Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32332d3233203d3e20323638343430.roa (raw, json)
Hash identifier:          aZlKR9yzFSJdW6z5xIOfJ0uJ2kMMMXL2lQdODcChoLc=
Subject key identifier:   07:8D:F1:18:0D:8C:A2:CC:C7:52:FE:1F:CD:78:E4:9D:7E:A2:BA:DF
Certificate issuer:       /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial:       018CC124BEA6A03D01BE76B12EB484000996BA29
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa
Signing time:             Mon 05 May 2025 20:58:38 +0000
ROA not before:           Mon 05 May 2025 20:53:38 +0000
ROA not after:            Mon 04 May 2026 20:58:38 +0000
asID:                     268440
IP address blocks:        45.161.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 16:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c1:24:be:a6:a0:3d:01:be:76:b1:2e:b4:84:00:09:96:ba:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
        Validity
            Not Before: May  5 20:53:38 2025 GMT
            Not After : May  4 20:58:38 2026 GMT
        Subject: CN=078DF1180D8CA2CCC752FE1FCD78E49D7EA2BADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1c:5b:49:dd:ad:05:98:49:6b:fe:13:d5:b3:
                    85:51:15:70:e5:53:ac:89:4f:f2:58:ec:2e:44:3f:
                    45:04:14:26:ef:a2:3a:66:b0:f0:7b:67:72:0b:5e:
                    48:02:7b:71:34:98:a0:07:7c:e6:31:7a:24:61:95:
                    63:23:c5:dd:24:18:9e:48:56:67:4c:d6:b6:4b:d9:
                    70:b4:33:0c:3e:5f:c2:fa:5c:ac:eb:76:6e:ff:cb:
                    28:cd:e7:24:8e:94:1e:05:99:2a:ff:ec:1e:44:4e:
                    bb:e9:18:d6:dd:fc:49:f8:da:07:bc:f1:e0:b4:f6:
                    78:3d:82:2f:36:bd:54:e5:35:48:d1:ff:8e:0a:90:
                    01:01:20:0d:8b:3d:bc:9e:01:48:1a:81:08:b4:8a:
                    19:5e:04:0c:97:5f:f2:73:87:e7:24:39:07:df:15:
                    d6:45:04:83:95:0f:cf:a0:d7:de:0c:75:31:e7:43:
                    9e:e6:f4:43:63:a4:a5:d3:84:99:7f:d9:04:17:5d:
                    ed:cd:b6:c1:b9:38:76:2e:d1:7d:33:87:f2:f4:d0:
                    e5:82:b1:ef:a7:5d:7a:49:22:9b:59:a0:8c:15:2b:
                    ba:5d:a4:ba:ee:e1:8c:b2:f0:19:a8:7f:b7:62:0a:
                    b0:6b:c9:39:fa:42:4b:09:d4:e1:19:1d:d6:71:cc:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8D:F1:18:0D:8C:A2:CC:C7:52:FE:1F:CD:78:E4:9D:7E:A2:BA:DF
            X509v3 Authority Key Identifier:
                keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:0c:38:13:0a:15:ba:e8:c1:89:d2:12:86:a4:8d:02:64:
         cc:25:72:76:6d:7a:28:27:f5:21:07:1c:ed:ce:09:ea:c3:94:
         6e:48:f6:59:8f:08:47:ec:6a:b8:37:5c:64:01:4f:ea:15:fc:
         ee:9a:46:ea:de:97:ad:ec:54:0e:57:98:ef:80:d9:8c:e3:de:
         94:29:16:b0:a2:72:fe:81:68:17:04:85:0a:0a:b5:f9:12:4e:
         17:e1:4b:80:aa:6f:20:1f:d6:bf:b0:7a:fe:f5:34:64:86:b1:
         19:75:4a:22:66:7a:5c:e6:e7:25:f4:8b:e1:71:80:c9:fb:05:
         af:b5:9a:f0:0e:e6:a1:49:df:88:40:1d:cb:25:32:c4:be:23:
         6d:67:c1:bd:a6:ce:08:20:91:60:4b:42:86:b5:e7:75:3c:2b:
         86:66:3c:ff:c8:24:8c:1a:93:2d:9f:f8:ea:bc:9a:e9:af:3a:
         dd:47:08:ea:a8:23:fb:a8:e0:7b:b0:fd:b9:77:1c:b3:31:c4:
         74:4d:fa:93:4a:73:8d:aa:31:49:aa:ed:91:38:13:b1:8e:9f:
         32:d0:e0:58:cb:76:43:75:fe:7d:cc:97:01:7b:c8:4a:fa:b5:
         56:cb:0b:2e:6b:ea:ad:07:5b:e1:2d:12:fc:87:a0:63:3f:73:
         e5:a9:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:22:10 2025 by rpki-client