Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32322d3232203d3e20323638303530.roa
File:                     34352e3136372e34342e302f32322d3232203d3e20323638303530.roa (raw, json)
Hash identifier:          Ih7Ocjz5axkX6UOWUCp408fvVHLmj12IMnR48H5MLn4=
Subject key identifier:   37:EF:45:EB:76:5D:00:E7:25:5D:C8:76:5A:43:35:69:65:7B:CB:1B
Certificate issuer:       /CN=1A4B8AF1C88E74165F62C65E1544A0F47259CC21
Certificate serial:       4644DECA1F2FEC85578FA2FF43D63FC53782FBF3
Authority key identifier: 1A:4B:8A:F1:C8:8E:74:16:5F:62:C6:5E:15:44:A0:F4:72:59:CC:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32322d3232203d3e20323638303530.roa
Signing time:             Fri 02 May 2025 21:32:52 +0000
ROA not before:           Fri 02 May 2025 21:27:52 +0000
ROA not after:            Fri 01 May 2026 21:32:52 +0000
asID:                     268050
IP address blocks:        45.167.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.crl
                          rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:44:de:ca:1f:2f:ec:85:57:8f:a2:ff:43:d6:3f:c5:37:82:fb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4B8AF1C88E74165F62C65E1544A0F47259CC21
        Validity
            Not Before: May  2 21:27:52 2025 GMT
            Not After : May  1 21:32:52 2026 GMT
        Subject: CN=37EF45EB765D00E7255DC8765A433569657BCB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:7f:64:31:a9:a6:b5:7c:a2:2c:9e:1d:0b:
                    f4:f6:8a:04:f0:f5:68:0a:f9:94:e0:e4:da:8c:e9:
                    4c:30:2d:e9:11:9c:26:e7:35:56:ff:73:0b:ee:9b:
                    7c:f4:13:4f:ab:23:e4:cb:c6:ce:d6:94:3b:84:29:
                    d1:e4:10:3c:8d:1f:3e:7f:d9:4b:73:2f:7a:08:6f:
                    c2:95:0a:d3:48:2c:70:1e:20:68:98:77:fa:be:73:
                    a2:29:10:01:bc:8d:c4:32:59:e5:bb:f9:92:f7:55:
                    ab:aa:fc:1c:99:5c:c2:61:c9:6b:57:a9:2e:8d:67:
                    34:d9:1c:20:09:16:a9:43:73:23:61:68:96:fa:bf:
                    73:b6:12:4b:91:bf:33:99:43:5d:16:5e:ea:ba:e6:
                    0a:65:68:f2:e3:bb:95:78:a9:c0:5b:81:17:eb:73:
                    93:3b:c4:24:29:e7:fd:fc:47:1f:db:05:cd:d0:b2:
                    78:6e:66:12:4f:98:20:dd:30:72:61:ea:8c:42:8e:
                    b7:d9:7a:dd:d1:d6:97:18:cc:4b:f6:cd:bc:fe:45:
                    d7:96:59:c0:6d:b7:e8:6b:05:9c:8a:84:b0:da:4e:
                    53:22:99:27:ec:00:03:74:49:35:d5:2e:9c:bd:a2:
                    46:a2:1d:f6:bb:2d:81:9c:b4:1f:bd:de:4c:9f:f4:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EF:45:EB:76:5D:00:E7:25:5D:C8:76:5A:43:35:69:65:7B:CB:1B
            X509v3 Authority Key Identifier:
                keyid:1A:4B:8A:F1:C8:8E:74:16:5F:62:C6:5E:15:44:A0:F4:72:59:CC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32322d3232203d3e20323638303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:05:4c:a1:d2:db:08:af:ff:63:7a:8b:05:8e:fa:96:c8:3b:
         a6:ee:30:03:34:8e:b6:41:56:f3:a8:b5:07:e8:9f:cc:3c:16:
         eb:6e:12:23:9f:0f:f8:5d:87:1e:2e:6c:4e:ea:9e:36:30:6d:
         40:21:ce:98:bb:7d:5c:ec:4a:ab:16:95:b3:bd:f5:81:cf:56:
         da:11:66:15:97:ad:0d:0a:a2:24:6f:29:78:55:cb:51:51:f6:
         46:b4:de:90:2c:a2:a9:2a:15:b8:88:d6:e4:b4:d3:dc:fb:06:
         71:98:b3:e3:fe:13:48:69:e4:f9:9c:86:d5:0d:a4:67:0b:21:
         7d:e5:d7:c1:0e:2d:79:b1:60:bd:98:b2:d2:00:6a:ea:76:1d:
         ab:19:2d:33:d5:65:2d:bc:b6:26:e1:4a:a7:af:c4:d2:be:b9:
         48:f9:a8:07:36:e0:b2:df:9a:27:77:91:32:74:94:ec:de:a9:
         0b:a6:a4:30:34:46:b3:52:af:4d:bf:0d:6d:d6:9d:a5:df:ea:
         a2:ca:1a:44:54:c3:07:4a:d6:03:64:ea:05:21:bb:77:8a:14:
         2a:d7:d6:cc:e6:6a:79:ac:9d:75:b4:38:4f:1e:0f:fe:ee:42:
         2b:b7:24:64:22:f3:ab:ce:ef:44:a5:93:b6:0e:30:42:6d:2b:
         31:0a:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:25:49 2025 by rpki-client