Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35342e302f32332d3233203d3e20323638323231.roa
File:                     34352e3233362e35342e302f32332d3233203d3e20323638323231.roa (raw, json)
Hash identifier:          5UTaU84R+nywBkmh2VOMTd/UzpdSJSI3l+dyzYmnuFo=
Subject key identifier:   74:04:81:F4:43:F7:BD:80:89:60:19:24:9F:23:67:B8:5C:A7:39:44
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       0C0F4937C270528C07C2A6B948892BA7AE36AD82
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35342e302f32332d3233203d3e20323638323231.roa
Signing time:             Tue 29 Apr 2025 20:15:32 +0000
ROA not before:           Tue 29 Apr 2025 20:10:32 +0000
ROA not after:            Tue 28 Apr 2026 20:15:32 +0000
asID:                     268221
IP address blocks:        45.236.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 08:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0f:49:37:c2:70:52:8c:07:c2:a6:b9:48:89:2b:a7:ae:36:ad:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: Apr 29 20:10:32 2025 GMT
            Not After : Apr 28 20:15:32 2026 GMT
        Subject: CN=740481F443F7BD80896019249F2367B85CA73944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:77:f5:18:b6:85:e7:e3:8d:bc:ac:0b:cb:cb:
                    0c:47:2f:f6:83:61:39:61:41:68:86:0f:5c:75:4d:
                    5d:aa:74:80:32:64:e5:43:ce:96:87:72:9e:67:a3:
                    7f:5a:6f:7c:88:bf:a9:b0:31:cd:bc:84:f9:28:ed:
                    be:74:ee:a0:68:3a:86:60:10:ab:8c:7e:e1:43:d1:
                    f4:54:d3:fb:ea:15:8f:e9:9e:c7:be:0a:96:6e:2e:
                    64:49:96:6b:c7:0b:55:83:ce:fe:13:04:74:4f:7f:
                    dd:bf:5f:6d:87:ed:21:1a:d2:0d:9d:0f:90:99:6d:
                    60:bf:d7:6f:f1:2e:5c:61:ea:63:e6:4b:49:98:a9:
                    e9:30:00:4a:4f:7a:2e:42:21:45:21:e9:d8:fc:68:
                    83:a1:92:d8:10:e8:2f:b9:20:d4:3f:f4:a8:b1:2f:
                    8f:6e:40:6b:e5:54:02:43:90:fe:6d:58:56:cd:18:
                    7d:70:fa:00:3c:5a:a0:e9:bc:4f:9a:54:90:41:7c:
                    d8:54:f6:1b:f8:7c:72:40:6c:43:51:3d:e5:62:a4:
                    96:0e:c7:3e:8f:f5:c1:3c:19:d6:47:a4:8c:b6:a3:
                    24:e3:3e:e0:af:17:f6:f2:b0:1d:cf:f8:cc:a7:bd:
                    b8:06:f8:bc:e6:ea:63:76:03:75:4b:cd:e6:3d:5b:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:04:81:F4:43:F7:BD:80:89:60:19:24:9F:23:67:B8:5C:A7:39:44
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35342e302f32332d3233203d3e20323638323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:92:52:43:db:d2:5e:33:f0:55:40:15:14:9b:06:c4:cf:84:
         d4:a6:51:4f:57:26:2a:37:4a:b7:49:91:bb:30:46:5a:29:4b:
         1f:85:0b:5b:61:9b:0e:dc:11:b1:4b:4a:a8:55:cf:aa:83:c1:
         dc:1e:7d:a5:54:ab:fc:83:a7:2e:8a:4d:e9:df:c8:49:46:b6:
         5b:dc:0d:f9:09:c1:92:1c:fa:c8:06:e2:a2:58:c2:4d:37:fe:
         62:84:95:c2:f0:91:46:83:47:8a:41:2b:ea:a4:de:58:31:66:
         3c:d7:d3:0a:d1:02:56:c3:06:d0:c0:30:6d:09:03:ab:73:0c:
         01:57:fe:b0:63:4a:f2:ed:ce:55:69:51:75:de:ab:7c:f2:78:
         f9:33:ba:33:62:ae:30:ae:1e:f8:dc:79:30:01:54:d4:c4:63:
         9e:95:90:b7:e6:cc:bb:26:1e:9e:da:5c:ab:50:11:67:67:b0:
         7a:ce:8e:79:f9:c0:10:e3:dc:c4:8b:fe:bd:3a:4a:b6:92:47:
         ef:df:52:e6:79:c3:52:5d:40:b1:7b:69:46:ca:c4:b7:5f:33:
         6b:b0:8b:17:77:be:a5:2b:70:a6:15:3e:83:23:5b:e1:5a:4d:
         1d:bc:aa:73:f1:d7:c5:55:7f:cb:5d:da:a9:0f:cb:cd:fd:ef:
         0f:66:13:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:27:46 2025 by rpki-client