Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/34352e3232382e39362e302f32322d3234203d3e20323637303538.roa
File:                     34352e3232382e39362e302f32322d3234203d3e20323637303538.roa (raw, json)
Hash identifier:          5FNu6OiEs92vCxFqtAHez4FJ3a9UuGefadMQFR0f41I=
Subject key identifier:   CE:AD:6E:6C:91:4C:85:B9:86:C2:03:A5:B8:CC:ED:D1:61:D3:E6:AD
Certificate issuer:       /CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
Certificate serial:       06EBC5E8F7E27717F1384E6E90D78475E679AFF3
Authority key identifier: 9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/34352e3232382e39362e302f32322d3234203d3e20323637303538.roa
Signing time:             Thu 06 Mar 2025 06:51:54 +0000
ROA not before:           Thu 06 Mar 2025 06:46:54 +0000
ROA not after:            Thu 05 Mar 2026 06:51:54 +0000
asID:                     267058
IP address blocks:        45.228.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl
                          rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:eb:c5:e8:f7:e2:77:17:f1:38:4e:6e:90:d7:84:75:e6:79:af:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
        Validity
            Not Before: Mar  6 06:46:54 2025 GMT
            Not After : Mar  5 06:51:54 2026 GMT
        Subject: CN=CEAD6E6C914C85B986C203A5B8CCEDD161D3E6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:36:22:af:ba:bb:b6:8e:41:c9:b7:98:81:
                    d8:8f:52:e8:08:2b:ef:e8:92:b3:5c:36:07:c5:1d:
                    84:7d:79:b8:3f:41:e3:db:8a:f1:b7:d0:84:8f:0e:
                    45:8d:08:cf:3e:20:fd:42:1e:32:04:0e:b8:55:af:
                    9f:45:0c:bd:ee:3d:d3:31:20:12:e5:ad:91:3d:2b:
                    55:4e:54:c0:65:89:1b:27:22:e5:15:32:27:7e:25:
                    60:0e:b3:6c:cf:dc:a3:64:bf:ae:e8:90:fd:fb:c5:
                    88:1a:5b:60:74:73:59:72:94:b9:b2:68:f5:74:36:
                    44:94:28:2a:96:21:35:59:3f:88:b8:f8:8e:9a:a7:
                    e1:60:43:ce:e7:a1:ed:9d:b3:b0:bd:26:34:34:e1:
                    0d:7d:80:d4:01:df:7c:bf:75:a1:c5:a6:c4:56:79:
                    c5:81:d3:7c:b9:e5:a9:1f:54:12:8a:2a:34:d1:ff:
                    3f:42:49:3a:84:19:80:86:6e:05:67:9e:d1:3b:da:
                    3f:71:f0:3e:bc:58:2e:76:d4:24:c8:06:3f:64:e5:
                    ab:28:e5:e5:16:3a:65:83:93:23:39:e5:ad:55:77:
                    48:ee:cf:d4:e7:43:52:e1:39:d5:4e:9a:aa:80:fb:
                    76:f3:bb:9b:10:ba:9e:24:87:f5:2e:5e:c2:ff:ed:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AD:6E:6C:91:4C:85:B9:86:C2:03:A5:B8:CC:ED:D1:61:D3:E6:AD
            X509v3 Authority Key Identifier:
                keyid:9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/34352e3232382e39362e302f32322d3234203d3e20323637303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:b4:59:6d:52:71:f2:60:51:50:90:17:b5:a8:a6:63:14:
         60:01:b0:83:ca:31:29:d0:6b:4d:f9:ef:6f:7f:10:9d:a5:48:
         a6:4f:2c:48:41:79:0a:03:fd:ae:40:53:b2:46:8d:42:ce:db:
         8c:61:35:3e:7e:9a:e4:83:b9:f5:3b:8c:b5:8e:3c:4c:8e:9f:
         68:26:77:d5:3f:95:ae:2a:94:01:f5:29:17:62:e4:76:bd:fa:
         0f:0c:de:be:b9:10:93:99:83:aa:11:52:55:ad:60:0d:35:42:
         a5:3c:c9:12:cf:1e:e9:27:2b:59:1d:01:d8:a8:db:74:cb:22:
         b4:a7:66:5f:64:88:78:5d:60:8a:a8:57:36:d1:8f:4d:e7:a6:
         88:f3:9a:2a:5e:79:cb:bb:39:2c:02:f8:bc:df:31:39:b4:3b:
         bd:8a:3d:a6:70:c0:7b:05:95:eb:ba:c0:a0:16:ce:1d:23:36:
         f0:1a:ec:b8:9e:ee:ba:74:ec:ec:de:a9:5f:a4:f8:8d:dc:86:
         cb:0a:bc:3d:71:56:8d:13:00:4f:74:5a:f6:38:fe:8f:3b:da:
         df:63:78:47:ed:e5:7f:c4:c6:62:a4:55:41:94:f8:0e:79:bc:
         c8:e2:d2:b8:05:cc:dc:22:46:0b:78:12:80:ea:64:ce:a8:a8:
         cd:e7:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:17 2025 by rpki-client