Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32322d3234203d3e20323637313335.roa
File:                     34352e3232392e3232382e302f32322d3234203d3e20323637313335.roa (raw, json)
Hash identifier:          GdifItRlTtUlYcbUBqRZVfxiaRGlD4yfqKYk4YAwsqU=
Subject key identifier:   9C:EA:8A:22:52:9D:A8:FE:77:0F:B8:67:BC:D0:F6:18:C5:6F:E3:88
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       125F1D4C7D5815362D0FA246C609A102437A24BB
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32322d3234203d3e20323637313335.roa
Signing time:             Sat 01 Mar 2025 12:15:09 +0000
ROA not before:           Sat 01 Mar 2025 12:10:09 +0000
ROA not after:            Sat 28 Feb 2026 12:15:09 +0000
asID:                     267135
IP address blocks:        45.229.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
                          rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5f:1d:4c:7d:58:15:36:2d:0f:a2:46:c6:09:a1:02:43:7a:24:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Mar  1 12:10:09 2025 GMT
            Not After : Feb 28 12:15:09 2026 GMT
        Subject: CN=9CEA8A22529DA8FE770FB867BCD0F618C56FE388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:ce:34:f0:64:6e:de:56:e1:0d:16:f4:6c:
                    90:f4:94:15:78:cb:47:35:01:1b:01:2a:d7:08:cd:
                    d1:e9:e7:d4:ee:77:e1:55:55:0d:ef:01:f2:48:60:
                    92:ab:da:16:42:41:0a:93:65:54:bf:10:17:4e:8f:
                    77:a4:e6:36:c3:6b:92:97:2a:5b:dd:1e:11:cd:e4:
                    e2:eb:84:06:79:2c:4f:f0:c9:9a:03:82:8d:fa:96:
                    a2:e5:02:73:18:6d:2d:5b:78:12:63:33:8b:f6:8b:
                    41:32:4e:5e:d8:fe:20:d1:cc:9f:95:3a:00:7f:c9:
                    23:98:4f:c7:2d:af:54:c4:b7:db:82:c3:d5:34:0f:
                    90:bf:e8:f6:18:0e:39:ac:d2:18:dc:ed:ef:87:bd:
                    e4:3c:47:e9:ec:ad:14:1c:a1:f2:3d:aa:5d:bc:a8:
                    af:0a:99:3f:f3:d8:b5:7b:27:c5:d9:48:a8:46:e7:
                    0c:12:0c:be:5a:a4:ce:2e:c5:cd:2c:cf:b7:5d:c5:
                    97:1c:a6:6c:ce:1e:e0:10:3e:93:a5:5a:0d:0e:63:
                    65:a9:fa:6a:1d:c2:3e:8e:f1:b9:7a:46:ee:bd:7e:
                    10:4c:e0:b2:e3:46:e0:7f:ba:58:d2:6d:a3:ec:7a:
                    77:1a:bc:39:92:f4:44:f5:70:7f:7a:32:8b:8f:93:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:8A:22:52:9D:A8:FE:77:0F:B8:67:BC:D0:F6:18:C5:6F:E3:88
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32322d3234203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:e9:a8:c4:19:b4:97:5f:c9:d3:38:e1:79:d3:02:f1:50:d0:
         e6:be:b3:12:10:08:f9:48:07:42:9f:ec:7c:8a:e7:b5:c0:45:
         14:ff:fb:b1:4d:79:dd:30:7c:f0:d6:c4:ae:fb:ec:c6:59:5c:
         f7:18:01:db:2d:4e:8c:ae:ec:a3:16:a3:c6:0c:f7:8e:cc:6b:
         c6:98:b9:1f:93:8a:86:0a:d1:e0:4d:ec:c7:6c:49:7a:c3:a8:
         11:b4:c2:a3:a3:c2:83:9e:59:5f:df:49:a9:7e:e7:f8:23:6b:
         9f:e6:9b:33:50:ba:0a:df:13:bd:f8:ad:d3:ce:04:dc:a0:21:
         49:64:02:9a:ae:6b:0c:9f:1c:f9:d1:0f:5d:bf:df:96:29:d3:
         b3:01:ab:fc:73:aa:55:55:4a:23:88:22:f3:45:e0:4a:96:0d:
         a2:c1:5f:a4:44:3b:e7:97:51:cd:46:fc:e0:7b:4c:3a:fb:95:
         f5:ef:9a:9c:7c:df:be:06:b1:89:eb:f7:50:7f:25:73:44:ae:
         fa:c1:9e:60:29:71:5d:20:ea:ef:d2:b6:a2:e8:10:de:cb:77:
         51:13:e8:7b:8d:a0:1c:80:fc:9b:04:df:2c:6f:23:73:3d:58:
         ff:90:94:6a:ea:e3:b4:96:79:af:0f:6e:20:8c:3b:fb:67:d5:
         1f:f8:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:06:35 2025 by rpki-client