Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32332d3233203d3e20323638343633.roa (raw, json)
Hash identifier:          GX704nDOBg3WgEJbhPqpJVhpfcCs/gN9HBFJuPNEWPE=
Subject key identifier:   5F:4C:F5:F6:34:94:A1:07:44:6C:80:F9:B0:5C:30:42:3C:5E:38:A5
Certificate issuer:       /CN=4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C
Certificate serial:       0B71C4B47803A5970CE59B2AD4FD279B1D48F7F7
Authority key identifier: 4A:B7:DF:BD:96:BC:DC:3F:59:F2:BB:26:0A:F8:4F:EF:8D:41:2C:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa
Signing time:             Fri 02 May 2025 18:22:13 +0000
ROA not before:           Fri 02 May 2025 18:17:13 +0000
ROA not after:            Fri 01 May 2026 18:22:13 +0000
asID:                     268463
IP address blocks:        45.161.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 03:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:71:c4:b4:78:03:a5:97:0c:e5:9b:2a:d4:fd:27:9b:1d:48:f7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C
        Validity
            Not Before: May  2 18:17:13 2025 GMT
            Not After : May  1 18:22:13 2026 GMT
        Subject: CN=5F4CF5F63494A107446C80F9B05C30423C5E38A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:36:ac:5f:e7:7a:c3:38:71:db:3d:2b:4f:
                    fd:c8:26:68:f9:3e:f2:68:05:5a:bd:bf:e1:2c:33:
                    69:8c:db:e0:6a:97:bc:55:24:e8:a2:09:59:8a:7a:
                    87:0d:cf:4f:37:20:7c:12:64:b3:f2:02:21:9c:6b:
                    e1:7b:e9:a7:d0:8b:28:cc:02:63:ad:f9:19:e0:cc:
                    42:52:77:22:27:e3:12:d2:8a:64:eb:86:a1:db:f4:
                    6f:e0:b7:19:56:63:9c:9c:62:91:ba:c3:39:cb:49:
                    96:27:ef:42:da:ac:5c:96:d9:f8:24:10:eb:51:22:
                    8f:7d:91:22:63:2d:f6:92:d7:53:dd:c7:49:3b:46:
                    9c:39:a8:3a:aa:64:fc:c5:cc:b8:e9:f6:26:9b:fa:
                    02:41:b8:29:47:b2:23:7f:36:df:5e:a1:c9:6c:00:
                    b9:e8:7b:55:10:30:3d:e1:db:e8:86:9c:95:ba:53:
                    d2:7d:05:a6:96:70:12:32:14:18:b7:41:e5:87:1d:
                    df:66:95:b4:df:25:55:ce:3e:1b:80:97:53:79:42:
                    d2:d8:8c:d5:35:4b:d7:ac:71:43:29:40:2b:a7:2c:
                    cc:3a:80:70:b8:a1:47:09:3e:af:af:5a:74:41:22:
                    e1:2e:00:67:00:7a:a2:4a:6a:68:1b:21:4b:58:fe:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4C:F5:F6:34:94:A1:07:44:6C:80:F9:B0:5C:30:42:3C:5E:38:A5
            X509v3 Authority Key Identifier:
                keyid:4A:B7:DF:BD:96:BC:DC:3F:59:F2:BB:26:0A:F8:4F:EF:8D:41:2C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:3c:5e:84:a8:4d:5c:86:e2:e8:48:92:a0:4c:df:59:fd:9f:
         48:13:62:11:9e:8b:fe:5c:39:0d:c8:bb:65:86:0e:49:6d:ea:
         2a:b5:ab:66:90:ce:10:fb:6f:42:d8:ea:90:96:b2:79:0f:10:
         ff:a0:7f:61:ec:e7:a4:74:17:e4:8d:1e:5f:69:5b:44:c8:c1:
         be:d8:af:9e:64:a2:7a:7e:38:bc:cc:34:45:98:82:8b:13:95:
         30:fc:65:30:14:f6:77:3c:d7:19:04:a7:a6:4e:57:28:e6:41:
         21:4d:d5:7f:cd:cf:6c:d4:88:0e:bf:c7:7e:a0:ef:50:8e:f4:
         3a:10:5e:30:71:3f:ad:ca:94:cb:9a:1e:52:00:1c:e5:42:68:
         8c:ee:42:c5:c9:4a:1d:69:11:58:d5:d4:d1:0d:e9:e2:e8:52:
         57:74:c3:ac:af:76:39:19:45:8c:40:7a:3e:86:95:79:f7:bd:
         7e:74:21:10:51:44:a4:d6:9d:66:c5:0e:9a:4d:67:af:ad:19:
         8a:04:f5:0c:5a:5d:49:59:81:bd:51:64:d5:0b:54:a6:25:3b:
         9d:ad:ad:f3:6b:98:be:35:7b:ea:ad:b8:d3:4e:40:c4:10:89:
         ad:ca:5f:67:95:8d:d0:77:10:2d:f0:c4:df:a8:ab:16:09:12:
         63:35:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:42:02 2025 by rpki-client