Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa
File:                     34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa (raw, json)
Hash identifier:          tDzwNLhp8MedGTGaNGLtT/Fw0Bl48ELMHEmcdqtlsd4=
Subject key identifier:   F1:91:59:73:3D:E8:48:CA:E4:EC:48:94:BC:FC:D4:4F:25:91:27:DF
Certificate issuer:       /CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
Certificate serial:       3A2D7316A09087C5344FEF15BFDE305D7E06C270
Authority key identifier: D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa
Signing time:             Fri 02 May 2025 17:22:27 +0000
ROA not before:           Fri 02 May 2025 17:17:27 +0000
ROA not after:            Fri 01 May 2026 17:22:27 +0000
asID:                     267224
IP address blocks:        45.231.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl
                          rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 22:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2d:73:16:a0:90:87:c5:34:4f:ef:15:bf:de:30:5d:7e:06:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
        Validity
            Not Before: May  2 17:17:27 2025 GMT
            Not After : May  1 17:22:27 2026 GMT
        Subject: CN=F19159733DE848CAE4EC4894BCFCD44F259127DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:26:7f:d9:0c:15:49:04:43:32:ac:19:05:
                    03:51:a9:b8:26:cd:55:11:dd:75:fd:ec:33:31:ee:
                    a6:b9:82:96:9f:85:35:75:b8:2b:47:46:ad:3b:91:
                    7d:59:01:6e:d7:0e:2d:06:50:de:a1:1f:f9:7d:55:
                    15:54:2e:28:4f:52:67:c6:8a:12:e3:ee:e2:96:38:
                    23:15:f9:c4:15:a9:7c:74:4e:ab:7a:f1:9d:a8:56:
                    29:25:33:02:d5:d6:ca:77:58:37:51:a1:a0:a2:16:
                    fb:69:26:5b:a4:24:a2:00:f0:6e:1c:17:6e:23:34:
                    c8:ed:68:e1:54:f8:5c:35:6f:9e:32:35:14:73:03:
                    33:e7:fc:af:a7:2f:27:5e:ed:1d:af:d8:4a:88:b0:
                    b2:c5:20:82:73:64:13:0f:06:73:c3:a0:81:e6:b0:
                    de:27:09:dc:c4:04:4b:49:f7:81:17:08:ef:80:67:
                    a3:a0:5b:d8:6e:dc:2e:dc:a9:84:0e:af:5e:0b:88:
                    0f:c7:de:36:2d:02:98:c6:1a:fc:d5:e1:5d:9e:e6:
                    e4:65:a2:df:cf:7f:62:ed:24:df:1e:60:fe:2a:6d:
                    bb:bf:1b:01:86:62:19:d4:c6:d3:b1:25:01:16:12:
                    1b:56:59:ee:5e:a3:75:7e:9d:1e:96:05:1e:76:2c:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:59:73:3D:E8:48:CA:E4:EC:48:94:BC:FC:D4:4F:25:91:27:DF
            X509v3 Authority Key Identifier:
                keyid:D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:7f:9c:3f:b8:4d:42:3a:ff:e1:c2:c8:fd:e6:95:d9:f6:e7:
         35:fa:24:e6:d0:18:59:f8:c1:59:66:5f:e7:57:cd:8a:99:0a:
         75:41:39:93:8f:a9:f5:93:74:b5:b7:ab:f9:a2:14:ba:0a:c5:
         24:bd:5f:b3:16:96:22:d0:a4:93:1f:e1:da:b6:2e:96:08:95:
         da:c6:4f:b5:3f:4b:95:1c:6e:79:3c:b7:d7:45:3c:3b:c9:c3:
         a0:e8:40:8b:bf:86:da:db:46:95:4a:71:35:91:0b:39:62:20:
         4d:a1:8f:cf:03:85:74:61:22:70:ee:0f:b6:47:97:d3:5c:90:
         74:a8:60:86:e8:db:fe:ad:1d:18:e5:14:2c:83:34:f6:04:77:
         f6:6d:e9:0a:40:f4:71:27:3f:3e:4b:11:ea:71:ab:e4:a2:14:
         fc:c5:c7:02:42:5a:24:be:47:4b:1f:58:79:7d:78:98:b2:0d:
         d8:72:df:93:25:f2:0f:b4:30:54:d2:b2:0f:46:e8:97:09:27:
         bc:c4:5a:a3:18:d7:2b:0e:91:5c:72:6a:c4:c5:96:a7:b8:50:
         d2:31:59:ce:6c:22:86:7d:36:24:ed:85:2b:22:d5:be:ed:ec:
         30:1b:e1:a7:99:11:3d:0f:4b:16:ad:8c:0e:17:77:1c:8e:a5:
         d7:da:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:45:42 2025 by rpki-client