Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37352e302f32342d3234203d3e20323638333535.roa
File:                     34352e3233392e37352e302f32342d3234203d3e20323638333535.roa (raw, json)
Hash identifier:          RgnoKFClmNRtewnKCRwSqAa5h1gEHZxmH5aWSuKAkeQ=
Subject key identifier:   43:68:FD:73:C4:47:53:67:6C:54:6A:D6:CA:BB:D8:FC:C2:FC:C3:7F
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       4BFC524E64F0B5D3C3835243D5E8281AA86FD000
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37352e302f32342d3234203d3e20323638333535.roa
Signing time:             Wed 16 Oct 2024 13:44:31 +0000
ROA not before:           Wed 16 Oct 2024 13:39:31 +0000
ROA not after:            Wed 15 Oct 2025 13:44:31 +0000
asID:                     268355
IP address blocks:        45.239.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fc:52:4e:64:f0:b5:d3:c3:83:52:43:d5:e8:28:1a:a8:6f:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Oct 16 13:39:31 2024 GMT
            Not After : Oct 15 13:44:31 2025 GMT
        Subject: CN=4368FD73C44753676C546AD6CABBD8FCC2FCC37F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c5:ea:92:26:6c:07:d9:4e:ef:1a:83:d7:99:
                    62:3a:e4:bd:c2:a7:63:84:33:86:94:79:e1:ae:10:
                    aa:0e:2a:22:09:ee:fe:d4:54:ed:b3:07:fe:2e:2a:
                    34:f0:42:1f:fe:f3:17:2e:b9:f9:c6:cd:5c:12:98:
                    07:35:e8:e7:27:dd:f1:72:6a:10:78:93:71:fa:bb:
                    e7:25:ef:98:0f:bb:1f:a0:fc:1a:c2:1e:56:4d:2b:
                    d8:aa:38:49:b5:75:00:12:a8:16:59:d5:a5:15:df:
                    c7:b9:c8:ff:8c:94:69:14:86:66:48:53:11:ae:f4:
                    a7:e7:65:09:b1:51:ac:ae:23:23:74:47:5d:ba:a6:
                    16:b0:6e:5b:09:2c:b2:be:d0:f4:6d:71:1b:ae:23:
                    2e:38:05:13:21:2a:11:46:a4:f5:fb:50:db:3d:77:
                    ba:4e:da:87:39:6f:88:92:ca:75:18:fd:9b:89:56:
                    f1:37:7e:b3:ed:6e:6e:54:92:10:66:01:22:61:4e:
                    b0:63:39:53:99:90:52:b8:50:d6:e8:c5:04:0a:81:
                    1e:2a:e2:bf:88:03:86:d0:88:39:fe:a7:17:c9:ee:
                    5e:05:3a:80:33:6b:18:7a:26:9b:15:64:d4:1f:77:
                    02:73:b1:15:8a:c7:d5:ff:c8:40:81:99:22:38:fc:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:FD:73:C4:47:53:67:6C:54:6A:D6:CA:BB:D8:FC:C2:FC:C3:7F
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37352e302f32342d3234203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:11:8c:62:c1:9e:59:65:53:d5:2f:25:b2:72:ff:b4:ea:95:
         7f:2e:0c:90:89:f8:26:a8:cf:13:8c:ef:ca:bd:da:48:58:8c:
         f2:8e:d4:0e:f5:81:bf:4e:d8:f6:62:81:1c:e2:b3:00:e7:36:
         01:2f:62:aa:c9:a6:ff:b5:56:04:86:f9:4e:63:a6:fa:42:60:
         4d:1b:6e:80:e7:d7:d9:21:a7:ca:ef:fd:6b:c9:02:3f:4d:95:
         d4:23:3d:91:3f:cb:25:7b:b7:ad:a2:99:b6:24:94:41:b4:8e:
         83:aa:1f:b2:b5:2d:b7:43:ca:20:a8:8b:d5:b6:bc:3f:4b:e7:
         51:6c:29:c0:e4:0c:1a:7c:f5:04:4f:73:94:2f:6f:87:25:d0:
         6b:ed:7b:a3:cf:24:27:f8:65:6a:0a:41:29:6c:1f:8e:e8:c8:
         f0:0d:4c:28:18:0c:9f:3a:a8:0b:08:86:a4:c1:45:96:5e:3d:
         c3:b9:b7:b3:52:ce:ff:5c:0c:d4:f4:99:ed:5b:29:c0:aa:a5:
         4f:a6:0a:0c:f8:5c:cd:18:12:82:06:68:5f:a4:75:0a:b5:97:
         51:d8:8e:1d:ad:8f:c9:38:0e:aa:3a:1b:d0:08:eb:b3:0e:98:
         c7:3a:b8:4d:e8:b9:0c:38:f8:3b:db:74:1b:32:af:8d:88:e1:
         88:e0:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:38:10 2025 by rpki-client