Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          2vQcJ/bi+dTGEcoM4yiauzCzRcsO8gjXbQWo7eLBbcU=
Subject key identifier:   7D:98:02:BD:E9:FD:33:D7:E0:E3:A2:71:44:43:BB:F1:39:C2:40:D3
Certificate issuer:       /CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
Certificate serial:       7B03D9FA2724BE3FFEB8585EF3350AD861A164F4
Authority key identifier: 5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa
Signing time:             Tue 04 Feb 2025 02:38:11 +0000
ROA not before:           Tue 04 Feb 2025 02:33:11 +0000
ROA not after:            Tue 03 Feb 2026 02:38:11 +0000
asID:                     271599
IP address blocks:        45.174.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 00:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:03:d9:fa:27:24:be:3f:fe:b8:58:5e:f3:35:0a:d8:61:a1:64:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
        Validity
            Not Before: Feb  4 02:33:11 2025 GMT
            Not After : Feb  3 02:38:11 2026 GMT
        Subject: CN=7D9802BDE9FD33D7E0E3A2714443BBF139C240D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:86:7a:28:8f:80:e7:c3:f3:42:b5:2a:77:
                    7b:5c:46:b2:8f:3e:8e:c0:0c:91:69:da:17:a7:be:
                    43:b0:87:f4:f6:1a:dc:1a:b6:dc:5c:c8:42:ec:ad:
                    a7:4f:7b:2c:5b:91:d2:b3:93:47:3a:f9:d2:7e:ca:
                    de:f3:0f:d3:ce:43:60:b8:9d:de:7b:d4:aa:eb:9d:
                    fd:4a:cc:71:bc:b8:bc:23:7f:89:58:a8:54:59:32:
                    63:f3:df:30:ef:1a:5f:30:85:3f:65:6c:d6:b8:51:
                    39:a1:51:73:f4:eb:bd:8a:e7:8b:d8:8f:e9:d7:82:
                    f0:82:43:ca:33:db:54:83:ea:4a:7a:7f:ed:54:a4:
                    90:b8:b3:92:c2:f8:e2:4b:e6:25:9c:36:37:3c:e6:
                    d9:d8:cf:70:31:7c:f0:05:06:9f:c6:f6:de:8c:41:
                    e1:1c:13:54:fa:51:c4:c6:47:63:5e:25:49:46:ef:
                    b6:5f:35:d0:50:d8:fb:a1:e4:ed:b9:41:2d:ec:b7:
                    82:a8:dc:76:36:d5:69:e8:20:a2:19:e3:1e:22:70:
                    fa:e2:d4:81:65:9e:68:5b:ef:6d:c6:1e:bc:49:2d:
                    e1:65:b2:60:f0:5e:e8:3d:28:50:4b:82:70:0c:ee:
                    a9:fb:b8:c4:de:46:10:02:0d:e0:db:8f:44:f9:17:
                    ce:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:02:BD:E9:FD:33:D7:E0:E3:A2:71:44:43:BB:F1:39:C2:40:D3
            X509v3 Authority Key Identifier:
                keyid:5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:49:f8:85:07:08:fb:1a:11:93:78:ac:ee:60:cb:aa:4a:03:
         c2:99:c3:c5:d9:ef:18:a5:d9:70:51:fd:d8:01:c2:8f:0e:f8:
         81:4b:de:49:c9:15:11:fd:7a:48:91:c7:e8:da:aa:20:8a:0b:
         0e:48:3d:2c:2a:5c:87:28:e0:a0:0f:de:7d:e3:93:09:3e:5d:
         f7:97:86:a2:60:9d:36:2f:bd:a9:7e:2b:ef:76:e2:d8:5b:10:
         3c:25:cf:01:df:b2:98:24:fc:d1:d1:b5:e1:42:76:26:bb:2a:
         41:87:ec:af:76:80:cd:03:91:b4:56:a1:8f:c2:4c:75:69:b7:
         d9:67:cc:a1:89:34:61:1c:88:06:55:83:97:77:9a:96:cc:80:
         df:7b:6e:1f:2b:91:76:72:84:37:04:09:3e:e0:1a:b5:30:20:
         f1:0d:8e:ed:92:00:b9:5a:c3:a2:7b:39:4b:60:35:cf:19:88:
         a6:cf:8b:b1:1f:b6:7a:49:0c:aa:00:54:76:a8:72:08:99:9a:
         ee:07:41:be:63:bc:5d:28:37:a2:99:4d:3b:c9:a0:43:77:84:
         4d:89:0b:52:da:80:d1:39:be:a2:fc:84:79:4d:e3:0d:3a:43:
         0d:c8:dc:5d:89:20:45:25:7a:fa:a5:63:fa:e9:7f:01:f6:1c:
         a1:fa:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:50 2025 by rpki-client