Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32342d3234203d3e20323638373131.roa
File:                     34352e3137312e3132342e302f32342d3234203d3e20323638373131.roa (raw, json)
Hash identifier:          lwU3usMCsVEjURfw5ONM6cJpzOfG5SCqaJ9tlUlH/0w=
Subject key identifier:   5C:20:8A:B9:84:0C:85:4B:15:DD:B5:8B:6A:1C:90:1D:42:38:D1:D3
Certificate issuer:       /CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
Certificate serial:       3C95CF0530031C91436BE3F4D58A6923CA4633C8
Authority key identifier: C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32342d3234203d3e20323638373131.roa
Signing time:             Wed 30 Apr 2025 19:03:51 +0000
ROA not before:           Wed 30 Apr 2025 18:58:51 +0000
ROA not after:            Wed 29 Apr 2026 19:03:51 +0000
asID:                     268711
IP address blocks:        45.171.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:95:cf:05:30:03:1c:91:43:6b:e3:f4:d5:8a:69:23:ca:46:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
        Validity
            Not Before: Apr 30 18:58:51 2025 GMT
            Not After : Apr 29 19:03:51 2026 GMT
        Subject: CN=5C208AB9840C854B15DDB58B6A1C901D4238D1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:07:45:bc:3b:ea:66:e2:dd:a3:41:ce:c8:
                    c8:00:94:13:a0:ed:22:dd:fb:b7:5e:5f:e1:a0:1a:
                    ef:18:4f:61:b8:ac:dc:bc:88:b2:13:ed:13:82:8f:
                    0a:0e:1b:a4:0e:25:53:cc:11:0c:2b:bb:31:eb:17:
                    35:75:a4:92:74:7d:61:5c:3a:53:8d:94:ec:0b:ba:
                    f2:9c:e0:a4:73:c1:0e:f1:ed:e1:a3:0b:a3:a0:17:
                    3f:30:f9:b8:7a:2c:d1:94:4b:f5:6c:6a:dc:98:77:
                    eb:a5:f1:b3:16:ed:b7:75:a3:0a:1f:8f:0c:16:13:
                    80:83:81:97:fe:d0:b3:33:cc:ef:a2:d7:84:81:b1:
                    f5:9e:ce:31:38:1d:57:f9:dd:5d:ad:d9:09:99:4a:
                    4e:6b:60:ca:27:95:e2:db:b5:7b:a7:7f:b8:ce:a0:
                    c1:ed:bb:c8:b8:ed:51:10:51:a8:ce:8f:86:82:e3:
                    ee:fc:13:a7:5f:cc:96:a2:fe:93:9a:f7:9b:4a:72:
                    9c:7c:c4:d2:95:0a:f5:9d:f8:51:0d:96:c6:2c:7e:
                    01:c6:ed:97:3e:b7:d1:b2:6d:dd:b9:a2:9d:08:99:
                    f8:a1:8a:f9:97:24:c1:65:c7:c3:e1:0b:46:ad:8b:
                    07:e8:6b:79:66:99:df:1b:ec:15:1d:a5:d3:80:24:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:20:8A:B9:84:0C:85:4B:15:DD:B5:8B:6A:1C:90:1D:42:38:D1:D3
            X509v3 Authority Key Identifier:
                keyid:C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32342d3234203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:97:5b:d5:d3:d7:d1:7d:bc:b8:ad:38:ca:e2:cf:96:d3:d7:
         e9:a3:13:c8:2c:ac:a2:2b:b8:03:cc:19:02:f7:d0:79:c8:d4:
         43:69:c6:f3:77:39:90:5a:81:00:a9:13:11:7a:79:46:63:cf:
         47:92:22:a6:b8:33:bc:81:53:a0:54:12:70:bc:9c:34:84:bf:
         2a:c4:6b:07:3f:48:6f:cd:28:b0:ac:d0:16:30:61:21:e9:e5:
         92:4d:b0:6d:61:56:1b:6c:5e:b3:0a:4d:1e:ba:45:61:b0:0c:
         5d:6c:b6:a1:6b:ce:cc:2a:68:12:d9:00:a0:90:51:86:af:16:
         31:0b:eb:f2:71:2b:fb:86:a7:ce:b8:95:94:b1:53:c6:42:e4:
         d6:a2:61:72:40:43:a6:20:fb:63:f1:bc:94:0b:55:cb:5c:2e:
         7f:57:17:96:48:fc:06:d0:da:3a:34:b5:6f:6a:fc:70:ad:66:
         55:0d:b1:ff:ea:ab:a5:da:c0:95:04:33:ce:e8:1b:26:e1:0b:
         61:4a:9d:39:d2:41:56:71:c9:a9:db:77:92:91:7e:80:54:c7:
         08:d4:4c:f4:04:b2:22:e8:4c:98:10:d9:c9:04:e3:e6:38:d2:
         c4:c8:41:b1:77:d9:c4:e7:59:10:ca:2c:6b:cb:37:e8:95:ad:
         0a:81:1f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:48:40 2025 by rpki-client