Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3234203d3e20323639353730.roa
File:                     34352e3138392e34302e302f32322d3234203d3e20323639353730.roa (raw, json)
Hash identifier:          szDqMvBKaQ1Teofo2a2BL5lHE9bDGVfMwWHACqMHxIg=
Subject key identifier:   E2:4E:96:5A:69:B8:59:A7:72:F2:2B:E6:F0:F2:65:29:78:D8:09:FC
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       378128D3374EA92C4DC05C835059C107BA6162A3
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3234203d3e20323639353730.roa
Signing time:             Wed 07 May 2025 20:31:27 +0000
ROA not before:           Wed 07 May 2025 20:26:27 +0000
ROA not after:            Wed 06 May 2026 20:31:27 +0000
asID:                     269570
IP address blocks:        45.189.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl
                          rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 06:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:81:28:d3:37:4e:a9:2c:4d:c0:5c:83:50:59:c1:07:ba:61:62:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: May  7 20:26:27 2025 GMT
            Not After : May  6 20:31:27 2026 GMT
        Subject: CN=E24E965A69B859A772F22BE6F0F2652978D809FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:8e:dd:27:49:d4:c1:3a:67:4d:39:13:9e:
                    52:bd:d0:08:54:43:5c:4f:f4:1c:5b:77:98:d6:b0:
                    8f:92:23:32:8f:e8:42:93:4d:05:13:71:23:b6:2e:
                    28:49:cb:9d:e9:c1:b0:76:f3:e0:ff:af:de:63:25:
                    05:19:a4:5b:be:bc:64:dc:1b:da:90:34:8f:28:14:
                    b3:92:db:c1:6b:f1:a8:dc:19:af:99:e1:60:3f:f0:
                    39:1c:20:0c:84:89:df:67:e6:20:c9:70:82:05:61:
                    41:0e:b5:6a:36:94:fc:9b:e8:00:b1:64:58:6d:57:
                    00:3b:bf:4f:8e:bd:9d:f1:3b:5c:b6:1e:d4:b8:ee:
                    66:a9:d0:b6:1f:c4:88:c6:e7:27:91:08:29:a4:df:
                    f2:3f:19:4e:56:9e:85:be:e9:65:87:7c:f4:c0:38:
                    de:16:6d:35:65:b4:83:c8:d9:8c:6a:9a:c0:92:e2:
                    cc:3d:dc:cb:6e:9c:12:05:03:fa:48:45:fa:58:d4:
                    d9:a5:96:d7:7d:ba:1f:85:dc:b4:17:4a:4e:40:d8:
                    60:1d:11:a6:60:98:06:cc:ac:60:d2:71:65:6e:25:
                    10:15:7a:16:3d:81:f8:ff:d3:86:24:30:b1:ea:f4:
                    1f:5a:a5:ac:ba:40:8f:b2:af:79:8b:76:30:ca:fe:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4E:96:5A:69:B8:59:A7:72:F2:2B:E6:F0:F2:65:29:78:D8:09:FC
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3234203d3e20323639353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:62:8e:e7:68:e4:d8:fb:45:69:f9:42:a8:43:d4:b5:34:
         45:cf:4b:fe:1c:5b:4f:4c:f3:04:a0:1e:de:88:4c:44:7e:fe:
         23:0b:ab:3e:ac:d7:6f:5e:cd:c4:e9:22:7a:a9:43:dc:45:6a:
         06:53:78:17:c1:9b:a8:aa:32:1c:18:d1:dc:42:6c:4d:80:57:
         26:9c:ed:d5:23:94:57:57:b4:90:af:21:a8:be:e1:19:24:9b:
         ee:0e:fd:d4:66:bd:5d:f4:a0:49:5e:48:76:f8:b2:e0:2f:cc:
         37:ed:90:64:aa:a0:57:5b:9f:83:1d:b7:e1:7b:c8:d0:bf:e3:
         76:37:e0:c8:09:4c:54:26:ba:fd:84:eb:65:75:bb:58:7e:73:
         03:ae:5e:4e:a0:b9:0e:0d:c5:af:54:13:ec:d3:65:48:6a:99:
         fa:06:1e:ef:c5:09:ba:2b:cc:e5:ce:cb:c0:87:a4:9b:39:a6:
         c1:ac:dc:15:1f:86:f7:9b:b6:4f:fd:0d:01:c3:b4:6c:62:4a:
         47:fb:5b:1f:3f:d9:1b:19:b2:53:80:f0:9b:02:d9:77:b5:2a:
         31:91:26:3c:2d:c4:f0:93:b5:74:18:7b:97:3b:77:47:bd:4a:
         c2:bf:ad:f1:c3:9d:c3:4f:0a:42:94:dc:f0:f5:61:24:f2:d6:
         ae:f5:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:21:02 2025 by rpki-client