Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38332e302f32342d3234203d3e20323639343136.roa
File:                     34352e3138362e38332e302f32342d3234203d3e20323639343136.roa (raw, json)
Hash identifier:          GwWDpf1rZKUh1B9AVJR/AqpPDp5G58lS2ZoCmUcoNSQ=
Subject key identifier:   4F:A2:3D:CE:E3:94:82:16:4A:3F:D4:D2:E2:62:C7:68:27:FB:93:83
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       65194A0F36ECF3507152F8832107934613B4D38D
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38332e302f32342d3234203d3e20323639343136.roa
Signing time:             Thu 24 Apr 2025 13:44:38 +0000
ROA not before:           Thu 24 Apr 2025 13:39:38 +0000
ROA not after:            Thu 23 Apr 2026 13:44:38 +0000
asID:                     269416
IP address blocks:        45.186.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 23:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:19:4a:0f:36:ec:f3:50:71:52:f8:83:21:07:93:46:13:b4:d3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 24 13:39:38 2025 GMT
            Not After : Apr 23 13:44:38 2026 GMT
        Subject: CN=4FA23DCEE39482164A3FD4D2E262C76827FB9383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e7:8a:61:f1:09:30:37:a7:6d:86:fd:9f:32:
                    56:cb:b8:c6:9e:0d:36:c5:4a:85:89:f4:b6:13:15:
                    b5:1f:ed:c1:07:fa:cb:50:e7:99:36:53:77:69:b7:
                    06:2c:7b:bd:6a:92:05:ee:f9:38:5a:39:38:1c:b5:
                    90:e7:77:4d:03:11:7e:df:d7:5e:9a:dc:68:65:c4:
                    06:14:65:aa:42:5e:f8:5c:38:7f:17:d8:b0:85:46:
                    53:b8:b9:43:57:91:82:e2:5d:3f:23:88:1b:a7:3e:
                    8c:c7:89:5e:bb:40:1d:29:db:f8:d8:1f:52:5b:d8:
                    76:fe:42:55:01:b5:27:06:fc:ef:3b:2f:2d:3e:15:
                    35:21:54:27:aa:ab:59:2a:10:52:d6:ed:0f:d6:e6:
                    f6:89:1b:f0:af:19:75:4b:df:27:85:4d:3b:31:cd:
                    86:be:5f:bf:a9:70:69:a9:20:f5:4b:ea:ec:41:0f:
                    a9:c3:c9:d4:e4:d6:45:7c:4f:ad:ec:e5:45:d4:c1:
                    73:bd:5d:a5:b7:de:9f:67:56:92:3e:21:85:f3:69:
                    91:48:62:fe:63:a6:cb:bb:44:79:2e:af:4d:7b:70:
                    50:82:46:7b:3c:14:a0:11:74:33:84:a7:17:02:f8:
                    89:b0:5e:1d:ec:2f:8a:71:41:14:a5:03:1c:dc:58:
                    e7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:3D:CE:E3:94:82:16:4A:3F:D4:D2:E2:62:C7:68:27:FB:93:83
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38332e302f32342d3234203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:43:88:60:16:1b:42:cb:e7:f2:16:dc:52:03:3f:80:f4:23:
         9c:d3:66:d4:52:2b:43:09:36:63:71:b3:3a:82:75:82:9d:03:
         b9:c6:cb:ad:83:b8:90:42:cc:e2:bd:22:2c:a9:f4:19:64:bd:
         00:48:bf:c8:fc:46:72:5c:15:34:41:5f:0a:f9:9d:bc:aa:1a:
         b0:bc:47:58:d6:3f:1f:cc:f1:0b:b0:bc:4e:39:fa:5b:a6:89:
         85:8e:cc:e1:15:dc:e0:31:ae:f5:e7:cb:28:67:c3:2f:bc:0a:
         3b:e4:ce:eb:35:bd:ca:a5:62:46:ac:48:ab:fc:42:e9:f8:ae:
         56:65:29:c3:d4:c2:b2:e8:76:3e:a2:2c:0a:18:65:26:b7:50:
         4c:0c:88:c8:99:89:74:77:ea:3e:43:1d:f0:33:74:d4:16:2a:
         e9:b0:50:b9:f0:ab:05:92:bb:1e:46:16:42:d7:23:0e:d9:06:
         55:8c:08:c0:a7:20:c2:34:84:91:3c:7b:f9:57:a0:3c:79:33:
         80:fa:c2:b9:f3:76:63:c0:ca:ef:dd:af:a7:1b:3b:c9:3b:b5:
         63:e9:1f:e0:4e:96:45:98:06:bf:12:f1:87:49:ed:85:6d:d0:
         df:7c:a2:ed:2d:fc:40:28:33:63:13:1e:46:e7:77:ba:4d:74:
         9c:72:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:29 2025 by rpki-client