Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134322e302f32342d3234203d3e20323636393833.roa
File:                     34352e3232362e3134322e302f32342d3234203d3e20323636393833.roa (raw, json)
Hash identifier:          j/0sD7Vum0cqJcVvP0/33i422qqUEmmmSk3MFIuzyLo=
Subject key identifier:   8F:68:B7:99:5E:1E:48:A8:02:F9:69:3F:76:97:51:5C:4D:E3:10:62
Certificate issuer:       /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial:       66F5BA73CC80FA3F533BA93232BD30EC04B3C47E
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134322e302f32342d3234203d3e20323636393833.roa
Signing time:             Thu 10 Apr 2025 12:10:31 +0000
ROA not before:           Thu 10 Apr 2025 12:05:31 +0000
ROA not after:            Thu 09 Apr 2026 12:10:31 +0000
asID:                     266983
IP address blocks:        45.226.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl
                          rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 14:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f5:ba:73:cc:80:fa:3f:53:3b:a9:32:32:bd:30:ec:04:b3:c4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
        Validity
            Not Before: Apr 10 12:05:31 2025 GMT
            Not After : Apr  9 12:10:31 2026 GMT
        Subject: CN=8F68B7995E1E48A802F9693F7697515C4DE31062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:40:f5:51:65:fb:af:e2:8b:30:b6:25:c6:
                    38:62:58:85:e0:63:e9:82:2b:66:30:25:09:32:ec:
                    b9:d7:e7:62:db:8d:15:cf:e7:3b:e8:72:b3:10:ff:
                    b3:4a:9e:36:9a:3c:7c:cc:ef:9b:ad:e0:d0:11:5d:
                    f1:eb:84:34:b6:81:2f:52:f4:a3:33:c0:3b:f2:f1:
                    62:7d:84:8e:a5:fb:7a:fa:95:cf:3d:76:dd:28:f1:
                    67:8b:77:4a:8e:98:17:bf:2a:46:08:2b:83:bd:fd:
                    d1:bb:99:8c:da:f0:16:17:1e:59:5c:10:47:4b:c8:
                    0d:f1:d9:ac:2c:19:77:1b:6b:60:5e:34:ca:02:1c:
                    08:f1:a9:3d:d7:12:0b:09:d4:69:ca:46:f0:47:32:
                    2f:36:24:d6:2b:7d:ae:21:13:57:8c:0f:82:ac:9e:
                    a4:97:ae:e7:d9:4d:0a:82:8b:4c:a9:ad:27:a6:ca:
                    cc:0c:64:15:bd:ac:61:0c:a4:33:5b:23:3a:56:a2:
                    9e:39:d8:08:c5:e8:f9:e1:35:04:5a:b2:f5:3e:b4:
                    1c:a1:df:41:e7:58:39:fd:8c:10:b7:96:f3:be:e0:
                    0b:01:c0:cc:27:54:1a:4d:11:28:2e:da:2a:7c:cf:
                    87:46:88:3a:90:6a:5d:c5:0b:19:3e:17:c3:0c:90:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:68:B7:99:5E:1E:48:A8:02:F9:69:3F:76:97:51:5C:4D:E3:10:62
            X509v3 Authority Key Identifier:
                keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134322e302f32342d3234203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:36:0b:db:ed:d0:7a:e0:a1:3b:01:b7:3b:ff:bf:d5:33:
         0b:16:a9:b4:10:27:82:83:fb:74:e6:91:d4:2a:2b:18:cc:21:
         36:05:38:0d:c4:e9:68:60:32:9f:9a:71:40:66:a5:48:f6:ee:
         20:8e:23:db:19:b8:90:36:8b:8e:72:49:05:96:0c:09:ce:c2:
         72:fa:ae:7e:e6:c6:42:32:a8:3d:7e:1b:40:af:f9:de:2c:5e:
         28:5a:15:cd:d7:02:c1:30:93:db:12:de:10:48:0a:ce:11:89:
         22:0c:db:45:b0:9a:57:f6:05:0e:4b:92:89:8e:d7:86:6e:f8:
         ee:eb:c9:ca:c5:13:fa:b8:47:b0:22:e8:8b:b3:15:21:71:bf:
         96:e6:f9:3a:3e:a1:42:12:46:11:34:70:55:cc:c2:b2:77:61:
         14:e3:39:11:17:00:cd:fc:83:f9:9a:e8:34:68:0b:61:8b:35:
         07:27:9a:8e:4e:c0:13:12:71:fc:92:9d:c4:ff:92:4c:44:30:
         d2:51:be:18:ac:bb:5f:8a:f2:91:0d:12:2d:46:b9:a9:72:63:
         10:d6:5b:6b:c8:d8:69:71:fd:cb:f8:ae:30:4e:39:d2:c7:f2:
         34:52:c7:7d:60:60:6a:20:65:93:42:98:9f:05:40:46:c2:3e:
         a5:2d:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:32:52 2025 by rpki-client