Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa
File:                     34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa (raw, json)
Hash identifier:          E+cklEAbvkMVYK9jhvnpL60xDxOtgqMtgJs65eGmU7c=
Subject key identifier:   B0:ED:13:3A:6B:54:24:8B:2C:41:6B:36:D4:80:66:2F:4A:37:B9:CA
Certificate issuer:       /CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
Certificate serial:       574E2DDACA89ACC70CF86A9D452595B4FBBB1D2C
Authority key identifier: FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa
Signing time:             Thu 24 Apr 2025 18:47:22 +0000
ROA not before:           Thu 24 Apr 2025 18:42:22 +0000
ROA not after:            Thu 23 Apr 2026 18:47:22 +0000
asID:                     269245
IP address blocks:        45.182.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 03:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4e:2d:da:ca:89:ac:c7:0c:f8:6a:9d:45:25:95:b4:fb:bb:1d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
        Validity
            Not Before: Apr 24 18:42:22 2025 GMT
            Not After : Apr 23 18:47:22 2026 GMT
        Subject: CN=B0ED133A6B54248B2C416B36D480662F4A37B9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:d7:72:af:e6:74:74:cd:ae:5c:f4:1e:c5:
                    e1:01:32:8d:ee:a4:27:96:c2:ca:0b:5e:24:23:55:
                    34:2e:e1:96:9d:00:cf:f3:4a:fc:bb:16:43:09:74:
                    e2:7a:f3:65:97:9a:b2:58:ce:45:c0:bc:ba:a2:31:
                    d0:ba:b1:e5:0a:4f:74:df:43:28:0a:de:09:5e:17:
                    c3:32:20:ce:3c:ad:67:3d:db:b4:9c:0b:47:ab:7c:
                    1e:cd:31:2b:85:54:31:12:3c:39:44:ed:90:81:07:
                    45:ba:f0:77:f1:02:e8:a6:c3:1e:c3:35:f4:2d:c1:
                    fb:d0:89:61:c1:b4:47:6d:ba:63:f4:37:00:79:c0:
                    c7:3c:70:0f:50:51:b8:00:dc:1e:3a:d1:31:11:e0:
                    4f:52:32:71:7b:9f:71:7e:07:5c:52:e1:bf:f0:9d:
                    3a:dd:fa:8e:5d:f9:48:71:85:02:66:95:da:fc:7b:
                    95:85:86:e4:5c:d3:88:0f:e3:73:7b:56:46:22:57:
                    20:8e:e9:e7:6c:9f:c1:88:5d:5b:54:70:f4:86:ca:
                    8e:8d:82:41:d1:66:2f:ff:d7:ac:2b:fb:e3:c3:a3:
                    42:03:cf:60:26:f7:4b:a3:9e:6e:04:43:ca:79:f3:
                    42:5a:4b:e9:46:33:81:8a:87:40:17:3b:1e:5b:9e:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:13:3A:6B:54:24:8B:2C:41:6B:36:D4:80:66:2F:4A:37:B9:CA
            X509v3 Authority Key Identifier:
                keyid:FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:50:50:30:5a:d1:aa:ee:97:b1:83:69:dd:f5:61:0e:1c:38:
         d0:02:d2:d9:0b:bf:58:01:9b:75:7c:d7:62:e0:d2:c0:47:a8:
         b7:d3:9d:b4:ae:1e:02:68:01:87:dc:9a:a9:7f:e7:6d:eb:dd:
         c4:04:76:7e:f9:0a:6f:3b:98:83:c9:fb:b2:1c:5c:89:75:0f:
         ff:cf:15:e4:7f:1f:5b:eb:e2:a6:42:db:69:89:ab:b3:a1:58:
         b1:87:3f:80:1f:24:6c:c6:43:f1:ca:1f:c3:ad:9f:d2:7b:2b:
         2a:d9:b7:10:ff:53:b4:d3:ed:32:30:88:6c:97:4d:f5:51:46:
         c5:9e:cc:d4:24:e8:ec:45:65:fa:36:af:a2:a4:29:60:03:8b:
         5d:db:8a:c1:cb:da:10:34:43:f9:18:23:5c:1c:78:40:2e:4f:
         0b:52:74:9a:2b:70:17:ba:a8:8f:c5:05:ae:04:c1:15:fa:70:
         f2:8d:34:00:c1:e5:ef:49:36:31:39:5a:c7:38:66:7e:cd:61:
         15:b1:c0:fe:aa:56:21:7a:2c:37:d4:87:5b:56:39:76:55:b4:
         86:02:28:be:9d:c7:5f:23:b0:6b:c6:c7:62:fa:6a:66:a6:73:
         7c:89:53:49:38:4a:3b:33:13:76:00:2d:ea:69:16:21:1a:e5:
         d7:a7:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:48:20 2025 by rpki-client