Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
File:                     34352e3233382e372e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          5FOEjDIj+l7J+9gINg9qYsBBupANGtDzCAL27EDTvBU=
Subject key identifier:   4F:B4:08:D8:E3:EF:D9:44:71:EB:6E:FF:79:58:04:21:3D:70:F0:89
Certificate issuer:       /CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
Certificate serial:       6E140780200326D71D64639908835367E947920C
Authority key identifier: 87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
Signing time:             Mon 07 Apr 2025 20:51:49 +0000
ROA not before:           Mon 07 Apr 2025 20:46:49 +0000
ROA not after:            Mon 06 Apr 2026 20:51:49 +0000
asID:                     268308
IP address blocks:        45.238.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:14:07:80:20:03:26:d7:1d:64:63:99:08:83:53:67:e9:47:92:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
        Validity
            Not Before: Apr  7 20:46:49 2025 GMT
            Not After : Apr  6 20:51:49 2026 GMT
        Subject: CN=4FB408D8E3EFD94471EB6EFF795804213D70F089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:b5:1d:f0:76:8e:14:7b:02:5f:b7:6b:04:
                    0f:c2:1b:54:57:f0:a4:aa:de:04:72:96:c0:fb:1c:
                    db:ff:55:ba:45:ff:f7:77:07:dc:d2:e9:d6:a1:75:
                    ea:75:de:c3:a8:b0:0d:85:6c:ff:c8:b6:13:ec:ba:
                    22:86:c2:7a:c1:92:27:ac:a1:0e:52:6b:8e:91:cd:
                    7a:27:f0:28:1d:f7:03:20:81:22:92:d2:c7:25:98:
                    9d:56:66:ed:09:19:87:ad:6f:9e:5d:95:00:e3:a2:
                    3b:eb:d5:8f:a4:bf:d6:0f:68:92:fe:69:cb:86:94:
                    a9:fe:ae:0c:6e:81:0a:bd:e6:b3:e6:2a:c0:05:f7:
                    0f:cd:e3:6d:3d:32:71:d1:21:15:1b:67:26:95:19:
                    71:db:08:a1:71:35:4f:62:15:a8:ed:8a:0e:2e:73:
                    d5:8a:aa:66:91:92:c7:b9:dd:06:98:cf:5f:b0:90:
                    f3:a2:9c:20:42:8b:40:1d:a7:56:1c:5e:ba:ec:4d:
                    aa:e7:49:8e:bb:fd:75:04:22:3b:30:9f:3f:32:d8:
                    3d:0f:6f:01:c0:dc:ec:c5:6b:35:cb:16:d1:dd:36:
                    66:f3:a1:19:14:53:c9:d5:6a:4a:78:e8:42:93:2d:
                    55:b9:0b:a0:bb:52:75:85:4a:22:6a:2c:77:03:48:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B4:08:D8:E3:EF:D9:44:71:EB:6E:FF:79:58:04:21:3D:70:F0:89
            X509v3 Authority Key Identifier:
                keyid:87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:76:65:a1:d2:66:d0:f6:8f:24:80:41:ff:e2:ad:24:6a:
         90:ea:fb:aa:dc:ac:9d:8d:65:1b:19:da:11:3f:53:0b:bf:69:
         1a:02:19:d8:c9:49:59:02:65:ed:ac:7c:ef:30:3c:ea:30:26:
         60:9d:de:3d:6a:ed:48:5f:63:e1:3a:0e:3d:ae:c2:63:cc:90:
         f9:2e:1d:04:46:de:c1:6e:58:04:aa:4e:d3:6d:d1:d2:69:d6:
         73:c6:c8:21:ac:29:9f:43:c8:f7:0c:ce:bf:19:36:f4:9b:b6:
         b2:95:c3:96:8d:1c:88:22:f4:c7:2c:58:55:1c:6b:29:1a:b4:
         89:28:e5:67:3f:5e:04:25:72:d3:76:be:01:b1:e7:59:87:1a:
         6e:17:eb:3b:92:32:90:81:ac:74:32:00:19:3a:4b:5f:41:70:
         90:49:52:4d:fb:0c:d0:a1:a1:87:5c:8f:99:9f:22:a8:59:8a:
         b1:7a:db:3f:2a:62:38:5f:36:2e:e7:ca:0b:bb:f8:32:7c:ca:
         aa:b8:d8:47:10:95:96:76:19:cd:d8:36:ef:e2:6b:e5:77:28:
         2f:48:c4:63:86:32:4f:bd:d8:7e:82:87:40:48:16:8a:bf:f0:
         d2:f3:9a:2a:43:27:dc:8d:8b:6b:21:e3:f0:83:19:c9:e6:46:
         9c:fa:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:07:57 2025 by rpki-client