Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
File:                     34352e3232382e38362e302f32332d3233203d3e20323637303637.roa (raw, json)
Hash identifier:          FowyewoG7JH4RHXFX/gz6IRGAjRGjMn/Xfy2TEbDATY=
Subject key identifier:   9B:B6:2D:03:80:43:7C:13:19:DD:8F:D9:67:2B:DA:30:A6:94:04:2D
Certificate issuer:       /CN=A15F127A9B708BCCD34894F30740028808430DF2
Certificate serial:       20CEE11BF38A0B02A8D380239778C75370F7E541
Authority key identifier: A1:5F:12:7A:9B:70:8B:CC:D3:48:94:F3:07:40:02:88:08:43:0D:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
Signing time:             Thu 30 Jan 2025 18:35:01 +0000
ROA not before:           Thu 30 Jan 2025 18:30:01 +0000
ROA not after:            Thu 29 Jan 2026 18:35:01 +0000
asID:                     267067
IP address blocks:        45.228.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 23:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ce:e1:1b:f3:8a:0b:02:a8:d3:80:23:97:78:c7:53:70:f7:e5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15F127A9B708BCCD34894F30740028808430DF2
        Validity
            Not Before: Jan 30 18:30:01 2025 GMT
            Not After : Jan 29 18:35:01 2026 GMT
        Subject: CN=9BB62D0380437C1319DD8FD9672BDA30A694042D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:71:27:58:12:01:b2:77:6f:97:4e:bd:74:
                    e9:5a:5a:1e:17:96:44:7c:e7:7d:db:e9:98:0e:b6:
                    e5:10:ed:53:0b:90:09:99:16:ba:4d:45:79:0b:0e:
                    c9:cf:56:cc:62:f2:d9:e5:90:37:a6:78:ac:28:9a:
                    c8:34:aa:5f:58:2f:38:50:1d:47:10:b8:7a:42:35:
                    d7:fe:e2:a1:28:20:07:53:fa:c4:6b:ae:09:fa:9b:
                    fa:87:d9:d2:34:2f:51:80:19:10:94:ef:71:94:90:
                    c9:ec:54:05:7a:0c:07:74:af:fb:a2:27:f6:91:fc:
                    e3:97:72:73:c3:b6:d0:f9:6a:b4:64:26:77:9f:36:
                    2b:f4:ce:25:40:16:f2:2f:18:f8:a5:da:72:80:06:
                    14:1e:53:3f:af:2a:f4:b3:b7:49:1e:fa:11:40:70:
                    c3:00:cc:7c:99:45:d5:b6:55:1c:27:b3:16:ce:3e:
                    93:02:89:bb:b0:ac:5b:20:56:8a:02:45:02:52:55:
                    6d:d3:a9:92:e9:66:56:32:df:e5:d3:53:1e:3d:30:
                    95:14:c0:9a:bb:07:cc:4d:e9:9b:8f:f0:04:c3:1c:
                    3d:54:d6:66:8c:bd:fe:3e:f1:8c:69:ad:b7:3a:f0:
                    eb:3d:21:81:b5:78:86:f9:d6:a7:54:3b:a5:97:a3:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B6:2D:03:80:43:7C:13:19:DD:8F:D9:67:2B:DA:30:A6:94:04:2D
            X509v3 Authority Key Identifier:
                keyid:A1:5F:12:7A:9B:70:8B:CC:D3:48:94:F3:07:40:02:88:08:43:0D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:95:8b:07:6e:c3:f0:49:4e:11:63:6c:ab:12:a6:f1:46:3a:
         32:38:22:ee:fa:20:9e:c3:fa:58:54:84:06:2d:a3:c5:d3:b4:
         c9:95:da:91:b4:c7:da:d3:9a:f0:6b:17:85:ed:46:40:39:cb:
         a0:8d:93:14:05:13:1a:33:a4:8b:fd:96:48:7b:e3:b6:ae:52:
         fb:4a:ba:06:79:20:54:28:74:2c:02:e3:39:11:de:c2:9e:bd:
         90:a0:44:b4:0a:02:03:4d:95:eb:ad:03:aa:cd:45:d0:ba:72:
         57:ad:dc:77:ae:bc:6b:a8:e6:8e:7d:18:35:91:52:b0:33:10:
         8a:eb:a8:0f:bc:f7:3f:17:49:93:36:a5:73:0d:6b:11:1f:9b:
         2c:29:b1:57:41:8a:f6:28:54:95:e9:76:64:db:5e:e9:63:74:
         e7:6c:39:0e:e8:97:5c:2d:aa:f5:a8:69:43:31:da:8e:3a:00:
         00:86:9f:78:dd:4b:21:67:30:66:af:8b:5e:82:1a:01:06:f2:
         63:1d:b2:55:be:f2:6c:c9:7a:9b:7f:99:c8:aa:b2:ed:93:3e:
         6b:2f:10:77:c4:94:6e:e8:c4:98:cb:a5:2f:e3:45:88:6c:6d:
         75:29:ff:a8:85:8b:38:62:94:ee:ec:cc:db:7d:d9:5b:f5:75:
         26:b4:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:26:12 2025 by rpki-client