Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32342d3234203d3e20323638303530.roa
File:                     34352e3136372e34342e302f32342d3234203d3e20323638303530.roa (raw, json)
Hash identifier:          ZFPcW5PrhOrIKlqpb25U97FydXQsyrrNxuVWrgjHlAg=
Subject key identifier:   E8:10:0B:5C:B9:62:B2:D7:E5:A4:6D:9D:95:B0:A2:7D:46:20:41:F0
Certificate issuer:       /CN=1A4B8AF1C88E74165F62C65E1544A0F47259CC21
Certificate serial:       16E9266BA9B309D242B07D0BB342825437BF73E5
Authority key identifier: 1A:4B:8A:F1:C8:8E:74:16:5F:62:C6:5E:15:44:A0:F4:72:59:CC:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32342d3234203d3e20323638303530.roa
Signing time:             Fri 02 May 2025 21:32:52 +0000
ROA not before:           Fri 02 May 2025 21:27:52 +0000
ROA not after:            Fri 01 May 2026 21:32:52 +0000
asID:                     268050
IP address blocks:        45.167.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.crl
                          rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 08:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:26:6b:a9:b3:09:d2:42:b0:7d:0b:b3:42:82:54:37:bf:73:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4B8AF1C88E74165F62C65E1544A0F47259CC21
        Validity
            Not Before: May  2 21:27:52 2025 GMT
            Not After : May  1 21:32:52 2026 GMT
        Subject: CN=E8100B5CB962B2D7E5A46D9D95B0A27D462041F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:66:f2:56:4a:21:f2:f9:f2:64:a7:3d:6e:
                    b1:68:02:cf:7c:1f:c0:ef:68:eb:36:13:a4:85:7b:
                    22:3b:00:70:37:76:c7:3c:66:1b:e5:6a:22:db:13:
                    7c:ec:0e:8a:64:84:f9:6b:ea:ee:41:b9:5f:cf:14:
                    f5:6a:a0:91:3e:13:f5:41:8a:c4:ae:55:45:e7:01:
                    fc:1e:37:35:41:79:80:e4:ed:d0:99:17:5b:be:41:
                    81:cd:dc:c5:81:c8:ab:bc:ae:45:82:ed:10:cc:a6:
                    3e:93:6e:11:5e:36:75:43:59:bf:84:4c:f8:d6:26:
                    37:e8:25:10:f7:87:28:dd:c4:b2:b0:07:b2:85:2e:
                    f6:0e:3f:55:4a:22:8b:a2:8d:c2:5e:de:64:13:64:
                    59:c3:07:4b:ed:97:b0:6a:e6:3f:c1:a2:96:e3:91:
                    ce:91:d1:ec:61:49:b7:8c:ac:2a:50:71:66:60:79:
                    81:c4:6b:7b:c3:7e:58:23:06:3b:ec:50:c8:05:4f:
                    c1:5b:8a:f3:30:98:f3:74:c3:25:64:46:90:e4:ea:
                    9d:52:c8:10:9c:2c:4c:3f:6d:9c:dd:37:64:16:23:
                    53:ae:24:77:ff:41:a0:7b:78:7e:c5:db:1a:4f:b5:
                    68:eb:d0:9f:09:ce:9c:08:7a:1a:ce:d5:02:91:e5:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:10:0B:5C:B9:62:B2:D7:E5:A4:6D:9D:95:B0:A2:7D:46:20:41:F0
            X509v3 Authority Key Identifier:
                keyid:1A:4B:8A:F1:C8:8E:74:16:5F:62:C6:5E:15:44:A0:F4:72:59:CC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A4B8AF1C88E74165F62C65E1544A0F47259CC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32342d3234203d3e20323638303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:66:39:60:61:f9:a8:02:8d:91:f1:2c:64:70:82:8e:c8:2a:
         7b:e8:15:47:5d:e5:08:c6:f5:63:7d:66:f7:20:ca:e2:c2:e1:
         5f:9a:c8:cc:c9:62:89:fd:88:42:90:d1:13:ec:9c:a8:db:9c:
         5d:09:5d:a2:96:0f:9d:27:13:d2:ea:b7:1b:ea:24:cf:9c:f5:
         84:77:a5:f7:c7:fd:6b:82:3b:5a:c4:68:28:3b:82:ba:dd:ec:
         b1:0f:e7:23:f4:d7:ca:2b:9d:5a:de:8e:3f:5d:04:50:8e:80:
         c2:a4:de:a8:c6:8d:b0:56:5b:a4:a6:eb:cc:7f:20:8f:9d:44:
         4d:0a:4a:17:31:87:d0:c1:67:1d:d8:7a:05:91:b2:ff:d9:fa:
         98:84:47:ed:7d:11:c4:e9:af:73:02:2b:98:54:01:59:3a:7a:
         6e:74:9f:87:28:84:02:b5:46:8b:77:69:b2:29:0e:1a:02:a2:
         01:47:c8:3a:26:26:e5:7d:87:d6:9e:ec:00:ed:83:ac:d5:f0:
         43:fc:9a:bf:fe:4c:ef:1e:6a:af:0e:1c:a4:b9:25:ac:f1:8f:
         9d:c2:3b:e5:62:cc:57:82:56:27:9b:8e:33:ad:0a:e5:29:79:
         4f:66:1b:a9:d1:2d:61:5c:19:56:41:72:e9:fa:2f:f3:e4:39:
         e4:93:60:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:22:08 2025 by rpki-client