Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32322d3232203d3e20323638343430.roa (raw, json)
Hash identifier:          AFEYVjjW+wvete2PJlFYWoGHoYxnbrR/4LLywvpYxy8=
Subject key identifier:   3D:5C:22:F1:D0:9C:20:77:9C:BC:AB:93:AF:12:AF:CE:02:87:B4:4B
Certificate issuer:       /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial:       2594A10737AB7DA1FEFDEBFF134D9AFE35F9CC08
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa
Signing time:             Mon 05 May 2025 20:58:37 +0000
ROA not before:           Mon 05 May 2025 20:53:37 +0000
ROA not after:            Mon 04 May 2026 20:58:37 +0000
asID:                     268440
IP address blocks:        45.161.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 16:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:94:a1:07:37:ab:7d:a1:fe:fd:eb:ff:13:4d:9a:fe:35:f9:cc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
        Validity
            Not Before: May  5 20:53:37 2025 GMT
            Not After : May  4 20:58:37 2026 GMT
        Subject: CN=3D5C22F1D09C20779CBCAB93AF12AFCE0287B44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:d0:01:ef:8f:b1:21:d4:f9:7c:ce:40:a6:
                    bf:1c:d3:e7:83:5f:c3:d2:5b:37:04:68:96:30:53:
                    be:6f:24:27:e8:a7:4f:55:2d:c9:cd:0c:02:98:97:
                    d7:01:13:99:cd:00:d1:f5:51:a5:fa:3c:7a:2e:6d:
                    83:13:5e:0a:10:cd:9c:fb:04:19:5e:df:cb:23:92:
                    18:b5:60:8c:62:fa:50:d3:77:73:06:51:9c:76:28:
                    ef:37:2b:c9:53:c6:bc:ab:33:71:7e:66:ee:bf:f1:
                    b3:a7:64:f1:ee:20:87:6a:69:45:43:e9:81:b1:fd:
                    30:78:33:66:46:c1:bd:ee:12:50:8a:4e:81:d8:2c:
                    5f:0f:0f:22:e2:8f:18:28:b8:b1:68:3c:4f:ef:ac:
                    77:23:98:6b:03:3a:fe:87:d9:8e:66:a6:18:9f:8a:
                    d2:98:7b:45:3a:a6:45:54:97:29:23:a2:e5:1f:34:
                    d9:ce:40:63:aa:29:39:97:11:fb:3c:d5:7f:fa:ce:
                    77:3d:3f:a5:18:56:12:45:26:00:c4:d2:7f:0d:da:
                    bf:25:40:c2:ca:af:2c:46:b2:05:0c:26:55:d5:ee:
                    6f:eb:86:ff:d6:a2:a1:ad:2f:1b:7e:2b:4d:77:8f:
                    84:20:3a:e9:32:dd:9c:04:c0:78:f5:03:8a:ff:b5:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5C:22:F1:D0:9C:20:77:9C:BC:AB:93:AF:12:AF:CE:02:87:B4:4B
            X509v3 Authority Key Identifier:
                keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:6b:28:1e:6e:4f:91:69:e4:69:3b:78:4a:fd:86:2b:31:
         3a:c9:b6:a4:c4:d7:b4:08:db:f5:ad:d8:d1:66:f3:59:fa:a3:
         27:c7:40:7d:64:69:3a:1a:04:a1:61:32:8d:f2:9a:22:7e:c3:
         29:b2:06:17:b9:a8:a6:03:86:82:95:fa:1e:a5:cd:d9:5b:8c:
         1d:e5:55:a9:4e:57:53:e7:fb:78:7a:7f:ce:1a:17:11:a1:81:
         f8:00:3b:6e:b1:e4:f2:d2:c8:78:7d:b5:30:35:30:0b:3e:c9:
         66:13:e6:67:a2:35:d3:8c:86:79:65:69:71:bf:74:55:81:b9:
         66:20:25:78:fc:c4:1e:e2:76:8f:8a:55:ff:4d:55:ae:f6:0d:
         5d:28:e0:92:a7:d7:ed:80:87:5a:e9:63:be:eb:4e:51:cd:dc:
         80:32:4c:63:44:f2:79:ca:11:5f:22:91:bd:45:70:29:cf:56:
         06:e4:9e:73:2e:27:04:8d:ee:f6:12:46:e2:67:98:c2:98:cd:
         f3:ad:bd:ac:57:6f:53:9e:c9:fb:2c:2c:ab:5d:79:4f:05:fa:
         18:79:df:18:3c:2b:2b:4f:2a:a0:33:0f:ff:f2:99:92:e7:ec:
         ea:3d:6a:09:7d:99:e7:45:bf:3f:06:c9:4b:d8:76:be:c9:4d:
         ba:91:dd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:17:14 2025 by rpki-client