Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38362e302f32342d3234203d3e20323638383630.roa
File:                     34352e3137332e38362e302f32342d3234203d3e20323638383630.roa (raw, json)
Hash identifier:          255hvlfTCl5NAD9LlU3SokO7GpEJz7IoXAdMM43mvd8=
Subject key identifier:   B1:27:F8:29:87:E8:40:6C:93:26:D5:E9:27:A8:CC:40:16:06:E3:49
Certificate issuer:       /CN=5805426DE711726257B6F6F478D3A3E7F932F7C4
Certificate serial:       75D5A4228F8037E91DBD186627B5CEFCF185F038
Authority key identifier: 58:05:42:6D:E7:11:72:62:57:B6:F6:F4:78:D3:A3:E7:F9:32:F7:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38362e302f32342d3234203d3e20323638383630.roa
Signing time:             Fri 02 May 2025 13:19:18 +0000
ROA not before:           Fri 02 May 2025 13:14:18 +0000
ROA not after:            Fri 01 May 2026 13:19:18 +0000
asID:                     268860
IP address blocks:        45.173.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.crl
                          rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 00:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d5:a4:22:8f:80:37:e9:1d:bd:18:66:27:b5:ce:fc:f1:85:f0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5805426DE711726257B6F6F478D3A3E7F932F7C4
        Validity
            Not Before: May  2 13:14:18 2025 GMT
            Not After : May  1 13:19:18 2026 GMT
        Subject: CN=B127F82987E8406C9326D5E927A8CC401606E349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:0a:ed:f5:a0:63:d7:40:cf:f6:a2:88:99:
                    1d:ab:92:bf:bd:27:16:53:06:93:35:df:ee:96:08:
                    6d:68:06:88:69:1c:e1:a7:a2:e2:8f:5b:2b:ed:36:
                    58:c1:70:31:2c:98:f5:d4:66:c6:87:0d:81:4f:b5:
                    44:04:85:39:12:03:42:f0:74:b9:38:f1:18:71:03:
                    36:1c:81:85:20:72:8b:15:4f:f1:86:ed:27:95:8d:
                    56:8f:58:0b:17:48:ce:22:a8:06:a0:c7:10:e3:70:
                    d4:d6:77:7c:66:e3:81:61:fb:6f:a5:38:7b:ca:6e:
                    a1:fc:04:58:82:9c:b8:e7:9e:37:d7:cc:d5:e6:5d:
                    48:5c:84:5d:35:e5:95:31:ab:f0:12:72:ca:ea:03:
                    46:19:f7:80:38:71:c9:1e:4a:c4:9b:6b:5e:aa:f6:
                    e1:31:21:08:02:72:b6:31:52:b4:66:89:30:12:18:
                    ae:57:2f:ee:21:68:1e:da:52:36:77:17:49:dc:c8:
                    7d:01:f6:6c:b1:af:18:19:e7:fd:5c:cd:fb:35:09:
                    8a:0b:f6:37:d3:da:5a:ba:ff:77:fe:71:dd:ff:84:
                    5e:ea:8c:3b:f8:86:c5:d4:d7:76:78:dc:c5:32:27:
                    18:78:9a:08:21:31:8a:e7:2c:6d:ac:00:0a:81:70:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:27:F8:29:87:E8:40:6C:93:26:D5:E9:27:A8:CC:40:16:06:E3:49
            X509v3 Authority Key Identifier:
                keyid:58:05:42:6D:E7:11:72:62:57:B6:F6:F4:78:D3:A3:E7:F9:32:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38362e302f32342d3234203d3e20323638383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:32:6e:47:16:fa:78:9e:4d:69:ee:aa:f0:c1:8e:af:2c:
         f7:58:2a:86:70:7a:a5:37:b2:53:f4:e6:50:e6:b7:d3:dd:1c:
         04:48:38:07:56:87:3e:4f:df:65:4e:83:87:47:ea:ec:6a:aa:
         6e:e9:99:1a:8f:43:bb:03:02:60:7e:56:25:cb:e2:0f:1c:44:
         77:52:5c:9d:e3:84:9f:d5:f2:ab:a9:d4:2a:b9:8c:e5:51:41:
         82:ab:b7:c9:df:2c:20:36:76:93:76:10:96:4f:ce:22:bc:2f:
         8e:07:15:e8:12:e9:12:a5:46:a1:bf:1c:4b:64:a0:53:35:d1:
         d1:7b:5a:b8:2a:28:07:d7:49:c7:74:6d:83:9c:28:18:69:1b:
         e7:a1:81:03:f8:6e:79:5d:f3:ff:44:a2:b4:e6:9a:dd:83:c9:
         60:e4:7e:7c:f2:5b:4b:84:df:2c:40:1e:4b:50:27:e1:41:55:
         1d:63:2f:c8:35:1c:3f:3d:ce:53:86:d1:bf:e8:55:0d:f3:55:
         3c:d2:b3:32:08:b4:df:58:e3:bd:bb:fe:30:e5:1f:83:25:12:
         31:bc:fd:f3:fe:60:e3:0c:ad:bb:93:8f:61:6c:08:14:97:a7:
         11:60:01:76:cb:1e:ea:d8:22:1a:1d:f2:23:4f:9f:a5:7e:33:
         99:c6:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 05:27:48 2025 by rpki-client