Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135352e302f32342d3234203d3e20323638303133.roa
File:                     34352e3136372e3135352e302f32342d3234203d3e20323638303133.roa (raw, json)
Hash identifier:          xmrucIhe1YpI/m6n6fntmppGfYk1pVGrbS3Pilhs7xg=
Subject key identifier:   4A:18:AF:CE:97:B5:85:8D:CC:84:E3:30:8A:A0:8A:7C:CF:86:85:C7
Certificate issuer:       /CN=81359337B1BD7DC8E7A661186EEC0BEE389C0BB4
Certificate serial:       62C9E051EFD22D792D21360FB6E712C95B66DE21
Authority key identifier: 81:35:93:37:B1:BD:7D:C8:E7:A6:61:18:6E:EC:0B:EE:38:9C:0B:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135352e302f32342d3234203d3e20323638303133.roa
Signing time:             Thu 04 Jul 2024 17:32:08 +0000
ROA not before:           Thu 04 Jul 2024 17:27:08 +0000
ROA not after:            Thu 03 Jul 2025 17:32:08 +0000
asID:                     268013
IP address blocks:        45.167.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.crl
                          rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 02:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c9:e0:51:ef:d2:2d:79:2d:21:36:0f:b6:e7:12:c9:5b:66:de:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81359337B1BD7DC8E7A661186EEC0BEE389C0BB4
        Validity
            Not Before: Jul  4 17:27:08 2024 GMT
            Not After : Jul  3 17:32:08 2025 GMT
        Subject: CN=4A18AFCE97B5858DCC84E3308AA08A7CCF8685C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:48:6a:72:c5:63:4a:6d:9c:37:4a:93:cd:
                    dc:ce:b5:dd:26:8a:d0:5f:78:7f:78:32:25:0f:82:
                    ea:51:44:d7:a1:25:78:b6:53:4a:f2:95:ea:c5:5a:
                    6d:21:56:2b:43:b7:01:3e:90:94:15:4c:fa:31:b6:
                    f4:5f:c0:97:17:d7:c1:3e:06:90:8e:40:00:ab:de:
                    36:94:45:73:b8:57:6f:42:ec:ef:b4:55:10:bf:31:
                    cb:89:c3:6a:4c:f0:7f:b9:a0:21:de:e4:a2:ae:37:
                    f6:8d:0c:e8:9b:c0:0b:f0:34:6b:1c:fc:46:40:68:
                    c6:13:89:f1:64:39:3f:7b:dc:6e:a0:ad:d0:7b:2b:
                    65:34:6d:7b:15:84:80:f3:67:c8:47:77:ef:0a:92:
                    4b:c2:de:2a:1b:6d:04:70:9d:c7:d8:6e:df:01:e0:
                    c3:85:e5:e0:ab:48:a4:b3:b8:3d:d4:0b:2f:67:d7:
                    15:8b:b2:83:69:a5:b3:15:a2:03:fc:78:3a:e2:52:
                    54:67:26:ec:d2:0c:10:6a:10:f7:66:72:9e:17:af:
                    c2:90:84:5b:e8:3a:ce:2c:5c:c6:b2:72:51:27:5c:
                    c2:1f:f9:48:3b:9e:b6:0a:ab:52:25:c5:5b:98:75:
                    82:8e:a4:cb:74:c6:c2:1a:99:4d:a7:3d:37:ec:47:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:18:AF:CE:97:B5:85:8D:CC:84:E3:30:8A:A0:8A:7C:CF:86:85:C7
            X509v3 Authority Key Identifier:
                keyid:81:35:93:37:B1:BD:7D:C8:E7:A6:61:18:6E:EC:0B:EE:38:9C:0B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135352e302f32342d3234203d3e20323638303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:71:12:1c:6f:a0:d8:31:0c:51:94:67:c9:eb:ef:cb:56:c0:
         a4:be:43:2f:5f:2a:7d:02:93:b3:4b:21:f4:11:58:c0:0b:d8:
         ff:10:0e:59:a2:a2:c0:03:ca:f2:3e:02:9e:d8:05:ee:7f:ef:
         fe:1e:74:ee:a9:69:f0:4f:33:f9:ab:ec:0d:d3:4d:e5:e1:e1:
         5f:08:f7:28:95:6b:de:e4:a9:a8:c7:59:19:98:a5:66:5f:62:
         e3:9a:45:5c:c6:06:04:7b:2d:ba:02:d3:35:d3:51:b2:b8:18:
         f9:45:c5:b4:11:2f:35:3f:ff:88:9e:05:3e:84:03:23:f1:9d:
         1a:45:34:ba:51:05:7a:0c:fa:95:ce:62:a2:aa:e1:ca:54:3d:
         4c:4f:73:4d:b6:43:cf:51:47:8b:60:cc:78:a4:75:24:a7:96:
         8b:3b:6d:bc:4f:af:82:e5:73:2e:f9:7a:7d:d4:34:ba:eb:72:
         e4:c6:36:a9:a7:78:18:ad:a2:09:08:6f:15:b0:33:76:dc:12:
         0c:2f:db:cb:3f:25:33:6b:4a:f6:14:f6:83:f4:8e:b2:ed:39:
         9b:02:de:31:5d:a0:11:12:9b:ca:87:1b:3d:b7:68:cb:26:73:
         bc:40:80:f8:f0:c0:c5:83:3d:e5:1b:fc:47:2e:8a:c2:dd:d3:
         7a:e8:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:28:20 2025 by rpki-client