Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
File:                     34352e352e38382e302f32322d3232203d3e20323636303834.roa (raw, json)
Hash identifier:          K84xCId8+1cs5H3nmPDltEdVWLmM3+PGwnAlVZb81fo=
Subject key identifier:   8A:C9:5D:66:CE:07:AB:B5:EE:34:E2:CE:9E:F8:A2:A0:74:2A:02:55
Certificate issuer:       /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial:       7B434844D3BFC3C5B6857C112E51EB5B9A9E1DA7
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
Signing time:             Thu 06 Mar 2025 10:52:47 +0000
ROA not before:           Thu 06 Mar 2025 10:47:47 +0000
ROA not after:            Thu 05 Mar 2026 10:52:47 +0000
asID:                     266084
IP address blocks:        45.5.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
                          rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 06:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:43:48:44:d3:bf:c3:c5:b6:85:7c:11:2e:51:eb:5b:9a:9e:1d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
        Validity
            Not Before: Mar  6 10:47:47 2025 GMT
            Not After : Mar  5 10:52:47 2026 GMT
        Subject: CN=8AC95D66CE07ABB5EE34E2CE9EF8A2A0742A0255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:54:79:46:36:6f:66:67:c1:53:0e:d7:79:
                    ec:e1:ff:3d:6a:3f:c2:ec:54:92:9e:7d:bd:f4:4b:
                    f5:a7:65:33:26:21:20:aa:d4:81:9f:db:54:f8:ad:
                    e2:67:80:d5:ce:0b:38:b3:4e:97:69:7b:8a:05:5b:
                    2e:be:fe:31:ac:8b:1b:96:ac:dc:42:98:cf:c8:02:
                    9a:be:89:d6:e4:03:05:2a:d2:fa:fc:d6:69:a8:4b:
                    33:89:7d:46:52:f9:42:8a:3b:b1:b8:9b:46:82:dd:
                    b9:e8:31:cc:d9:21:90:43:71:75:45:2c:fb:a2:ac:
                    f1:4c:9c:cc:61:b0:fe:40:fc:fb:84:0f:1b:dd:b1:
                    c4:a3:60:44:42:76:a6:9f:eb:8f:63:f5:b2:9a:18:
                    51:0b:5c:67:a0:a0:cf:80:4b:8c:3d:a1:11:f4:48:
                    81:ad:23:24:00:fc:ad:a1:3d:72:32:63:75:71:30:
                    1f:83:d9:a3:28:d3:18:2e:0c:07:54:ab:39:73:bf:
                    83:26:91:79:4d:7a:eb:77:82:b8:ef:f1:8f:15:d6:
                    e2:fe:a4:8c:f8:33:ab:e4:5b:db:d3:1b:46:d3:04:
                    cf:10:79:7e:71:6f:bd:9f:9e:df:80:8a:f5:38:bf:
                    d2:53:1b:8b:c4:1a:f5:3f:9a:90:1c:b1:5a:79:04:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C9:5D:66:CE:07:AB:B5:EE:34:E2:CE:9E:F8:A2:A0:74:2A:02:55
            X509v3 Authority Key Identifier:
                keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:18:d1:5b:2c:14:cf:d3:e6:98:ac:fc:9a:b2:17:0d:3b:
         ca:a5:d6:78:c9:7d:c1:db:ab:d4:17:64:0f:42:3b:19:49:61:
         93:64:6c:fe:36:a9:b4:f8:81:11:21:8b:91:de:66:e5:7b:41:
         77:a5:12:29:44:7e:e5:c8:28:69:18:16:a8:e5:be:f1:e4:ff:
         c4:b9:3c:cc:3a:52:ee:86:8a:60:e4:8b:ef:b9:b0:44:a6:e2:
         2f:e2:19:0e:23:7b:91:b3:80:df:3e:65:2d:60:ad:2d:dd:c6:
         74:d5:40:67:61:18:b4:b1:f1:b5:23:2a:c8:d1:90:33:65:c7:
         59:6b:9a:f8:b2:ad:5d:b8:eb:92:a1:b3:15:cd:b6:26:b3:2e:
         25:63:cb:1e:ee:5b:22:dc:84:45:e6:d6:38:14:19:7e:db:62:
         d0:fb:86:6f:f7:84:e5:01:5f:89:20:d2:59:e1:08:dd:0b:ef:
         1e:9a:2a:f8:08:83:74:3c:ca:eb:59:74:6c:d8:0a:c9:4b:46:
         97:3f:18:fa:5a:29:98:92:ab:59:24:4b:53:e7:98:48:fe:b5:
         11:a4:23:a8:f9:b4:80:61:be:95:86:b6:a2:46:75:a5:51:52:
         87:de:fa:20:93:85:09:33:1e:bf:2d:8b:4c:71:22:d3:f7:20:
         c3:db:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:48:55 2025 by rpki-client