Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS267147.roa
File:                     AS267147.roa (raw, json)
Hash identifier:          o/8hE51a90nDGCRsE9+Uoq18vS5mE+oCGSneti93Q6U=
Subject key identifier:   CE:CF:4C:BB:4F:CD:F7:33:92:12:CA:2C:94:57:5D:60:F8:55:F8:3A
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       5AF77297EDB10C844210554C77B43F0C6CDF4867
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS267147.roa
Signing time:             Fri 14 Feb 2025 01:06:48 +0000
ROA not before:           Fri 14 Feb 2025 01:01:48 +0000
ROA not after:            Fri 13 Feb 2026 01:06:48 +0000
asID:                     267147
IP address blocks:        45.229.100.0/22 maxlen: 24
                          2804:48d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f7:72:97:ed:b1:0c:84:42:10:55:4c:77:b4:3f:0c:6c:df:48:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Feb 14 01:01:48 2025 GMT
            Not After : Feb 13 01:06:48 2026 GMT
        Subject: CN=CECF4CBB4FCDF7339212CA2C94575D60F855F83A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:7b:04:84:2d:d1:0c:88:0f:d7:79:d6:18:
                    d4:fc:8e:23:db:e7:3a:e4:b4:9d:c2:09:b8:84:be:
                    d9:9a:3a:f8:7e:2e:de:06:46:09:65:8c:d9:19:81:
                    44:8c:a5:ea:19:ac:ad:c9:6c:d3:18:5e:2e:9d:b8:
                    87:27:5f:1c:f2:db:5b:23:5e:5a:ea:2c:b6:93:7a:
                    73:1a:bf:6c:12:4d:7b:e4:cd:29:b0:0a:d4:51:62:
                    e9:08:ca:4d:51:12:d5:8b:74:ce:b5:86:36:90:da:
                    79:a0:ca:66:f0:dd:cd:8a:ce:c8:30:3a:e5:0d:5c:
                    f0:5a:30:89:7b:94:82:06:1c:f2:6c:f1:e7:36:21:
                    36:59:f6:01:9e:5b:02:42:af:c6:90:bb:b5:9a:fb:
                    ef:4f:25:a3:0a:58:cf:19:95:ed:77:c4:24:6e:a3:
                    4d:74:a4:7c:9c:19:45:1f:64:64:48:af:f3:ce:5a:
                    7b:57:89:43:b0:a0:99:71:43:f5:bc:5b:0e:54:91:
                    d4:b1:2d:65:3c:cc:36:d1:07:77:9d:46:f5:97:7e:
                    cd:a7:b2:58:99:7c:d1:0f:08:1e:b8:27:ef:3e:20:
                    fe:bb:87:5e:58:c9:68:f0:58:76:c0:1d:d1:27:4d:
                    18:f3:fe:e8:88:bb:3f:37:47:b3:61:6e:79:12:79:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CF:4C:BB:4F:CD:F7:33:92:12:CA:2C:94:57:5D:60:F8:55:F8:3A
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS267147.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.100.0/22
                IPv6:
                  2804:48d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:72:a1:e3:b4:fb:c9:01:50:5f:56:de:bf:70:36:25:4a:7f:
         cc:52:15:30:cc:78:03:77:5a:e7:2c:7d:3d:e0:68:90:a5:57:
         09:8d:4b:04:86:55:2d:44:74:d5:6d:b2:88:46:b6:ad:96:53:
         ff:07:1b:98:c2:3d:1a:74:f9:61:69:00:7a:84:2f:a4:d6:f4:
         cd:d6:22:44:17:29:54:a0:11:b7:29:5e:74:d8:6a:c1:84:6f:
         53:70:65:bc:06:28:66:8b:fb:6d:72:34:61:1b:9e:aa:80:a0:
         f4:1f:f4:cd:2a:85:a3:f0:8d:9e:4c:3c:65:da:c3:5a:99:35:
         7c:3d:5f:83:59:b7:02:da:75:1b:86:2b:74:d1:f8:78:90:52:
         2f:e2:c4:85:48:a1:ad:ad:d2:18:6c:73:f8:0c:82:1b:9f:93:
         2a:cc:24:6c:5e:47:87:c2:f2:9f:b6:07:a3:03:3b:7b:a9:ee:
         21:fc:f6:11:09:08:e7:c6:52:c4:fe:3a:d2:ed:68:7f:40:f2:
         a7:e2:db:55:35:28:eb:ca:ee:a6:66:a9:9c:f9:07:2b:ab:53:
         df:ab:e3:1a:62:b2:6a:52:85:0e:38:18:6d:65:60:6b:81:a5:
         2e:d2:de:ab:db:f1:9f:1f:c5:84:b4:87:e0:d4:42:e1:72:11:
         16:d0:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:18:48 2025 by rpki-client