Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e3138302e3231322e302f32322d3332203d3e203238363439.roa
File:                     34352e3138302e3231322e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          QzbQJvQHf9qdCRDk7OuDiP5Gui9tS+b2Erc3RZlyuO0=
Subject key identifier:   48:D8:7F:7C:86:E2:69:9A:7A:BB:D6:02:FD:81:4A:15:0E:30:8C:0B
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       54D4068CC0F9F738DE446E43F00AA2E86EDAF32C
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e3138302e3231322e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:48 +0000
ROA not before:           Tue 06 May 2025 00:44:48 +0000
ROA not after:            Tue 05 May 2026 00:49:48 +0000
asID:                     28649
IP address blocks:        45.180.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d4:06:8c:c0:f9:f7:38:de:44:6e:43:f0:0a:a2:e8:6e:da:f3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:48 2025 GMT
            Not After : May  5 00:49:48 2026 GMT
        Subject: CN=48D87F7C86E2699A7ABBD602FD814A150E308C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:54:3d:d5:6a:b9:4f:3a:e9:99:f1:ed:95:
                    ce:de:c1:85:79:52:42:1d:b9:ef:91:32:fe:6c:7e:
                    19:32:4f:9c:d3:19:3c:d1:b8:7b:d5:9a:88:8d:f4:
                    10:be:57:1b:b7:ef:d7:f2:f3:0f:e2:1a:f4:e4:bd:
                    81:e1:ac:21:fa:2d:91:cf:a2:6a:c3:89:e5:0e:65:
                    03:52:0f:37:d5:b1:73:31:fd:49:8d:0f:ff:cc:71:
                    e1:e5:e8:f6:06:fb:3e:9b:73:e5:04:4a:38:22:cb:
                    8b:dc:8f:ea:61:f7:45:f7:0b:84:1e:87:7e:27:96:
                    aa:b8:0c:7d:10:51:91:b5:38:9b:a1:03:55:5d:33:
                    7a:92:68:dd:11:36:c8:72:d8:65:20:df:4f:ff:9f:
                    94:88:2c:c9:d2:34:e7:1b:91:29:26:ea:26:62:16:
                    69:2a:45:fc:b3:38:a1:35:71:43:83:b7:b7:12:29:
                    59:16:78:75:4f:62:86:38:9d:35:6a:f4:7e:1f:72:
                    17:a9:9e:1d:4a:e7:3b:2e:b1:44:be:27:d5:64:22:
                    56:f7:0d:96:62:a1:7c:2e:34:39:bf:22:f7:ab:8a:
                    51:4b:0f:74:0b:10:97:f7:f3:2d:28:ac:12:9c:9c:
                    7b:96:bc:bc:2d:01:c8:bb:68:ae:81:d6:91:77:79:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:7F:7C:86:E2:69:9A:7A:BB:D6:02:FD:81:4A:15:0E:30:8C:0B
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e3138302e3231322e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:fd:76:ad:78:cc:f7:6f:2f:3d:5c:62:54:bd:02:57:1e:be:
         44:af:3c:02:48:e1:81:4c:40:e8:94:24:9c:e4:6f:5d:aa:57:
         b7:c0:77:2a:7f:d4:e4:89:e1:8c:7b:dd:a4:aa:1a:fb:95:4a:
         d9:10:c2:21:4b:92:7d:b8:7e:d3:cb:9f:4b:24:92:f9:42:f2:
         a1:f7:eb:d2:02:30:df:93:e7:5c:59:94:3a:5d:7d:84:1b:5c:
         76:ee:53:38:52:87:50:45:eb:f3:3f:b5:ea:2c:fb:71:db:88:
         f4:32:3f:e5:07:5f:f0:0b:79:f8:38:1e:36:e1:53:2a:88:ab:
         75:0c:7c:3d:ad:5e:c5:6f:76:79:df:95:0f:1f:8e:73:49:19:
         79:2e:37:c9:d6:78:f0:35:c0:a6:5e:61:ad:1d:99:a1:2f:1a:
         84:85:5b:62:37:91:cc:eb:6f:ae:9b:f0:8b:07:0d:00:62:25:
         78:09:c7:e2:3b:c4:20:1e:db:1e:80:17:69:9f:cc:0c:43:60:
         8f:2e:7e:70:ca:9a:ac:c7:ff:5c:fb:d2:5e:59:e2:77:28:83:
         09:d6:5c:2f:cb:c5:a9:a2:fc:01:b5:39:81:c0:2c:e7:d4:f9:
         43:ef:15:16:6f:4b:75:43:50:68:3e:95:b4:70:b7:cc:76:95:
         2d:b9:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:38:52 2025 by rpki-client