Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa
File:                     34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa (raw, json)
Hash identifier:          3q9PCdKnm/Ofwk3u94cZTw5R3/iHSq6cF6V9t9kmfV4=
Subject key identifier:   44:73:B6:08:AD:C2:C7:81:42:C8:1A:4F:EE:99:CF:46:1B:3C:2E:23
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       0696A3C75929A4CA69746D8BC9F9CFD1AB695BBA
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa
Signing time:             Thu 06 Mar 2025 16:12:10 +0000
ROA not before:           Thu 06 Mar 2025 16:07:10 +0000
ROA not after:            Thu 05 Mar 2026 16:12:10 +0000
asID:                     268261
IP address blocks:        45.236.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 08:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:96:a3:c7:59:29:a4:ca:69:74:6d:8b:c9:f9:cf:d1:ab:69:5b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Mar  6 16:07:10 2025 GMT
            Not After : Mar  5 16:12:10 2026 GMT
        Subject: CN=4473B608ADC2C78142C81A4FEE99CF461B3C2E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:d5:1d:10:c4:bd:89:c3:d2:bf:1f:45:d5:
                    92:95:c8:cf:25:af:2c:ec:f8:ee:c4:9e:76:5d:51:
                    2f:ef:ad:d9:c3:a5:5b:ec:12:bb:86:b5:22:3e:49:
                    57:7f:e0:58:0f:6f:c9:77:f2:35:81:91:d9:c5:3c:
                    7a:79:ed:de:15:55:f3:da:0a:44:ad:02:ed:70:99:
                    04:35:e6:ad:bb:03:88:cf:e0:73:5d:76:32:e7:85:
                    38:21:ad:fd:32:5b:8b:f4:b2:a3:f8:49:d1:3c:ba:
                    6a:d3:d2:36:73:de:2e:66:b8:f6:22:4f:31:0c:b1:
                    ab:cc:a7:3c:8b:f1:7c:ff:f6:f0:68:3b:00:7a:5b:
                    b6:f5:2b:03:07:28:18:2e:01:53:57:10:fe:70:31:
                    ee:67:71:33:07:d1:5e:eb:a6:9b:c4:2c:1a:d0:bf:
                    7a:29:9f:60:cf:89:c6:b1:c0:fa:db:32:b3:4d:f9:
                    8f:f8:9d:45:ab:1b:f2:cd:22:e0:e6:8c:b0:64:80:
                    d7:86:91:fc:55:fc:27:74:54:b4:91:ee:a0:f3:e6:
                    31:4c:72:51:cb:17:2e:a6:31:53:2f:78:f1:c2:d0:
                    b9:40:be:bb:26:2f:0a:ea:54:21:ba:14:68:12:64:
                    5b:53:60:02:60:1c:f2:2c:21:89:d7:74:99:b7:bc:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:B6:08:AD:C2:C7:81:42:C8:1A:4F:EE:99:CF:46:1B:3C:2E:23
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:41:b9:0d:14:d6:a7:c7:af:d8:f3:5a:ec:81:47:0d:48:d3:
         b1:20:b4:75:d3:6f:21:dc:d5:7d:69:36:63:f5:f3:28:68:72:
         b9:25:6d:ad:c2:e1:6c:e2:e2:80:ba:7f:c9:03:18:53:12:6f:
         be:bf:7b:e2:1f:29:dd:82:5b:1a:e0:0e:09:99:c4:a7:5c:b9:
         98:e2:a0:42:a5:03:51:e8:2a:d7:2b:eb:99:15:d1:0d:63:a7:
         17:ad:63:16:5c:da:ad:1f:f6:73:d8:82:31:c6:a8:db:86:51:
         3e:eb:ca:53:d6:96:38:07:75:f6:86:3e:6e:9e:80:43:6e:81:
         50:9a:94:dd:31:51:6f:79:f1:22:ae:72:3a:65:3d:d8:df:23:
         bb:1e:0c:cb:d6:d7:6e:9d:01:9e:9a:e6:8a:e9:1e:85:2a:62:
         f5:02:51:08:8b:f7:4e:86:50:76:cb:ea:b4:e1:e7:ea:79:35:
         c1:34:d8:d6:10:f0:f2:34:1d:02:8b:67:09:2a:be:ab:37:4f:
         d6:a4:e3:7c:80:79:1e:f0:03:91:41:6a:41:15:f4:5e:bb:47:
         3e:f7:f4:06:7d:d2:2b:97:68:04:49:ef:ea:39:d3:98:38:74:
         a1:39:ff:e2:7e:b0:35:7a:1c:2a:cb:db:74:69:32:4e:6b:cb:
         35:be:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:02 2025 by rpki-client