Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
File:                     34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (raw, json)
Hash identifier:          MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=
Subject key identifier:   1D:E4:23:BF:51:18:59:6A:AF:5B:0B:27:59:BF:55:29:38:F5:34:F4
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       0955EC21336EDA720BCDD8D195C24A43D5766027
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
Signing time:             Fri 02 May 2025 14:05:47 +0000
ROA not before:           Fri 02 May 2025 14:00:47 +0000
ROA not after:            Fri 01 May 2026 14:05:47 +0000
asID:                     268628
IP address blocks:        45.164.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 16:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:55:ec:21:33:6e:da:72:0b:cd:d8:d1:95:c2:4a:43:d5:76:60:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: May  2 14:00:47 2025 GMT
            Not After : May  1 14:05:47 2026 GMT
        Subject: CN=1DE423BF5118596AAF5B0B2759BF552938F534F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:e4:e3:ec:8f:88:aa:c0:4e:c9:f3:95:34:
                    42:e3:2f:c1:85:18:2a:85:67:64:5f:2d:ef:3b:5b:
                    4d:0d:1b:42:2a:d3:99:81:f4:54:da:fb:3a:b7:c2:
                    ac:6a:7d:56:5e:c9:d6:eb:e8:74:16:dd:1a:58:3a:
                    20:07:38:15:74:a4:d9:01:77:51:9e:d9:78:45:46:
                    ca:a3:d3:cb:22:f2:0c:b1:fa:9b:62:71:37:32:63:
                    ea:9d:f8:c1:b5:c2:b0:9c:66:32:44:d3:32:11:25:
                    9f:54:d8:1f:7a:5e:5b:4f:e5:32:93:b8:3a:d1:df:
                    14:c4:bc:be:fa:42:ef:66:37:86:72:eb:36:17:3e:
                    0c:0f:f7:6f:13:4f:c5:a4:1d:1b:63:4d:3c:7b:65:
                    ed:c1:a2:15:fb:af:54:49:58:69:ec:5d:7e:51:63:
                    01:9c:9d:49:f1:87:de:d9:71:d9:b0:67:ef:d0:65:
                    3d:7c:20:37:80:9f:08:fd:c7:f5:d8:5b:61:6e:c0:
                    76:08:b8:58:b5:3b:58:e4:8c:b4:83:1a:b3:36:dd:
                    42:7d:ba:66:bb:b6:7b:1f:a6:25:f1:07:eb:94:50:
                    60:f9:08:41:28:a1:2d:50:5b:8d:6a:e5:9c:17:8c:
                    61:dd:0c:5c:fe:99:ee:c9:05:de:3e:fb:c1:d2:f6:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E4:23:BF:51:18:59:6A:AF:5B:0B:27:59:BF:55:29:38:F5:34:F4
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:85:c5:e2:7b:92:07:83:b4:52:31:62:2d:e5:27:78:7d:2e:
         91:65:20:e1:2c:50:74:03:ac:5a:43:53:e7:0f:0f:af:65:ca:
         12:24:1e:6b:15:0b:f7:22:8f:08:b3:ec:25:91:ab:bd:eb:1f:
         20:f6:98:6d:8d:48:9a:57:f1:be:55:32:01:db:f1:3d:dd:88:
         2b:6c:8b:d7:4f:47:59:ea:a2:05:97:3d:1b:dd:d5:fc:da:03:
         e6:3b:d9:51:6a:a6:f5:f1:0d:47:42:c1:51:8a:df:d4:87:ed:
         e4:a6:a8:b1:99:3a:0c:83:a2:fd:26:d7:66:f7:eb:f6:32:f3:
         46:d5:9f:81:7b:ea:df:2e:01:46:f9:0e:17:8c:5c:b6:dc:64:
         9c:0b:1c:6b:51:70:2c:81:ae:87:7f:1e:40:7d:1f:dc:f1:7b:
         98:fe:e2:11:80:45:cc:a5:2b:a5:5a:2f:00:2d:a3:2c:c8:f3:
         a4:f3:0d:a0:d7:a0:5d:9d:0e:83:f9:ba:e9:c4:dc:43:d5:a1:
         52:12:f8:e8:36:81:c0:8b:22:5c:e0:e7:3e:fd:7e:f0:dc:bd:
         ee:7f:64:ce:39:a7:93:8b:88:2b:fb:5a:ec:f8:63:c5:12:cd:
         b3:6b:c2:a7:54:10:0d:b5:bd:8f:0e:17:9e:f4:dc:3c:20:49:
         7d:fd:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:45:43 2025 by rpki-client