Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa
File:                     34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa (raw, json)
Hash identifier:          GrmFY4Ud1QwtZIv9gaPSt2vb2BFb6F8UMQRI83gXEa8=
Subject key identifier:   C6:AE:61:FA:33:F0:A6:52:41:22:7A:F7:B1:93:FA:17:2F:30:0A:23
Certificate issuer:       /CN=81359337B1BD7DC8E7A661186EEC0BEE389C0BB4
Certificate serial:       43BDB8CCA721128C443D45A59E7E20B4308038C5
Authority key identifier: 81:35:93:37:B1:BD:7D:C8:E7:A6:61:18:6E:EC:0B:EE:38:9C:0B:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa
Signing time:             Thu 04 Jul 2024 17:32:08 +0000
ROA not before:           Thu 04 Jul 2024 17:27:08 +0000
ROA not after:            Thu 03 Jul 2025 17:32:08 +0000
asID:                     268013
IP address blocks:        45.167.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.crl
                          rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bd:b8:cc:a7:21:12:8c:44:3d:45:a5:9e:7e:20:b4:30:80:38:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81359337B1BD7DC8E7A661186EEC0BEE389C0BB4
        Validity
            Not Before: Jul  4 17:27:08 2024 GMT
            Not After : Jul  3 17:32:08 2025 GMT
        Subject: CN=C6AE61FA33F0A65241227AF7B193FA172F300A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:d1:6a:79:3e:66:87:30:fd:87:f6:56:bc:
                    3e:08:fa:ff:d1:32:e8:f5:f5:91:9e:db:40:84:3f:
                    a5:f7:e7:58:21:29:b8:e5:ed:3a:6c:d0:73:51:ef:
                    d7:cd:8a:35:a0:30:ba:7b:26:dc:74:5e:f2:91:a6:
                    ad:f8:fb:67:d7:49:a0:45:dd:c9:90:17:c6:35:8c:
                    8b:1a:e2:2d:82:8f:b4:37:7d:84:c2:2c:99:f1:49:
                    85:49:63:ef:1f:72:28:09:26:b5:25:d4:97:c6:29:
                    b5:f7:64:80:2d:b0:f9:f2:e9:dd:3f:01:65:d2:d7:
                    41:37:2f:29:b3:d5:4a:93:e6:ae:e8:0b:ac:f7:72:
                    43:a5:3f:78:be:88:fe:4b:a6:e6:5e:95:3a:94:3b:
                    55:f5:cf:52:e6:1c:fd:f8:41:ec:fb:b1:66:82:ff:
                    c4:84:cc:e9:0d:4d:12:11:78:d7:76:f6:5a:cc:fe:
                    af:c5:a9:14:3d:de:0e:75:6e:99:93:19:89:42:5f:
                    4a:35:04:ed:8c:8a:c5:a0:4c:db:14:0d:15:f0:40:
                    5d:0f:b8:2d:3c:68:b6:3a:d2:7a:19:de:35:e9:1a:
                    af:27:bf:82:ee:23:ea:1d:89:f9:85:e7:f1:fb:af:
                    b0:3f:42:fe:7b:c7:93:92:41:d9:a9:0b:10:26:2a:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:61:FA:33:F0:A6:52:41:22:7A:F7:B1:93:FA:17:2F:30:0A:23
            X509v3 Authority Key Identifier:
                keyid:81:35:93:37:B1:BD:7D:C8:E7:A6:61:18:6E:EC:0B:EE:38:9C:0B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f0:9b:1a:c3:ba:b1:cd:a5:8e:3c:6b:01:d7:0c:d3:08:7f:
         07:06:f4:a1:f2:67:59:42:f1:89:59:c6:d0:83:ad:f5:30:28:
         e0:7c:b1:66:34:23:cd:62:90:c9:f2:eb:c2:55:d7:6f:95:50:
         20:4f:9b:0d:92:17:73:38:09:2f:7d:39:00:51:2f:d0:91:b2:
         2a:c3:b3:19:4a:1e:29:44:38:6f:a0:3d:d8:cb:21:ab:c2:b6:
         d4:e6:31:b2:d4:98:23:28:2e:0f:4e:6a:ae:16:c2:15:0c:a0:
         15:98:0c:18:c7:14:43:d6:89:74:a4:14:4e:ba:b2:09:15:c5:
         f8:12:aa:49:06:13:95:ed:d3:ae:28:27:9d:18:9b:a4:f1:b9:
         b0:35:86:9b:31:a8:98:e0:f4:57:07:d4:16:2c:e3:5f:94:25:
         2f:60:60:92:89:fa:b1:49:bc:c2:f1:4e:6e:70:0c:12:f3:0e:
         75:ce:cd:63:98:f5:f8:33:20:ac:3f:17:dd:7e:ed:2a:df:f9:
         da:b7:27:22:8f:47:00:6d:ca:73:46:d1:2e:29:87:f0:e6:35:
         d5:4d:7d:72:b3:02:ed:db:0c:03:c3:d9:c1:17:fd:fb:0d:a8:
         20:a7:f2:ee:04:62:7b:06:46:a3:d8:8d:1b:fb:ee:78:99:e5:
         dc:37:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:54 2025 by rpki-client