Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32342d3234203d3e20323636393833.roa
File:                     34352e3232362e3134302e302f32342d3234203d3e20323636393833.roa (raw, json)
Hash identifier:          SHxldwmv9Jl2+kWX7eGsRKkb9oIiX1NUhQMBbvrLr14=
Subject key identifier:   C5:67:30:69:A8:1A:C0:22:A6:91:A0:3B:76:D0:A5:13:E5:28:FC:43
Certificate issuer:       /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Certificate serial:       7251BBC1627FDC5832161A219626FF607D691888
Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32342d3234203d3e20323636393833.roa
Signing time:             Tue 06 May 2025 12:25:36 +0000
ROA not before:           Tue 06 May 2025 12:20:36 +0000
ROA not after:            Tue 05 May 2026 12:25:36 +0000
asID:                     266983
IP address blocks:        45.226.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl
                          rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 01:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:51:bb:c1:62:7f:dc:58:32:16:1a:21:96:26:ff:60:7d:69:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
        Validity
            Not Before: May  6 12:20:36 2025 GMT
            Not After : May  5 12:25:36 2026 GMT
        Subject: CN=C5673069A81AC022A691A03B76D0A513E528FC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:55:64:ff:78:77:bb:45:ef:f9:5d:48:1e:
                    18:af:4f:27:e4:78:2f:48:c6:ce:11:52:95:d7:36:
                    47:77:d7:d9:c6:3b:a3:95:1c:2b:2a:41:4f:fb:00:
                    3e:84:20:1f:f7:5e:47:9b:ac:d5:a5:7c:10:c3:4e:
                    31:ff:ca:b0:55:19:8f:4d:2f:68:b4:ac:4c:be:18:
                    e9:64:6c:3c:b2:4c:90:e2:4f:74:c1:9d:47:fe:68:
                    f9:cc:41:1e:01:e1:c3:4e:1b:4f:a8:a4:63:bd:56:
                    cf:e3:d7:cd:2a:e7:96:b5:ec:22:e1:77:2a:d6:04:
                    9d:32:3e:7f:1d:31:9d:f7:0c:11:dc:66:ba:59:6b:
                    a8:17:4d:fb:a0:f0:c2:94:ff:46:6d:b6:82:2f:73:
                    55:08:92:e9:07:a8:02:10:ac:81:0d:d5:a1:73:36:
                    d4:bd:d7:db:49:81:de:de:f9:e4:4a:d7:b4:4f:c3:
                    89:ee:44:7c:e1:cd:4e:de:d4:f8:be:5f:79:d0:f9:
                    7d:de:8e:e4:1d:52:e7:39:41:93:b4:da:9a:3c:62:
                    df:fb:5f:49:22:20:49:8e:e6:45:20:46:3f:3c:2d:
                    e8:51:66:2d:e0:ac:ac:15:8d:a2:99:d9:1a:fb:f4:
                    e0:38:4b:90:20:6b:f3:4f:f1:ce:fa:8c:33:4b:20:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:67:30:69:A8:1A:C0:22:A6:91:A0:3B:76:D0:A5:13:E5:28:FC:43
            X509v3 Authority Key Identifier:
                keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32342d3234203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:36:29:aa:b1:35:9a:83:7b:f5:71:bb:78:fa:64:a4:09:68:
         ad:0d:67:03:90:8a:4f:1a:17:47:a9:66:fa:d8:cc:b2:41:e0:
         90:ba:ea:27:43:41:df:fa:90:0e:aa:93:e0:99:d6:0d:48:a3:
         f1:2f:1c:8b:3a:89:01:9c:3d:2f:b0:c1:85:8c:8e:09:e5:e6:
         76:f2:7e:bc:20:25:11:0a:6b:30:3e:e0:2c:ee:3b:87:68:8c:
         8c:4b:03:4f:ee:d6:1b:bc:85:ca:ff:d0:ea:b3:d2:ec:d1:9a:
         25:67:db:53:36:01:1b:eb:38:64:a5:b2:8a:b1:20:8e:6c:02:
         d3:51:fa:c9:86:88:5b:f8:45:25:cc:17:25:91:78:ff:fa:3c:
         0a:56:f1:c4:23:45:ac:1f:e5:5f:fd:1b:26:41:2a:fb:67:d1:
         98:e7:89:a3:65:f8:2b:80:d4:87:b4:b2:2f:1f:e7:e2:ce:a3:
         78:6b:bf:15:75:fa:99:0f:8d:3a:ed:e1:0c:5c:f0:fb:49:52:
         99:97:8e:bd:c5:41:4d:71:ab:da:6c:43:be:d4:2f:98:35:ff:
         e3:4f:88:39:65:2f:6f:7f:b0:fd:a6:b6:23:aa:ae:ad:ee:53:
         a5:c8:a3:55:f5:3d:03:b7:43:5f:1f:2c:e5:7d:4d:09:88:42:
         d8:4b:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:17:40 2025 by rpki-client