Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32322e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          ti7HIxBFJGpgBoV3DtB/H+a0a/zEF/vpVlLR/R4hKLk=
Subject key identifier:   A5:4D:66:10:67:53:44:A2:D9:8A:71:CA:DD:6D:CE:B8:D9:64:C6:7A
Certificate issuer:       /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial:       6323B53A1DFDD164921E55865CC37B92A6E8888E
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
Signing time:             Mon 05 May 2025 20:58:38 +0000
ROA not before:           Mon 05 May 2025 20:53:38 +0000
ROA not after:            Mon 04 May 2026 20:58:38 +0000
asID:                     268440
IP address blocks:        45.161.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 21:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:23:b5:3a:1d:fd:d1:64:92:1e:55:86:5c:c3:7b:92:a6:e8:88:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
        Validity
            Not Before: May  5 20:53:38 2025 GMT
            Not After : May  4 20:58:38 2026 GMT
        Subject: CN=A54D6610675344A2D98A71CADD6DCEB8D964C67A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:92:07:4f:a7:80:26:70:d1:02:13:86:ab:c6:
                    49:70:b8:8e:eb:47:35:47:4a:d0:14:1c:f2:09:55:
                    18:c4:fc:a2:2d:4f:38:75:ee:50:c7:5a:2e:33:72:
                    0b:f7:4f:2a:8a:63:b1:d3:d1:3f:1e:53:ad:2a:54:
                    7b:b7:e7:4e:fb:5f:8a:a5:57:72:98:27:75:c5:b3:
                    de:ad:02:96:bd:94:03:bf:96:b4:49:26:f2:fe:86:
                    47:e2:a5:d9:cc:d1:27:28:06:a9:1b:40:46:c2:57:
                    fa:56:c4:45:a1:91:31:c0:2e:64:fd:0a:f4:5e:bd:
                    f3:76:c4:40:a0:5f:b6:23:23:7f:fc:1c:c6:68:54:
                    a9:ab:14:94:7c:10:d7:ab:4d:5b:8c:a7:b7:91:67:
                    00:c8:e7:65:82:a4:f9:77:28:b5:e3:d7:d5:40:b3:
                    7d:78:c1:2f:c1:26:5b:99:ce:22:1f:13:f7:6b:72:
                    86:45:08:16:73:29:12:f5:f0:2e:b5:76:8f:e3:25:
                    fd:90:a9:47:b0:94:97:4e:d8:29:81:ec:31:a6:96:
                    72:1c:25:ba:e1:fe:fc:e5:ce:8d:49:7e:69:12:f3:
                    dc:0e:33:93:e7:72:63:58:af:59:ee:6b:83:11:5d:
                    22:e3:33:2d:9e:97:e4:fe:d8:91:d3:d0:27:8a:6c:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4D:66:10:67:53:44:A2:D9:8A:71:CA:DD:6D:CE:B8:D9:64:C6:7A
            X509v3 Authority Key Identifier:
                keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:3d:aa:46:68:81:f4:5c:ce:e8:a4:67:2c:61:4a:22:e5:ab:
         f9:1e:aa:13:88:b1:cc:42:0e:b0:f1:a6:20:90:10:9d:c8:3c:
         f9:91:af:ee:94:4c:f3:07:3e:71:e6:3d:5e:43:00:ee:9a:5f:
         66:ee:48:6c:bf:53:e2:0f:b1:91:00:37:ef:59:4b:7c:fc:6f:
         5c:85:69:3b:69:ea:4b:77:30:cd:76:e0:c2:c3:2a:57:f2:81:
         76:23:ff:1c:88:ea:f7:de:fb:4a:11:79:19:9f:08:d1:5a:55:
         04:e3:7b:21:79:b2:0b:04:18:21:40:48:a2:12:5b:e3:f2:00:
         e9:58:e3:65:10:78:1c:8b:81:a9:05:03:51:c9:05:16:54:1e:
         56:42:b1:da:a9:97:78:10:9c:cb:cd:40:1c:15:b4:3a:bf:8a:
         98:2c:9b:f1:c2:dd:27:b9:b4:3d:e6:81:a2:35:99:14:2c:4b:
         48:32:2b:96:28:12:9d:62:a7:bc:48:30:a9:48:bb:4d:fa:98:
         37:2d:8c:d8:f5:77:c3:49:71:f0:83:83:57:1f:76:b8:1b:e2:
         cc:a0:c2:d0:9f:19:aa:31:04:c4:e8:a3:67:15:80:8d:bb:26:
         ab:4c:dc:75:66:c0:6b:0b:ac:c1:8f:f1:6c:62:87:9f:e2:9e:
         c4:27:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:27:04 2025 by rpki-client