Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa
File:                     34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa (raw, json)
Hash identifier:          LDA7BPnO0INBAOLpeunyqV46kLoPxb6h3HNziLGvD4M=
Subject key identifier:   E8:8B:41:E2:6C:81:14:1A:C2:46:F1:F5:7E:95:AC:88:57:7A:AD:0D
Certificate issuer:       /CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Certificate serial:       41ED32E4B844A62343671735C2BA12C4784D38FC
Authority key identifier: 72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa
Signing time:             Fri 28 Mar 2025 17:42:39 +0000
ROA not before:           Fri 28 Mar 2025 17:37:39 +0000
ROA not after:            Fri 27 Mar 2026 17:42:39 +0000
asID:                     268710
IP address blocks:        45.170.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl
                          rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ed:32:e4:b8:44:a6:23:43:67:17:35:c2:ba:12:c4:78:4d:38:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
        Validity
            Not Before: Mar 28 17:37:39 2025 GMT
            Not After : Mar 27 17:42:39 2026 GMT
        Subject: CN=E88B41E26C81141AC246F1F57E95AC88577AAD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9b:1b:36:89:9c:03:c4:34:2a:74:b7:1a:e7:
                    8b:69:0b:1e:3f:08:dd:cc:d5:a3:b3:e8:dd:79:d1:
                    1b:b2:cd:6b:b7:f6:d1:f5:61:46:24:ef:fb:ab:52:
                    5b:1c:57:38:dd:e5:4c:b2:ce:19:b8:61:16:5a:72:
                    4c:da:2a:ad:67:1c:f2:a0:c2:42:c7:99:3a:f2:1e:
                    b6:4e:e6:fe:50:77:f5:71:f8:92:89:49:5a:50:ba:
                    56:4d:a3:d3:eb:e7:72:fb:91:2e:c2:0a:c2:e1:55:
                    51:a9:70:4e:1b:3d:b9:ef:12:e8:eb:f6:3c:7d:cd:
                    0d:9b:de:40:b5:05:1f:f4:6d:3b:8d:5e:fe:81:b8:
                    5a:3a:37:e1:14:fa:1e:18:8a:39:65:f2:0d:2c:5e:
                    0c:e5:fd:7b:94:a4:03:d5:59:03:c2:e5:92:aa:2f:
                    c5:cf:00:f6:5d:7b:6a:0d:e1:4e:95:4d:21:65:f5:
                    27:f5:b9:4d:e2:f8:56:34:c2:97:5b:9c:c9:5a:83:
                    3a:01:61:ff:dc:b1:1f:38:cf:50:08:0e:39:c7:dc:
                    fe:ef:db:a1:07:58:86:84:a3:bd:3f:14:82:e6:6d:
                    ff:6d:71:b5:b5:5c:40:69:8d:b7:5c:a4:80:b1:20:
                    6e:e5:3a:c5:15:68:35:22:ef:42:55:68:10:6a:c8:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8B:41:E2:6C:81:14:1A:C2:46:F1:F5:7E:95:AC:88:57:7A:AD:0D
            X509v3 Authority Key Identifier:
                keyid:72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:c0:5c:fa:25:28:8e:b1:c0:e5:3d:b8:81:ec:1c:a0:13:aa:
         d3:fa:ae:70:6d:66:85:db:cb:21:54:a6:f8:ba:48:fa:31:58:
         40:58:68:0f:aa:32:49:3c:9d:22:2e:d7:d6:ed:31:ce:c1:35:
         25:54:8e:ce:3c:97:b0:1b:fa:64:ef:e8:94:bd:a1:7e:17:13:
         2f:b7:34:46:e3:f9:04:3a:a5:30:9d:b0:ed:ae:b5:55:41:3b:
         8e:b9:90:8f:d9:5c:d2:63:28:93:97:c3:28:dc:d5:c5:0f:aa:
         f3:55:2e:03:cc:2d:59:dd:55:08:01:58:da:b7:15:e4:12:41:
         69:ee:a6:f4:f7:29:43:bf:9c:91:71:84:36:f5:fc:17:eb:59:
         39:78:8f:d6:48:ff:a7:68:f7:39:d9:e8:fd:44:b7:a5:eb:98:
         7d:1c:c6:e8:3a:e6:25:38:c0:09:34:2f:9b:c6:eb:83:03:60:
         72:95:c7:21:25:e1:aa:2e:42:d4:9d:ad:4b:ad:fc:78:d7:11:
         9e:a7:b1:9a:86:51:24:3b:1d:62:5c:17:42:39:fa:a6:dd:9d:
         4e:ab:19:9a:40:f1:f3:ac:aa:22:3a:e0:01:3d:f3:69:9b:50:
         ad:e2:48:3d:4e:2a:a5:2a:f8:09:ac:0f:54:c0:65:9c:7e:a9:
         62:70:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:39:58 2025 by rpki-client