Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38312e302f32342d3234203d3e20323639343136.roa
File:                     34352e3138362e38312e302f32342d3234203d3e20323639343136.roa (raw, json)
Hash identifier:          mJND29x3KzPVQJWZn2t8qDk7n7CZ+sYglsfJBLtoiM4=
Subject key identifier:   DD:43:FA:1B:B0:31:2D:D2:88:F9:72:82:9B:7C:E1:00:E1:FE:30:A6
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       3BF6FAF61F7726FA0DD07AFDBD5014E4E06F8D8E
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38312e302f32342d3234203d3e20323639343136.roa
Signing time:             Thu 24 Apr 2025 13:44:39 +0000
ROA not before:           Thu 24 Apr 2025 13:39:39 +0000
ROA not after:            Thu 23 Apr 2026 13:44:39 +0000
asID:                     269416
IP address blocks:        45.186.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 04:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f6:fa:f6:1f:77:26:fa:0d:d0:7a:fd:bd:50:14:e4:e0:6f:8d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 24 13:39:39 2025 GMT
            Not After : Apr 23 13:44:39 2026 GMT
        Subject: CN=DD43FA1BB0312DD288F972829B7CE100E1FE30A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c1:70:57:81:c1:aa:ea:55:59:79:64:08:45:
                    a7:e9:fb:b8:b4:d3:cd:c1:9e:ec:1c:e6:03:b9:d5:
                    79:68:93:d9:1c:3e:fb:e8:77:16:c9:0c:6b:0c:1d:
                    6a:cd:f7:d2:b5:4e:b2:5a:fe:90:ad:e6:5c:ba:98:
                    25:8e:7d:c8:b4:3c:0f:72:6e:e9:c7:b2:71:4c:6c:
                    7e:3b:66:cd:dd:66:a2:9c:37:27:20:7a:8b:70:d4:
                    10:61:f5:de:c0:2d:e7:59:c9:09:d3:0a:f8:db:87:
                    bc:9a:21:47:5b:f8:ed:4f:16:89:cf:ff:d9:7d:07:
                    b5:79:d0:42:ee:bf:c1:c2:6d:a2:3c:9b:73:97:e5:
                    61:a0:3c:84:44:b7:85:a7:29:17:c8:0b:dc:75:1e:
                    85:d8:5d:ac:c6:eb:bc:ce:36:f7:06:aa:8d:f1:39:
                    99:1a:02:26:40:54:b4:26:3e:62:6f:53:a3:06:c3:
                    95:72:2b:60:8b:8e:35:df:91:d5:76:9e:5d:67:af:
                    cf:82:a6:0e:f7:c1:4c:0b:4e:c3:f8:b9:66:24:e3:
                    2a:46:d4:09:69:c5:13:a4:83:f9:ba:c5:47:7e:87:
                    a4:fb:84:2e:c1:23:d4:e4:24:43:1f:6a:7c:4f:33:
                    89:0f:b2:d1:d2:e9:69:b5:d8:56:27:56:b8:ce:6f:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:FA:1B:B0:31:2D:D2:88:F9:72:82:9B:7C:E1:00:E1:FE:30:A6
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38312e302f32342d3234203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:38:8c:91:39:54:f6:ae:a7:8e:70:44:19:fa:0f:e8:1a:
         20:90:76:b6:41:8d:2f:f5:63:d9:6f:b8:e5:d8:fb:1b:5d:57:
         c8:0e:ae:bb:3f:f7:fc:b3:8d:b7:9b:c2:6b:45:2d:ad:37:bd:
         64:e4:a2:a2:f7:42:b5:8e:5a:e8:51:53:e0:82:3d:7f:f0:ce:
         98:3e:87:09:84:3e:9c:2d:30:5a:18:14:00:49:d2:90:12:ee:
         bb:6b:87:6b:a7:8b:5d:be:56:84:69:92:d8:c5:f1:73:6b:55:
         03:b0:a4:2c:ea:c7:07:5f:93:b7:45:3a:e2:ed:ee:73:5a:f3:
         40:03:7c:e4:43:9f:f5:ec:d2:22:a6:a0:40:6b:6a:78:49:8f:
         c9:cf:8c:84:b9:c5:41:e0:d3:f9:7b:dc:79:a4:3e:3f:df:b1:
         23:f7:a6:3d:2c:8c:c7:b3:b0:09:1d:d4:e1:c8:ab:bd:74:3b:
         6c:66:71:8c:e2:09:e6:6b:19:45:f6:7b:3d:70:36:a6:7e:56:
         ce:f8:2c:a2:f5:94:e7:7a:15:de:01:d8:9e:1f:94:a1:f8:4a:
         27:b9:64:41:d8:35:f7:ef:be:68:24:bd:d8:15:dc:5a:ef:3e:
         ce:53:76:db:7b:73:13:b6:f7:c3:04:d8:e8:a5:96:10:5d:b3:
         c4:06:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:04:42 2025 by rpki-client