Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3137302e302f32332d3233203d3e20323638343235.roa
File:                     34352e3136302e3137302e302f32332d3233203d3e20323638343235.roa (raw, json)
Hash identifier:          AJGgQgsxwIk4dVlVq0JfSI7buI/VGzoipoua+psqc2E=
Subject key identifier:   34:B8:5D:04:37:C1:C6:AC:29:95:BB:D0:1F:86:32:46:AB:A0:5B:A7
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       5BC5A52242C989185FADA2070B38ED2F4E410520
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3137302e302f32332d3233203d3e20323638343235.roa
Signing time:             Tue 06 May 2025 18:37:46 +0000
ROA not before:           Tue 06 May 2025 18:32:46 +0000
ROA not after:            Tue 05 May 2026 18:37:46 +0000
asID:                     268425
IP address blocks:        45.160.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c5:a5:22:42:c9:89:18:5f:ad:a2:07:0b:38:ed:2f:4e:41:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: May  6 18:32:46 2025 GMT
            Not After : May  5 18:37:46 2026 GMT
        Subject: CN=34B85D0437C1C6AC2995BBD01F863246ABA05BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:3a:9a:d5:61:6b:7e:ed:f6:a0:3e:9b:85:
                    3e:e0:bc:f2:ce:dc:02:cd:11:a8:a8:e5:dd:30:5c:
                    3e:3f:56:89:ae:6a:aa:ce:22:dd:ed:83:2b:b2:16:
                    1c:48:d3:b4:2c:2d:aa:8b:e2:58:77:a3:85:dc:76:
                    18:82:c3:a9:c3:b8:de:40:3e:a3:ed:86:11:23:c5:
                    4c:dd:2a:70:10:72:63:62:76:eb:61:c8:f9:ec:97:
                    e2:18:34:73:ae:55:ed:d0:87:ef:2f:b7:6c:01:70:
                    58:aa:56:08:c6:80:4c:f2:95:71:6f:ee:f4:af:c5:
                    32:dc:79:b9:79:88:43:de:97:bf:27:74:d3:80:c6:
                    f3:8c:43:e4:86:d6:e8:fb:9f:9e:73:67:39:16:44:
                    9a:49:7d:c1:52:a5:23:b0:53:0b:e2:20:3f:dc:c2:
                    d7:40:a7:36:55:ba:9b:17:c2:60:e4:25:4e:ca:d8:
                    a0:76:45:b3:c6:a1:f2:f4:da:38:6d:c3:32:96:88:
                    01:40:4c:f6:03:bb:9b:4d:d4:f9:2b:c7:74:2c:26:
                    7e:d3:f5:d8:7a:54:a4:5a:23:91:99:60:97:91:89:
                    52:65:18:07:ea:47:f9:d4:50:fe:ed:99:91:ca:ea:
                    ca:64:fc:c7:e9:a7:67:7f:f4:ba:1e:21:65:3f:a2:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B8:5D:04:37:C1:C6:AC:29:95:BB:D0:1F:86:32:46:AB:A0:5B:A7
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3137302e302f32332d3233203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:2c:20:fd:41:1a:84:55:27:41:16:de:e1:77:72:f1:20:be:
         46:fd:a3:01:e9:7c:d6:21:85:0d:dc:ab:fd:67:bd:56:ce:8a:
         7c:1b:1e:14:d4:e6:a2:55:2d:9a:c4:9b:34:b5:37:06:50:f7:
         68:5c:5a:6d:69:2f:18:81:cd:cc:6e:d5:85:18:03:46:c8:86:
         8c:1d:87:7c:8b:ed:63:af:51:da:c3:0c:bc:73:af:e4:0c:23:
         1d:96:16:dc:00:6c:c0:f3:3f:e0:3c:c6:29:22:37:b1:33:3b:
         04:ad:ac:43:e1:9b:9c:a0:6b:8f:70:05:43:11:ac:79:a4:03:
         74:75:13:f4:b4:6a:56:ad:ab:76:e5:ba:6c:bf:f1:fe:bb:38:
         df:1c:63:2a:45:e6:98:b4:15:b9:70:75:20:2d:52:1b:0c:ca:
         1b:22:7b:42:8f:fe:70:7d:43:f5:28:0f:fc:0f:9f:0a:5b:28:
         c1:30:82:c2:c7:d2:4e:1a:eb:47:31:f5:04:36:4b:d1:7b:22:
         db:79:44:bf:1d:54:a2:9c:c0:31:b5:c3:35:8f:91:d8:1d:6f:
         c3:d7:4e:38:5e:4a:b5:ef:d9:e4:48:a9:e2:33:4c:db:34:86:
         87:1f:5e:04:f6:42:20:fc:6f:9f:b0:0b:21:f9:f4:ff:eb:c9:
         11:7a:fb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:25:02 2025 by rpki-client