Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32322d3332203d3e203631353930.roa
File:                     34352e3233342e31322e302f32322d3332203d3e203631353930.roa (raw, json)
Hash identifier:          U4wsdTsmMPhSWpocQy/NyckIt8dCCgATeynJHI53SUY=
Subject key identifier:   40:51:E5:F0:55:F2:85:19:BF:5A:3D:7B:2E:9B:86:77:D4:E4:8B:B7
Certificate issuer:       /CN=312A81EEE8B65E8228B79CA2DF0A8B272DAEF5C4
Certificate serial:       102991A81060D03CD88A88873B0CE1FE14F57017
Authority key identifier: 31:2A:81:EE:E8:B6:5E:82:28:B7:9C:A2:DF:0A:8B:27:2D:AE:F5:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312A81EEE8B65E8228B79CA2DF0A8B272DAEF5C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32322d3332203d3e203631353930.roa
Signing time:             Mon 07 Apr 2025 13:09:53 +0000
ROA not before:           Mon 07 Apr 2025 13:04:53 +0000
ROA not after:            Mon 06 Apr 2026 13:09:53 +0000
asID:                     61590
IP address blocks:        45.234.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/312A81EEE8B65E8228B79CA2DF0A8B272DAEF5C4.crl
                          rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/312A81EEE8B65E8228B79CA2DF0A8B272DAEF5C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312A81EEE8B65E8228B79CA2DF0A8B272DAEF5C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 02:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:29:91:a8:10:60:d0:3c:d8:8a:88:87:3b:0c:e1:fe:14:f5:70:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312A81EEE8B65E8228B79CA2DF0A8B272DAEF5C4
        Validity
            Not Before: Apr  7 13:04:53 2025 GMT
            Not After : Apr  6 13:09:53 2026 GMT
        Subject: CN=4051E5F055F28519BF5A3D7B2E9B8677D4E48BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:d9:22:11:27:80:bb:c6:f8:db:94:07:d6:
                    b8:d1:06:4b:3d:c3:4e:69:f6:39:6c:d6:15:cb:ac:
                    ad:02:9e:02:56:00:7d:09:e2:4e:9c:90:b8:9d:cc:
                    2e:72:9d:32:64:d3:64:d5:a8:ca:97:a2:da:f1:30:
                    d9:02:77:1d:58:17:31:7d:cc:dd:a7:84:70:53:74:
                    cd:c7:d8:2f:87:44:39:c5:4c:8a:51:59:5c:9c:23:
                    44:51:63:bb:ec:e4:e8:59:d4:cf:cf:45:79:97:d0:
                    28:b6:9a:c3:a6:25:0b:37:79:34:8d:0b:c0:96:fc:
                    bc:ad:f2:6d:cc:bc:aa:c5:36:81:58:7a:a0:7d:20:
                    db:a4:d8:71:f9:8b:02:0d:0a:a9:15:68:01:07:a5:
                    ba:24:23:22:08:3c:76:68:68:cb:f0:48:8e:fe:94:
                    a6:bf:20:b5:c3:56:dd:44:0e:d7:2d:98:5a:d9:84:
                    44:70:b7:08:1c:b2:ed:40:d5:e7:3e:7f:1a:8a:a2:
                    39:bb:d9:7f:6a:67:20:23:c0:f7:39:72:e1:3e:00:
                    7b:23:5c:75:fc:5c:1c:da:d5:07:b0:4c:f4:d8:be:
                    c7:fc:ba:73:99:8b:a0:ab:eb:8c:ca:4e:ea:55:32:
                    2d:5e:9f:55:84:6b:ac:10:39:42:ae:5e:66:44:0b:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:51:E5:F0:55:F2:85:19:BF:5A:3D:7B:2E:9B:86:77:D4:E4:8B:B7
            X509v3 Authority Key Identifier:
                keyid:31:2A:81:EE:E8:B6:5E:82:28:B7:9C:A2:DF:0A:8B:27:2D:AE:F5:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/312A81EEE8B65E8228B79CA2DF0A8B272DAEF5C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312A81EEE8B65E8228B79CA2DF0A8B272DAEF5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32322d3332203d3e203631353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:74:15:2e:64:e3:28:35:0b:bc:75:dc:3e:b0:a0:a5:6b:91:
         13:8b:bb:82:67:36:5b:32:3d:bd:73:e6:b4:b1:f2:fc:32:e4:
         38:58:e6:02:48:0f:6a:8b:02:3c:f6:c3:66:5f:84:b0:0c:c4:
         15:46:f5:ce:54:c1:55:5d:4f:61:15:47:be:a9:78:1f:e6:a9:
         f1:ea:22:ce:85:4d:86:1d:03:4f:73:65:bc:3b:d4:1c:09:44:
         31:61:df:38:02:af:eb:e1:6f:51:4e:25:0d:31:8d:b4:39:00:
         89:0e:5b:6d:34:04:4d:c7:81:fb:6f:d9:83:e2:9a:95:2d:a9:
         0e:14:b4:e4:b1:f0:ca:ae:05:97:20:c4:72:d1:24:26:92:74:
         c1:4a:c5:f7:f3:ac:5e:e9:e5:7a:89:ca:c5:ec:52:88:17:f2:
         7e:a3:b3:46:6a:7c:23:19:b3:bb:d0:04:a7:9c:d6:83:86:72:
         f7:b7:f3:42:17:78:d8:0b:ce:79:82:8a:41:ed:e9:ff:cb:80:
         f7:c3:70:70:8e:b7:ae:2c:71:5d:55:fb:74:a3:44:a6:7b:00:
         25:ac:2c:b1:3d:af:98:9e:01:21:94:af:f2:55:ec:98:15:3e:
         10:c7:7a:08:f6:5a:66:0c:58:bc:19:17:95:03:2b:66:ce:99:
         5e:dc:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:59:27 2025 by rpki-client