Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134322e302f32332d3233203d3e20323636393833.roa
File:                     34352e3232362e3134322e302f32332d3233203d3e20323636393833.roa (raw, json)
Hash identifier:          C9Qlf/cGiJwzWGGm3MKPsSO5ULUZ8LSwfMLzD5HQWB8=
Subject key identifier:   B4:A1:26:37:63:9A:18:DD:4D:1C:05:45:CE:71:C4:4A:CB:F0:21:C8
Certificate issuer:       /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Certificate serial:       581699124F1671EA32863276B6F34158A836120E
Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134322e302f32332d3233203d3e20323636393833.roa
Signing time:             Tue 06 May 2025 12:25:36 +0000
ROA not before:           Tue 06 May 2025 12:20:36 +0000
ROA not after:            Tue 05 May 2026 12:25:36 +0000
asID:                     266983
IP address blocks:        45.226.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl
                          rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:16:99:12:4f:16:71:ea:32:86:32:76:b6:f3:41:58:a8:36:12:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
        Validity
            Not Before: May  6 12:20:36 2025 GMT
            Not After : May  5 12:25:36 2026 GMT
        Subject: CN=B4A12637639A18DD4D1C0545CE71C44ACBF021C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:43:38:ae:42:7f:1f:74:47:17:f8:70:e2:
                    ca:6e:04:66:4f:17:05:fe:a8:83:4e:59:f0:f0:b6:
                    35:85:a1:73:b5:0b:d4:c2:0d:11:31:de:22:91:9c:
                    01:d4:93:48:e7:9c:36:a7:46:e8:44:42:01:86:c1:
                    3a:5a:8a:8f:a5:e9:75:ba:4b:92:3d:e9:9c:6b:85:
                    4e:f4:f0:b9:d6:56:bd:d4:42:5d:b2:de:ab:9c:72:
                    f5:86:ef:dc:45:08:87:ad:d3:fc:4a:09:c0:46:90:
                    43:43:b1:a3:a6:17:c7:64:e8:99:ce:0c:87:48:af:
                    b9:9d:38:8a:d8:2b:3c:e3:75:a9:1f:2e:96:3d:90:
                    62:58:73:3a:d9:14:a6:c7:ef:e7:a0:a9:9b:4d:1c:
                    61:5a:da:8a:e5:43:14:93:f7:89:2c:56:22:5d:5f:
                    bd:cb:50:15:75:b3:fb:56:74:fb:cd:4f:1d:b2:2b:
                    36:ca:20:e9:48:38:53:5c:78:d1:e2:e5:51:c0:ae:
                    9d:66:31:f1:8f:43:e8:c0:1a:3c:bd:9e:9e:a6:3f:
                    86:d9:cd:31:bf:4a:27:de:02:aa:e8:58:b9:d1:d4:
                    38:41:94:cd:f5:86:a3:22:5e:47:bd:36:fc:ca:4b:
                    45:1e:6e:ee:e2:3b:e1:5b:00:60:f7:6b:d5:b9:21:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A1:26:37:63:9A:18:DD:4D:1C:05:45:CE:71:C4:4A:CB:F0:21:C8
            X509v3 Authority Key Identifier:
                keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134322e302f32332d3233203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:e1:04:35:04:f9:b1:1b:6e:22:22:75:43:e0:d1:30:03:8e:
         bb:9b:c9:70:58:a8:40:1d:f4:2e:b7:80:8f:30:66:43:49:71:
         9d:37:b1:dc:4b:8c:de:86:28:fc:23:76:3c:5a:be:24:7d:87:
         46:21:fe:3a:2f:b8:e6:56:a4:b1:f8:ea:b7:0e:0a:73:eb:b1:
         b8:72:98:fe:da:4d:ae:4b:7b:29:27:76:6c:4a:a8:4d:c7:1a:
         c2:1b:16:bb:24:0e:48:0f:12:ed:2e:b8:c2:c0:58:c8:49:02:
         e8:52:fb:46:a6:ad:25:4a:72:bc:e4:1a:f6:d3:53:93:73:c4:
         91:fe:a5:05:05:bc:34:dc:73:69:04:53:b5:b6:88:71:e8:64:
         74:05:4a:88:b1:39:d1:bf:10:74:ca:8e:c1:2a:bd:9f:75:af:
         c7:3e:56:1b:a3:96:3a:49:fe:83:cc:2c:2e:53:a8:c9:82:ef:
         b0:9f:e3:74:48:9f:27:5a:7a:fd:b4:31:9d:f0:1a:f7:5c:10:
         5e:e0:09:13:52:09:fa:f9:c8:16:f1:a2:ff:8a:8c:38:08:4c:
         c4:d3:d5:8b:f6:9f:49:f7:e0:ad:ff:15:c1:f5:63:bb:ff:33:
         e2:6d:42:9c:a1:9d:9e:d6:a9:cf:30:74:01:5b:c8:8f:f3:8b:
         89:81:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:17:19 2025 by rpki-client