Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/34352e3136392e3230382e302f32322d3232203d3e20323638313330.roa
File:                     34352e3136392e3230382e302f32322d3232203d3e20323638313330.roa (raw, json)
Hash identifier:          qAqkSzlPGDccwgcgmaEmYaQ41AMoxvdr8YQlvtCQmKA=
Subject key identifier:   ED:DD:9E:64:6D:D3:60:F8:D3:6C:5C:D5:E8:3D:0F:79:09:AE:78:86
Certificate issuer:       /CN=1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58
Certificate serial:       2313D90164E34F01185D577C0DD453E8021BAED2
Authority key identifier: 1B:7D:DF:CB:5C:86:59:96:08:DE:38:E4:CA:DB:27:3B:D3:EB:EC:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/34352e3136392e3230382e302f32322d3232203d3e20323638313330.roa
Signing time:             Thu 17 Apr 2025 17:32:56 +0000
ROA not before:           Thu 17 Apr 2025 17:27:56 +0000
ROA not after:            Thu 16 Apr 2026 17:32:56 +0000
asID:                     268130
IP address blocks:        45.169.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.crl
                          rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 23:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:13:d9:01:64:e3:4f:01:18:5d:57:7c:0d:d4:53:e8:02:1b:ae:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58
        Validity
            Not Before: Apr 17 17:27:56 2025 GMT
            Not After : Apr 16 17:32:56 2026 GMT
        Subject: CN=EDDD9E646DD360F8D36C5CD5E83D0F7909AE7886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:e4:89:5c:2f:0f:e6:c5:79:b3:a8:f7:92:
                    0f:f9:74:78:c1:d7:66:f3:da:77:9c:4f:9c:80:af:
                    26:c1:a3:f5:da:d9:0f:d9:3c:d3:ac:c7:61:72:79:
                    0a:cf:d8:cb:1b:e1:e5:03:2b:56:6f:b5:26:80:5c:
                    70:f3:b9:e6:94:40:fb:94:a5:cc:a5:a7:39:af:6c:
                    a1:93:96:1b:bf:d9:ce:f7:a6:fb:98:d1:b5:5f:00:
                    3c:fe:5a:9b:3d:20:48:41:69:46:8d:0c:6e:39:de:
                    75:31:49:e7:f9:c4:b5:74:6f:1d:b5:b3:1f:e7:ca:
                    d8:d2:ea:2e:fa:7f:c8:79:af:7f:19:56:4e:e5:10:
                    a8:aa:09:6e:93:35:ba:f2:45:f1:df:1e:28:aa:8b:
                    f6:23:9f:15:2e:40:48:99:2c:8a:ed:c5:0d:6e:f0:
                    76:a7:06:86:db:91:29:4f:5b:23:e9:21:96:57:aa:
                    d1:3d:ff:76:e8:1f:a1:ce:0a:38:e9:7e:7b:e6:11:
                    54:bd:f5:64:3f:cf:b8:b9:f1:42:20:f8:d3:c7:da:
                    88:ee:bb:9b:e8:dd:20:72:ed:e0:da:27:de:6c:77:
                    fa:63:a8:d2:e4:54:39:a5:b8:fd:ac:9e:f5:21:c2:
                    fc:4f:75:c6:71:d1:12:92:5a:25:53:16:cd:bb:79:
                    c0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DD:9E:64:6D:D3:60:F8:D3:6C:5C:D5:E8:3D:0F:79:09:AE:78:86
            X509v3 Authority Key Identifier:
                keyid:1B:7D:DF:CB:5C:86:59:96:08:DE:38:E4:CA:DB:27:3B:D3:EB:EC:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/34352e3136392e3230382e302f32322d3232203d3e20323638313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:78:04:15:0d:9b:89:96:43:27:54:37:b9:a5:05:bd:f3:02:
         51:25:a7:ab:5c:a0:c2:c2:f9:b5:03:96:43:82:d2:7d:8a:20:
         d0:4c:6f:c1:b8:a3:fd:86:1c:b8:12:07:6a:e9:ff:10:47:9d:
         0b:17:5d:79:e1:f9:76:d5:0d:d8:74:07:d8:f5:89:65:c9:82:
         25:15:9b:85:4f:fe:54:8e:03:ce:b9:48:54:13:69:0c:0f:e4:
         0f:e7:35:e5:b7:e6:a1:9c:71:5a:47:30:4f:3f:ef:a9:5c:9b:
         72:77:aa:54:ed:c2:6c:a2:8e:9b:44:3b:ca:95:05:3d:5e:fa:
         7b:28:b1:12:de:34:79:fb:34:8b:e4:7b:0a:0e:08:d0:6e:f4:
         4c:44:16:89:89:dc:64:ac:ce:ee:1e:7e:b5:2b:e5:56:a5:4a:
         ac:8f:25:d5:f6:90:49:e5:73:37:81:2c:99:d5:1a:41:a9:58:
         a1:e6:0a:ec:2b:1b:22:6e:63:89:bd:7a:4d:a2:ff:0c:93:00:
         f4:03:aa:fe:f6:42:6e:41:1c:69:d5:44:0a:bc:92:2e:52:22:
         4e:44:de:ac:62:f5:b3:72:6a:c0:48:19:13:0b:01:ee:81:ce:
         fb:2f:c7:4f:0f:e0:ce:6e:0d:3e:07:9e:c9:29:3d:5a:3d:a3:
         1c:47:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:33:38 2025 by rpki-client