Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          Poq2uwGrGc7sswg58x8VPO7UdXTT6sjpBfkMeHMPCf8=
Subject key identifier:   3E:C7:19:AA:C4:69:6D:E1:B2:71:4A:CC:65:DC:C0:36:88:14:AC:1C
Certificate issuer:       /CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7
Certificate serial:       122925DC86DA3604A12F02318053B1AB648F471D
Authority key identifier: 9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
Signing time:             Wed 05 Mar 2025 21:31:26 +0000
ROA not before:           Wed 05 Mar 2025 21:26:26 +0000
ROA not after:            Wed 04 Mar 2026 21:31:26 +0000
asID:                     268063
IP address blocks:        45.168.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.crl
                          rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:29:25:dc:86:da:36:04:a1:2f:02:31:80:53:b1:ab:64:8f:47:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7
        Validity
            Not Before: Mar  5 21:26:26 2025 GMT
            Not After : Mar  4 21:31:26 2026 GMT
        Subject: CN=3EC719AAC4696DE1B2714ACC65DCC0368814AC1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:bc:1b:73:e7:d8:f7:6a:b7:0d:24:23:95:
                    9f:90:ac:0a:98:48:10:74:5a:3e:03:9c:17:1b:c2:
                    ba:0f:59:0a:bd:dd:62:91:8c:59:f7:75:61:d4:89:
                    87:cc:6c:cf:16:f5:71:2c:13:ca:06:1a:6b:32:79:
                    be:55:12:33:42:3d:ef:f6:4b:95:83:22:36:8a:f7:
                    13:57:57:7f:f9:fd:c4:43:15:4d:a7:04:da:96:7f:
                    3b:89:96:64:4c:d4:c6:8d:b1:a0:c8:8c:9d:70:c6:
                    a8:41:48:6e:36:8b:77:45:0c:e9:4a:31:0a:da:a0:
                    85:9f:04:a1:71:d8:a9:74:21:a5:9e:a0:fd:e0:de:
                    4b:60:39:41:e4:b5:75:0f:04:7f:4a:7e:72:c8:d8:
                    07:8d:f6:0c:23:b1:4c:1c:2e:6a:32:d4:81:75:c7:
                    de:ee:0d:22:32:4d:35:8a:e4:d4:fa:19:e8:f6:95:
                    de:3c:f5:72:df:d4:58:fd:a3:42:a8:e5:53:64:25:
                    fd:ea:d7:91:32:0e:30:1a:eb:df:08:d8:53:b3:dc:
                    e8:68:95:30:07:f8:b8:23:00:d6:1d:cb:72:7d:68:
                    9a:1e:7e:ba:90:65:54:91:7b:af:17:52:47:87:a9:
                    b7:4e:56:93:21:3b:3a:61:f1:a0:74:bd:39:9e:ee:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:19:AA:C4:69:6D:E1:B2:71:4A:CC:65:DC:C0:36:88:14:AC:1C
            X509v3 Authority Key Identifier:
                keyid:9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:4f:da:03:19:44:89:af:bf:79:34:40:cf:9a:30:b3:d8:7a:
         1e:60:98:09:7a:85:93:70:71:64:c2:61:e8:ef:4f:cd:6b:68:
         0c:dc:57:5a:39:8d:b6:7c:19:4f:cc:c9:02:61:00:31:41:01:
         c4:ce:98:40:3d:75:9f:65:16:c1:5d:66:e6:cd:a7:72:ba:4e:
         9a:fd:f2:1b:56:f8:ea:a4:ca:fd:45:7a:78:01:05:fb:68:c6:
         6b:47:ad:18:19:a8:cc:98:03:1d:1d:21:da:c2:31:0a:c9:66:
         19:a3:6b:da:e8:41:bd:f6:0b:f7:c7:4e:a0:fe:42:d3:4b:b7:
         5f:89:73:b0:f2:e5:9f:f8:7b:c6:a6:33:35:54:6c:a5:db:35:
         b9:ba:f5:6c:80:9c:ed:c3:b4:23:9f:70:91:2d:e4:6c:80:eb:
         07:00:73:75:af:e1:ed:d6:19:f2:20:14:f7:8f:ff:2d:4e:8e:
         f5:b6:ea:76:e9:c7:83:cf:4a:ff:b1:5e:53:d6:65:97:14:d8:
         07:d0:3e:c0:75:36:65:00:87:de:bd:b1:8d:96:0a:4b:4f:bd:
         45:58:70:49:db:25:a0:bc:bb:c3:ee:a6:2c:c6:93:3e:6b:fb:
         1b:ed:7a:de:1b:11:1a:78:57:99:e6:27:9b:3a:ad:d8:ec:cf:
         a8:06:9e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:44:37 2025 by rpki-client