb:8c:bc:61:74:0f:d1:b8:8d:51:4a:c4:d1:eb:31:d4:
         d1:5b:53:cb:66:74:d3:19:3b:22:43:8c:86:be:cc:2a:ad:8b:
         54:97:91:02:c7:8f:b4:6a:49:6c:39:ba:cb:16:59:ca:0e:a2:
         3f:e7:0e:1e:08:6a:5d:6e:77:53:5f:ad:53:4c:3c:1d:1b:be:
         18:cb:24:97:4d:ce:8b:1f:87:9f:1c:c3:0b:65:e4:37:15:78:
         10:a6:dc:7d:be:7e:c2:f1:48:e0:dd:38:ee:a4:b9:13:e4:29:
         78:3b:82:6d:47:9d:1d:20:d4:3d:bc:3e:ce:c4:00:b9:6d:62:
         0f:84:00:ab:f7:9a:4f:47:78:43:ae:1f:59:fd:cb:55:26:f7:
         ce:17:98:8e:24:d4:22:e1:f8:41:22:58:1a:53:10:be:6e:fb:
         bc:7e:03:56:b4:43:80:b5:a3:37:e7:6e:72:24:ae:89:25:3f:
         a7:61:75:45:09:0e:a8:b1:98:19:c2:c1:a8:e5:32:bf:ff:7c:
         87:3c:33:c9:ca:19:d3:a6:69:32:18:38:de:49:70:98:91:8a:
         37:41:bc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:47:12 2025 by rpki-client