Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa
File:                     34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa (raw, json)
Hash identifier:          4HM3wZxIGSY5X3lpg1NtAXJNAt86CptL07G8QXjYcAU=
Subject key identifier:   21:C3:29:14:17:07:B3:28:1C:73:86:B9:0D:11:D4:96:D9:5D:83:30
Certificate issuer:       /CN=96B1445D3AF168857BE9230D3981B34AD388C6BE
Certificate serial:       166EE5417D7F8D5E6F5F0920A151CB12BAD26736
Authority key identifier: 96:B1:44:5D:3A:F1:68:85:7B:E9:23:0D:39:81:B3:4A:D3:88:C6:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B1445D3AF168857BE9230D3981B34AD388C6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa
Signing time:             Fri 28 Feb 2025 22:05:22 +0000
ROA not before:           Fri 28 Feb 2025 22:00:22 +0000
ROA not after:            Fri 27 Feb 2026 22:05:22 +0000
asID:                     271582
IP address blocks:        45.165.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.crl
                          rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B1445D3AF168857BE9230D3981B34AD388C6BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 00:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6e:e5:41:7d:7f:8d:5e:6f:5f:09:20:a1:51:cb:12:ba:d2:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B1445D3AF168857BE9230D3981B34AD388C6BE
        Validity
            Not Before: Feb 28 22:00:22 2025 GMT
            Not After : Feb 27 22:05:22 2026 GMT
        Subject: CN=21C329141707B3281C7386B90D11D496D95D8330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:06:b0:30:54:46:cd:ff:4d:b3:65:b6:2b:
                    ff:fd:31:bf:d3:b6:c4:15:f2:73:bd:19:80:31:4b:
                    26:40:87:c8:44:9c:69:10:64:be:03:ee:e1:63:47:
                    e1:cd:f3:46:fb:44:3c:9d:49:89:13:52:5e:bd:eb:
                    2b:65:86:96:02:78:c3:df:d9:3e:ae:3c:d0:5f:44:
                    e9:f7:e7:9d:ba:80:4a:55:aa:a6:a2:a7:ff:f8:b7:
                    34:5d:1c:70:40:27:d7:74:54:fe:cf:fd:bd:6e:c9:
                    4f:26:d7:c3:23:10:25:74:ea:da:29:61:36:5a:0a:
                    35:02:13:36:2a:49:68:97:ce:38:03:b9:79:81:1c:
                    b8:00:4c:28:c4:fb:1a:a3:71:ef:1d:2d:06:95:60:
                    60:bb:34:e2:d8:0e:f4:18:a0:a6:1a:83:f1:ee:75:
                    45:ec:65:49:29:32:7b:3b:dc:36:66:e5:71:5c:55:
                    d7:44:2f:70:b8:36:ae:ad:55:5f:8d:b1:19:02:0f:
                    ba:2b:ca:c8:1a:ec:12:7d:68:ca:5c:18:55:2e:ca:
                    5f:c0:12:dd:73:a4:16:70:53:ee:00:cc:05:78:09:
                    5b:d4:13:cf:43:7e:ee:61:29:1c:84:89:78:20:77:
                    24:6a:a0:06:fd:ee:c7:86:1f:62:cd:a1:e5:4e:d9:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C3:29:14:17:07:B3:28:1C:73:86:B9:0D:11:D4:96:D9:5D:83:30
            X509v3 Authority Key Identifier:
                keyid:96:B1:44:5D:3A:F1:68:85:7B:E9:23:0D:39:81:B3:4A:D3:88:C6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B1445D3AF168857BE9230D3981B34AD388C6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:50:32:7c:be:09:26:bf:82:1e:b6:58:c5:7c:18:ab:e0:3c:
         47:3f:6e:f3:67:85:b8:4a:e6:14:10:66:95:cf:96:2d:f1:0e:
         cc:18:54:84:b4:62:84:68:fb:a1:4a:95:cd:8c:b9:5a:df:90:
         15:1d:e4:e3:e3:dc:11:ad:42:97:5c:b1:6b:0e:64:ab:67:d0:
         44:d3:97:c6:8d:af:5c:00:87:3c:4f:44:87:16:be:1a:49:e8:
         98:82:ec:3a:57:42:8c:14:b1:3b:ce:c3:82:49:ad:77:9a:6b:
         a9:a2:6c:33:6e:43:14:c6:b9:ed:a7:16:de:cb:20:29:5c:8a:
         ed:97:97:7a:84:27:83:35:e7:d5:c8:f3:32:d3:6b:c7:33:b3:
         58:0a:20:62:7f:62:60:85:02:9e:5f:c5:c3:aa:30:e7:43:27:
         60:2c:6e:d2:b2:bd:9d:55:26:0e:1f:67:0b:66:e2:29:5e:19:
         c5:41:71:38:e9:c3:cb:3b:b8:85:9d:c6:2f:dc:c2:0d:01:25:
         d5:63:af:de:40:14:c2:ee:a8:81:c4:ae:99:b9:b5:71:c3:6f:
         50:06:f2:7a:bc:a8:6e:7b:2e:ca:60:d4:c6:17:b1:2f:37:24:
         37:2d:f1:4e:eb:5c:88:e0:23:39:68:ce:07:03:a1:ae:df:5c:
         f1:58:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:19:25 2025 by rpki-client