Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa
File:                     34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa (raw, json)
Hash identifier:          gSnKP9WhOoPdQnm2UThEPqz/xuYFeGKfT5pMDS2CYWQ=
Subject key identifier:   06:0C:EF:C8:D6:CC:88:E9:37:90:EA:23:36:02:5E:AB:89:0E:E9:F5
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       5E08348895A5A9618EB38481359F4872C8684392
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa
Signing time:             Tue 06 May 2025 18:37:39 +0000
ROA not before:           Tue 06 May 2025 18:32:39 +0000
ROA not after:            Tue 05 May 2026 18:37:39 +0000
asID:                     268425
IP address blocks:        45.160.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:08:34:88:95:a5:a9:61:8e:b3:84:81:35:9f:48:72:c8:68:43:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: May  6 18:32:39 2025 GMT
            Not After : May  5 18:37:39 2026 GMT
        Subject: CN=060CEFC8D6CC88E93790EA2336025EAB890EE9F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:be:39:27:48:e6:28:8b:96:95:66:ed:15:
                    eb:9a:87:2e:6c:7a:e1:ce:ba:8f:df:c1:38:23:78:
                    9f:56:56:96:b1:45:51:a5:c5:eb:03:b2:66:97:3b:
                    e4:79:2b:31:41:d0:07:d5:e4:5d:8d:fe:95:cf:1e:
                    3b:8c:01:f4:f4:1e:ae:ce:cb:4b:4e:99:01:e0:22:
                    03:1c:de:d2:ab:12:f6:00:6f:9e:10:5f:78:c7:2e:
                    d2:93:5a:0c:53:98:d6:25:e2:6f:63:26:f9:36:1f:
                    17:f8:ef:ec:19:e7:e3:1f:0d:b3:6d:e0:6e:29:08:
                    fd:29:20:30:8b:c2:fb:95:77:12:93:41:c9:f5:ca:
                    04:15:59:fd:ee:55:4e:c1:c6:66:9d:71:3a:f2:41:
                    69:46:e5:8c:2d:41:63:15:5d:48:80:76:67:f7:4b:
                    b3:1f:4f:ac:ef:06:a3:9c:65:06:43:1b:4c:07:44:
                    eb:35:68:7f:15:ed:11:d5:cd:2b:ab:94:f9:d6:cd:
                    06:d0:e2:db:ff:f8:53:f0:0f:ef:26:17:7b:4a:fd:
                    5a:57:45:ee:f7:21:85:a9:b7:e1:f5:c0:d7:0b:fe:
                    f6:aa:8a:36:24:d5:b7:c1:42:68:a6:07:47:0d:ec:
                    89:db:77:3d:4f:db:bc:7a:e0:25:45:8b:5f:7f:70:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0C:EF:C8:D6:CC:88:E9:37:90:EA:23:36:02:5E:AB:89:0E:E9:F5
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:84:40:6f:6e:6a:0a:d0:24:dc:c6:45:21:6f:40:a8:d0:3c:
         85:4e:16:4c:a9:a8:ec:08:06:45:10:8e:97:0d:a2:28:1a:c8:
         58:f5:b4:34:ea:08:f1:83:6e:b9:c0:6c:99:d3:f0:2e:2e:4d:
         62:6c:cc:35:ac:91:f7:e4:83:04:88:ec:28:51:b2:57:41:c2:
         88:00:f7:0e:33:cc:c2:35:5f:5f:ad:73:c8:4a:55:41:0b:bc:
         94:cd:0f:61:c2:8a:3b:1a:31:a6:af:00:b2:d4:91:b9:89:07:
         35:0b:1d:80:39:69:4a:03:c3:be:96:6f:ff:5c:33:a9:5b:88:
         f2:8e:02:80:f0:8b:db:99:13:9b:65:7c:f6:e4:70:13:f0:03:
         8f:06:34:0c:f7:4c:1d:4d:b1:26:f8:55:e8:1e:18:f5:eb:30:
         5d:50:9f:ca:00:cb:79:39:f5:57:c4:f9:f8:b2:30:d2:fe:89:
         89:be:80:ca:f6:23:cd:7d:55:b0:28:99:c2:67:b9:36:4c:58:
         94:96:3b:d8:bb:2b:2c:93:f7:39:5a:38:60:ec:36:07:b7:aa:
         93:a2:d6:a2:b1:fd:93:74:9d:d5:69:2d:34:2c:2c:9f:58:92:
         fd:63:5e:e0:f4:59:4f:46:93:1a:55:dc:67:d9:b8:d7:ec:55:
         ab:f7:53:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:29:29 2025 by rpki-client