Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/34352e3138392e3234332e302f32342d3234203d3e20323639363034.roa
File:                     34352e3138392e3234332e302f32342d3234203d3e20323639363034.roa (raw, json)
Hash identifier:          MS5YdmxEnfUZ4mL79V+h/5bv46LjtLUZDz/vebNDddQ=
Subject key identifier:   69:56:03:8D:53:32:B0:2C:2D:3F:83:1E:76:76:6B:73:0A:F9:E5:E4
Certificate issuer:       /CN=80203E22C8FA0050317D1387223B6C2E9CFE204B
Certificate serial:       61401FCEB3447C9930BC24F3C888C319C476EC01
Authority key identifier: 80:20:3E:22:C8:FA:00:50:31:7D:13:87:22:3B:6C:2E:9C:FE:20:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80203E22C8FA0050317D1387223B6C2E9CFE204B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/34352e3138392e3234332e302f32342d3234203d3e20323639363034.roa
Signing time:             Thu 01 May 2025 22:58:00 +0000
ROA not before:           Thu 01 May 2025 22:53:00 +0000
ROA not after:            Thu 30 Apr 2026 22:58:00 +0000
asID:                     269604
IP address blocks:        45.189.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/80203E22C8FA0050317D1387223B6C2E9CFE204B.crl
                          rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/80203E22C8FA0050317D1387223B6C2E9CFE204B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80203E22C8FA0050317D1387223B6C2E9CFE204B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 19:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:40:1f:ce:b3:44:7c:99:30:bc:24:f3:c8:88:c3:19:c4:76:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80203E22C8FA0050317D1387223B6C2E9CFE204B
        Validity
            Not Before: May  1 22:53:00 2025 GMT
            Not After : Apr 30 22:58:00 2026 GMT
        Subject: CN=6956038D5332B02C2D3F831E76766B730AF9E5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:ea:96:c7:8a:df:99:8c:e1:c4:0c:ea:9b:
                    2b:5c:fd:a3:24:e4:a5:b0:01:c2:d2:2e:10:a6:46:
                    5f:61:79:1b:4f:58:78:ff:29:50:5b:5b:49:43:a3:
                    dc:5c:cf:b9:ca:51:48:cb:97:77:dd:d1:65:2d:fa:
                    b9:8c:c5:cc:61:57:8f:9a:29:1d:59:f2:9d:41:fe:
                    46:09:d9:a0:b3:67:d0:7c:3d:af:7b:b6:f5:92:db:
                    88:c9:ed:d9:67:7e:a1:41:31:01:ba:c8:8e:9f:9b:
                    e0:24:6b:46:81:1d:5d:68:12:13:34:9b:da:ed:79:
                    9a:7c:80:48:c9:a7:89:df:76:81:48:6c:b6:1e:e4:
                    da:97:91:f4:b9:ed:be:71:cb:da:55:69:b4:36:c5:
                    f4:72:fa:2f:7a:a7:75:8c:0e:dc:61:b0:d3:1f:19:
                    8d:91:a5:03:3e:88:59:5d:88:c0:b6:f4:16:c7:c5:
                    f9:15:1d:49:85:f0:ea:58:9c:c6:bd:6e:36:a4:fe:
                    22:97:00:67:73:9b:87:ef:39:cb:97:b4:89:85:fc:
                    6a:6a:21:6c:c9:be:6f:de:a1:c8:73:f5:97:e2:4c:
                    a2:7e:60:2a:9e:a8:88:be:d9:6b:ab:c0:db:57:0a:
                    f4:51:d3:0a:c3:68:e8:1b:44:37:fd:91:31:89:f1:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:56:03:8D:53:32:B0:2C:2D:3F:83:1E:76:76:6B:73:0A:F9:E5:E4
            X509v3 Authority Key Identifier:
                keyid:80:20:3E:22:C8:FA:00:50:31:7D:13:87:22:3B:6C:2E:9C:FE:20:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/80203E22C8FA0050317D1387223B6C2E9CFE204B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80203E22C8FA0050317D1387223B6C2E9CFE204B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/34352e3138392e3234332e302f32342d3234203d3e20323639363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:30:9e:82:60:73:36:0a:a1:75:02:fe:51:f5:64:11:4d:
         17:cd:02:6a:11:cb:69:80:e7:eb:85:26:76:05:d1:39:f4:0d:
         56:53:99:19:d3:59:c2:e5:6d:98:1b:ca:52:ac:b0:ff:65:c2:
         63:c3:c2:24:b4:4a:b6:bc:8c:6e:7e:72:a1:ba:e2:c1:8e:bf:
         4f:42:54:d4:ee:8a:83:7b:88:13:b7:32:88:50:53:b6:74:37:
         7d:30:a3:9d:e3:de:95:b3:d4:a5:ff:31:d0:86:51:b3:5d:73:
         ca:e9:35:0d:f0:65:76:23:20:6d:df:b2:de:84:ca:06:0e:b2:
         0c:0c:89:8d:4d:80:68:a7:b0:cb:54:cb:97:57:4e:9e:4b:f8:
         24:1f:cf:11:43:f9:0b:c2:f7:26:ed:f3:0e:d4:82:16:5e:4e:
         51:c3:13:eb:a2:49:09:4e:f1:ae:10:74:f7:51:3f:e9:dc:fa:
         a6:55:c4:f5:09:41:63:88:fa:fd:b8:7e:f8:bc:84:c7:db:68:
         8e:2b:e3:08:64:fe:e6:90:03:3e:97:91:0f:7d:76:80:64:29:
         1e:40:61:2f:d3:2e:03:3b:b3:10:df:67:2b:a3:aa:bf:86:b1:
         f4:bb:55:fb:16:7e:91:aa:96:a3:41:5d:31:be:31:9b:e9:a3:
         ac:b3:3d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:12:41 2025 by rpki-client