Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38322e302f32332d3233203d3e20323639343136.roa
File:                     34352e3138362e38322e302f32332d3233203d3e20323639343136.roa (raw, json)
Hash identifier:          KEZ+J+fugcym78KxB3PBZrtzf7+dQbZ2E7mwFrDbAg8=
Subject key identifier:   CF:2F:92:8F:FC:59:AE:8D:F4:68:39:0A:4C:1F:AF:75:A6:D2:A6:70
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       133973C6EC287C49570A9D2B0A95FA9403289F20
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38322e302f32332d3233203d3e20323639343136.roa
Signing time:             Thu 24 Apr 2025 13:44:38 +0000
ROA not before:           Thu 24 Apr 2025 13:39:38 +0000
ROA not after:            Thu 23 Apr 2026 13:44:38 +0000
asID:                     269416
IP address blocks:        45.186.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 04:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:39:73:c6:ec:28:7c:49:57:0a:9d:2b:0a:95:fa:94:03:28:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 24 13:39:38 2025 GMT
            Not After : Apr 23 13:44:38 2026 GMT
        Subject: CN=CF2F928FFC59AE8DF468390A4C1FAF75A6D2A670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:a8:76:75:e7:3a:a4:57:bc:09:55:83:1f:
                    4d:d4:9f:79:d2:8c:ad:75:2f:20:dd:80:0f:39:84:
                    b4:20:12:c7:f0:89:ae:c3:d3:6e:31:21:3f:e8:3c:
                    74:e3:d0:69:53:68:ea:42:00:44:79:31:6b:48:d8:
                    13:55:13:64:e9:80:00:64:d1:a3:5d:70:1c:46:5e:
                    0b:8e:be:73:8b:c8:85:d0:93:0e:05:e3:d4:0a:1d:
                    8e:95:6c:42:78:3e:ba:07:86:d5:30:89:3b:c9:c5:
                    73:c1:ef:1e:da:2f:1d:48:39:1d:87:b1:cd:60:ec:
                    f7:63:4d:c9:a3:e6:c6:1f:5b:c1:76:ed:2c:60:9e:
                    e8:f5:5c:cc:7d:71:58:22:20:d2:59:2c:6c:4a:01:
                    c7:dc:92:00:66:d5:3c:73:8e:e7:ba:91:8f:19:09:
                    99:b5:3d:65:5b:d3:ea:4a:00:50:3b:ee:0b:cf:14:
                    3a:5d:95:c6:7e:b8:cf:0e:95:4b:2b:5d:52:b4:ba:
                    69:e4:c6:c0:a0:c1:2b:3b:45:ff:a2:18:fd:fc:aa:
                    cb:60:5a:10:01:cf:51:3d:63:9c:83:82:df:7a:91:
                    20:cc:dd:35:c6:28:f6:5d:a9:2b:a4:63:d1:5e:83:
                    59:73:e1:3f:a2:4a:d0:e2:1a:14:c3:0b:83:76:da:
                    10:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2F:92:8F:FC:59:AE:8D:F4:68:39:0A:4C:1F:AF:75:A6:D2:A6:70
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38322e302f32332d3233203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:96:14:83:50:0f:e7:79:ea:ef:aa:30:c5:b7:27:a4:78:
         71:b6:7e:0f:6c:79:72:db:d8:19:5a:c4:da:bd:e2:d0:b2:a6:
         86:f8:04:cd:b5:cb:a6:47:67:be:f9:ed:c9:66:ab:dc:af:83:
         c8:54:55:b1:c0:9e:aa:aa:ec:6b:46:f1:86:85:55:56:9a:e2:
         49:73:1d:a0:28:bd:9e:77:5c:eb:9e:ad:0a:45:52:3a:e2:7c:
         4a:a6:59:bb:80:2a:8e:49:64:e1:95:47:33:17:cd:d8:23:b7:
         53:5e:78:3e:78:ab:e8:bf:ed:9f:a3:ee:0a:24:ac:19:b0:6c:
         bc:31:f2:36:fa:f1:4c:bf:3f:03:cf:73:07:db:a7:a4:3a:d1:
         36:ed:e2:72:99:ab:8b:78:30:4b:78:01:f4:5a:46:f2:22:18:
         15:4c:51:2d:22:04:f3:10:68:ef:cd:97:0f:1b:28:16:74:11:
         6d:c1:13:c7:61:14:5d:b2:df:62:8c:80:d0:d0:31:d3:d0:59:
         cc:5f:b9:fc:3c:df:99:7e:2d:60:65:5b:cf:1f:a5:8a:d2:fd:
         ee:ab:fb:8c:f5:9b:2a:f1:69:e3:ea:bb:3a:37:81:fd:0a:0b:
         2e:0b:65:e8:5f:0b:17:f8:92:38:cc:2d:02:0a:6f:14:c9:d9:
         38:91:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:29:19 2025 by rpki-client