Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa
File:                     34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (raw, json)
Hash identifier:          X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=
Subject key identifier:   63:26:63:AB:9A:30:3C:BC:E0:4C:AC:36:C0:15:46:00:E8:FC:45:A1
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       6170E41CACB1D515B968AFB3C1DABD1E7C589A5C
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268137
IP address blocks:        45.169.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 13:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:70:e4:1c:ac:b1:d5:15:b9:68:af:b3:c1:da:bd:1e:7c:58:9a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=632663AB9A303CBCE04CAC36C0154600E8FC45A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:b0:35:7f:b7:64:e5:13:50:87:46:98:d3:
                    89:3a:5b:30:f4:55:34:84:c2:b1:ef:4d:c1:f8:66:
                    6b:f9:1a:58:96:ec:cc:8f:20:8c:e2:1f:84:cd:c4:
                    e2:d7:d4:b7:9c:c4:42:a9:c9:e7:26:ca:62:53:25:
                    e8:2c:a5:c7:5e:e9:d6:47:03:a3:92:b7:2f:17:89:
                    ab:44:96:e4:9c:e4:a6:92:8f:85:db:48:f0:3d:db:
                    ac:45:66:1e:65:55:7a:75:36:b0:62:d9:39:3a:5e:
                    98:45:13:a5:28:bf:5b:5e:27:40:05:1e:ca:74:0e:
                    b5:c7:10:ae:ad:2c:12:45:84:dd:23:32:dd:3d:c9:
                    7c:d3:eb:48:fa:ea:de:58:03:8e:7e:e3:da:a0:ef:
                    ed:64:10:6c:79:ef:57:f0:9e:03:2c:9d:c4:9b:80:
                    36:26:89:c6:fc:a9:85:3e:e1:ee:16:a6:ee:7f:f9:
                    09:0a:47:38:cd:24:b5:27:ce:fc:a4:04:f1:11:82:
                    44:60:b4:ec:e4:bc:d0:cb:ac:38:7b:67:eb:d8:87:
                    61:62:5a:3c:2d:27:00:a8:13:fb:b2:ce:78:dc:f8:
                    54:af:49:8b:ad:6a:e8:db:21:27:06:e8:40:ec:26:
                    54:36:e1:f7:44:c5:70:d9:7f:5e:e4:8e:c0:9b:5d:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:63:AB:9A:30:3C:BC:E0:4C:AC:36:C0:15:46:00:E8:FC:45:A1
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:9a:ac:1a:6b:1d:ef:e1:b1:f6:ee:0c:a1:d4:63:9f:9c:
         53:0e:56:30:16:7d:69:6f:4f:38:7b:c7:06:07:2f:df:a6:58:
         0b:8f:7e:68:ec:74:86:ec:db:d2:05:b3:c3:df:06:58:d4:88:
         eb:98:7e:3e:0b:bf:49:3d:03:70:05:27:c1:9a:55:da:b2:cb:
         07:0b:89:36:f0:11:3e:18:c0:49:5d:a7:5a:7d:8b:c2:72:b8:
         5d:6a:85:3b:ad:c9:69:23:85:f8:28:61:6f:aa:c1:74:44:71:
         53:04:bc:cd:46:c0:3f:2c:1e:f4:d3:08:45:71:f3:49:11:c5:
         8c:58:ae:e0:8d:f1:f8:93:c5:5e:d9:f7:53:8e:04:5e:35:94:
         f0:a8:e8:13:b9:9d:6f:ad:76:d0:0a:eb:a8:8c:df:69:2d:64:
         42:e1:28:62:d9:7f:a9:86:4c:6d:47:16:0e:6b:70:2c:c1:6a:
         f8:a7:60:d3:dd:92:f7:16:08:e3:eb:2a:22:22:cc:ad:c5:30:
         1f:cc:7b:76:63:6f:fd:e9:43:ab:33:88:90:06:7e:3e:ef:d5:
         d7:34:10:aa:34:d7:10:c9:14:de:04:11:b3:2f:40:8e:1e:2f:
         c9:95:de:eb:9c:03:e3:f8:01:bf:50:52:5d:34:63:b2:1e:79:
         0d:71:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:48:43 2025 by rpki-client