Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33352e302f32342d3234203d3e20323638313133.roa
File:                     34352e3136392e33352e302f32342d3234203d3e20323638313133.roa (raw, json)
Hash identifier:          K8XdpNz+CkdSy3yHc1NspAYpjEUomFCMjFnyqGuAZxg=
Subject key identifier:   E3:9E:49:CB:2F:9A:9E:C5:72:85:8E:7E:64:CD:77:ED:82:33:D0:7F
Certificate issuer:       /CN=FEDCFD2EE0191BA604BD915813F4DD016164EE40
Certificate serial:       40A5D0EB7FE95EE90DF1A342605F34A011D61361
Authority key identifier: FE:DC:FD:2E:E0:19:1B:A6:04:BD:91:58:13:F4:DD:01:61:64:EE:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33352e302f32342d3234203d3e20323638313133.roa
Signing time:             Sat 26 Apr 2025 02:14:51 +0000
ROA not before:           Sat 26 Apr 2025 02:09:51 +0000
ROA not after:            Sat 25 Apr 2026 02:14:51 +0000
asID:                     268113
IP address blocks:        45.169.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.crl
                          rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 19:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a5:d0:eb:7f:e9:5e:e9:0d:f1:a3:42:60:5f:34:a0:11:d6:13:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEDCFD2EE0191BA604BD915813F4DD016164EE40
        Validity
            Not Before: Apr 26 02:09:51 2025 GMT
            Not After : Apr 25 02:14:51 2026 GMT
        Subject: CN=E39E49CB2F9A9EC572858E7E64CD77ED8233D07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:c9:e9:cc:d1:43:f9:f3:33:0a:fc:1d:c9:
                    2f:5c:22:8e:03:4b:3d:9e:a4:c2:3a:49:10:02:8a:
                    29:ed:66:42:a2:af:2f:63:2d:70:8c:33:c6:19:fe:
                    90:ba:ca:e5:d3:eb:1d:33:80:17:29:7c:7d:46:ac:
                    7b:dc:d3:88:2e:81:91:5d:1d:97:dc:4f:f6:ba:61:
                    22:78:7d:e1:11:02:8c:11:47:e0:18:cd:f1:97:d1:
                    7e:00:08:74:30:bf:4c:59:a6:2b:8e:16:d5:07:bd:
                    17:b7:ef:4f:0f:83:68:7d:88:e9:73:ab:8c:84:07:
                    c2:40:d0:ba:0d:7c:e4:ac:35:da:16:fd:60:01:f3:
                    70:31:55:cd:5d:4f:a6:75:ef:f7:75:31:88:98:23:
                    9a:cb:3f:8d:f2:ad:c8:b7:84:6a:61:fc:f5:ea:23:
                    a6:df:05:23:03:9b:b0:49:9d:56:d3:47:87:ad:69:
                    93:20:c8:19:99:35:96:64:c5:cb:42:ea:aa:93:b0:
                    c5:dc:77:1b:20:98:93:b2:ca:31:44:5d:29:2c:a9:
                    c4:46:f2:0c:9f:d9:56:6b:34:d1:e2:78:62:3d:61:
                    62:f0:3b:6e:ef:b2:e0:cd:d6:3d:38:3f:6a:26:56:
                    28:69:28:32:ed:5e:38:2d:05:16:da:72:8f:07:c9:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:49:CB:2F:9A:9E:C5:72:85:8E:7E:64:CD:77:ED:82:33:D0:7F
            X509v3 Authority Key Identifier:
                keyid:FE:DC:FD:2E:E0:19:1B:A6:04:BD:91:58:13:F4:DD:01:61:64:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33352e302f32342d3234203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:35:02:c9:ac:21:87:94:60:db:fc:6b:2f:68:4b:37:4e:
         a9:ee:da:53:37:b7:ca:29:28:a9:80:2c:68:d8:ba:a0:78:7a:
         39:05:49:ca:f1:69:4e:f4:d0:8d:db:b2:fc:9a:fb:23:fd:a2:
         9a:33:48:f1:45:64:0a:6c:a2:17:7e:a6:88:df:99:95:3e:4b:
         17:0c:c4:98:8e:fa:d2:07:4c:98:26:9b:ac:69:d5:60:62:14:
         c3:af:65:d1:fb:73:c1:f5:8c:7b:7f:5a:a6:83:3b:b7:01:e6:
         f9:d5:49:c4:36:da:03:b2:bf:d7:da:76:29:50:1e:35:02:46:
         d4:0b:42:55:22:2b:d2:69:f4:e0:c8:c6:ea:1a:15:24:0e:6a:
         5b:06:ae:c1:11:dd:22:9c:d3:8f:15:01:ce:72:a6:cc:e3:d2:
         a8:9d:67:0a:33:34:fa:00:40:11:60:b2:99:e2:7a:42:f7:d1:
         31:62:3a:4f:e4:63:34:c6:57:6c:66:06:99:18:4d:f1:d5:87:
         45:bf:4c:f4:79:fb:4b:30:a8:f4:28:d5:2a:28:82:f3:08:7f:
         dc:52:fe:5f:af:08:22:4b:60:4e:46:0c:82:e4:b3:c2:a8:28:
         57:ab:8d:5f:ed:32:ef:71:5c:35:de:44:d0:90:c6:ad:14:39:
         bf:ea:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:44:57 2025 by rpki-client