Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139322e302f32342d3234203d3e20323639303330.roa
File:                     34352e3137372e3139322e302f32342d3234203d3e20323639303330.roa (raw, json)
Hash identifier:          HexB6hOhgFT3vMENC1ob/YHbtz0Zv8JrMwCNFWG+Ino=
Subject key identifier:   06:17:FD:79:D6:7E:A4:05:8F:1C:61:6B:40:D6:E0:CB:CB:92:60:33
Certificate issuer:       /CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
Certificate serial:       14813E8979075EECE119CCF0AEC09404C5BA7C77
Authority key identifier: 27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139322e302f32342d3234203d3e20323639303330.roa
Signing time:             Thu 06 Mar 2025 00:54:08 +0000
ROA not before:           Thu 06 Mar 2025 00:49:08 +0000
ROA not after:            Thu 05 Mar 2026 00:54:08 +0000
asID:                     269030
IP address blocks:        45.177.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.crl
                          rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 11:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:81:3e:89:79:07:5e:ec:e1:19:cc:f0:ae:c0:94:04:c5:ba:7c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
        Validity
            Not Before: Mar  6 00:49:08 2025 GMT
            Not After : Mar  5 00:54:08 2026 GMT
        Subject: CN=0617FD79D67EA4058F1C616B40D6E0CBCB926033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:66:5c:33:a3:22:04:bd:50:08:a5:a4:3f:
                    6b:4c:6b:aa:09:9d:7b:81:8f:af:81:93:7e:60:b0:
                    73:3d:b8:b4:15:25:21:c6:f1:24:7f:3b:2c:d4:e5:
                    d7:87:f3:5a:e7:46:aa:df:f3:0e:55:d8:45:bb:fa:
                    69:55:45:2d:da:e5:f8:cf:43:02:18:e4:42:7a:d0:
                    17:9e:92:7c:99:72:fa:d8:9f:18:3e:fa:07:62:61:
                    05:fe:62:83:3b:e6:fa:12:cd:8e:a3:4a:45:22:51:
                    e6:4a:e0:ca:54:12:fd:99:c8:78:c1:24:b6:12:51:
                    d1:37:e4:8c:1c:8a:30:38:05:56:54:0b:c6:a9:c6:
                    49:15:f5:f0:f2:46:fa:a1:36:10:80:72:77:6e:14:
                    1f:44:d5:f1:ff:a3:52:1f:e5:3f:5a:60:98:41:22:
                    9a:4f:5d:83:8e:f7:e8:4e:cd:98:14:a4:10:14:4f:
                    f4:d2:d1:3e:46:72:32:43:c8:85:fc:1f:f0:3d:99:
                    4a:eb:13:1a:28:e9:08:56:b6:25:e0:81:86:4c:97:
                    3b:65:49:75:cb:4b:f2:ef:85:ad:ba:f9:c4:bd:f3:
                    91:66:3a:a7:42:41:f4:b4:5d:88:68:e0:c7:ab:09:
                    cd:2e:b3:57:c2:25:98:bc:bc:cb:54:17:b4:c8:e1:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:17:FD:79:D6:7E:A4:05:8F:1C:61:6B:40:D6:E0:CB:CB:92:60:33
            X509v3 Authority Key Identifier:
                keyid:27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139322e302f32342d3234203d3e20323639303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:81:42:9b:54:2c:83:9a:b2:8a:22:75:f3:ca:ff:09:2e:
         60:29:43:21:a2:8a:4a:b4:0c:3d:6e:43:f7:1c:64:ab:32:53:
         ee:0e:a6:e5:27:24:c4:58:01:e6:a8:e3:ce:2d:36:9b:39:b4:
         b6:0e:b6:47:38:71:22:e2:5f:e4:4f:26:2c:a6:eb:47:3b:8c:
         a6:a4:07:04:d0:3a:5f:e3:c2:74:85:1a:de:be:2d:46:a7:e6:
         cc:ec:25:c2:75:db:80:5c:6f:a4:ec:8f:d8:b7:cc:03:e6:31:
         65:7f:c0:10:77:0a:c6:b9:8a:04:2b:7f:32:d2:b6:4d:e3:5b:
         99:e1:de:98:e1:49:43:d0:1e:f6:61:e1:6c:36:8c:cb:24:e3:
         0b:4d:f5:d8:4a:d0:2f:79:df:ee:7c:b9:b2:b6:e1:1b:9e:5c:
         17:da:5e:b3:65:72:dc:90:6a:d6:74:e8:5b:dd:ee:30:90:59:
         84:77:47:30:11:3c:f4:22:d3:d5:ff:c6:66:50:56:44:44:c6:
         a9:62:cf:0f:11:4a:57:52:b5:3d:4a:26:6c:7f:fd:0b:28:7f:
         0c:06:a4:bf:6f:f6:27:bd:3a:8f:95:9d:76:2a:da:c2:a6:9d:
         eb:c0:86:ea:11:25:ea:53:3a:7f:90:97:f2:03:b0:17:6a:06:
         d0:cd:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:33 2025 by rpki-client