Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
File:                     34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (raw, json)
Hash identifier:          3sxZs3Y6zVNNgLScctDhTTFNDQdOZLcuEzMOUREzMRw=
Subject key identifier:   BA:5B:BF:E6:FC:22:B7:97:22:01:C9:B4:29:D2:9A:35:2E:EA:95:16
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       600518BC6CCD4CAEF1C770F0F5F218D134B02824
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
Signing time:             Thu 06 Mar 2025 06:33:13 +0000
ROA not before:           Thu 06 Mar 2025 06:28:13 +0000
ROA not after:            Thu 05 Mar 2026 06:33:13 +0000
asID:                     268874
IP address blocks:        45.175.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:05:18:bc:6c:cd:4c:ae:f1:c7:70:f0:f5:f2:18:d1:34:b0:28:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Mar  6 06:28:13 2025 GMT
            Not After : Mar  5 06:33:13 2026 GMT
        Subject: CN=BA5BBFE6FC22B7972201C9B429D29A352EEA9516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:ae:75:f4:da:45:33:bc:c3:86:e2:d3:da:
                    ee:55:f5:d1:d8:a7:e4:39:8b:dc:ba:01:38:05:6c:
                    84:fb:14:27:c1:cc:c8:dd:bf:ce:ff:fe:70:9f:9c:
                    e2:f0:bd:01:30:cd:fe:90:c0:c3:d8:77:3f:65:08:
                    da:b3:4d:83:00:12:41:93:70:66:72:9e:00:59:5a:
                    41:37:da:46:1d:dc:c2:64:d9:dc:4a:0f:91:f0:05:
                    16:6f:9b:73:52:40:9c:94:44:78:d8:7c:e5:c6:d0:
                    34:cb:4d:6e:84:1e:98:7d:3e:eb:93:94:4f:77:b4:
                    e1:2f:d6:8d:1a:6e:ce:a3:01:b2:cf:fd:d6:92:f8:
                    3d:d6:46:8c:a5:a8:cd:89:57:54:8a:4d:da:43:cf:
                    7d:64:99:3a:29:3b:d3:2a:26:30:fb:97:6d:df:c2:
                    50:27:da:9b:8f:06:7d:f1:bd:5c:1d:a1:61:72:79:
                    28:13:3b:cf:35:ba:6e:2f:ea:34:80:df:7a:93:f3:
                    40:e7:ca:93:e3:d9:83:e9:1a:ff:3b:73:93:ae:1c:
                    4d:97:b0:19:4f:1f:1e:c6:04:11:eb:d7:89:7c:3f:
                    bd:10:74:9c:a0:b5:61:61:c2:75:58:5c:48:b5:8a:
                    a9:93:51:60:3b:4c:1b:00:53:5d:31:e6:70:47:07:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5B:BF:E6:FC:22:B7:97:22:01:C9:B4:29:D2:9A:35:2E:EA:95:16
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:79:e4:70:1c:63:cd:28:a2:6d:cf:70:40:0f:ef:2e:96:fc:
         b8:b5:4c:4d:d6:87:02:65:06:93:90:f0:d9:47:8c:04:5a:a7:
         17:b3:bb:f3:72:5a:98:33:86:18:83:4a:39:cb:63:94:ba:74:
         5f:3d:c7:5c:8a:1a:be:42:66:2b:07:23:da:a6:92:77:4e:d6:
         c1:71:59:d7:5b:e3:f0:14:eb:66:57:50:98:97:19:1b:27:7b:
         4d:48:b7:be:94:c4:92:47:0c:c0:94:d0:2f:4d:fb:19:d0:98:
         a0:d0:ef:29:1e:4c:c8:7a:27:95:21:6b:65:7a:47:76:79:42:
         7f:61:51:26:d8:a8:bd:24:99:df:ef:4a:81:60:a9:d8:b4:17:
         d3:72:ab:36:47:8e:ce:c3:49:59:3d:10:90:48:9d:e9:c1:9c:
         98:80:68:65:27:0a:89:aa:d1:7f:35:5f:88:3b:b3:d7:88:8c:
         68:e0:e9:43:6e:31:f9:4a:2e:63:33:a3:6b:65:80:7a:da:3e:
         58:ce:2f:bb:c7:13:70:40:1e:9e:0c:cd:9d:c0:be:bd:51:21:
         5a:07:77:04:e0:6e:d2:53:09:29:b4:2b:5c:cd:b1:12:23:70:
         75:8e:b2:42:a0:44:a6:33:0d:58:4a:a1:f9:69:71:79:f8:9a:
         72:65:5d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:28 2025 by rpki-client