Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136342e302f32322d3232203d3e20323638343132.roa
File:                     34352e3136302e3136342e302f32322d3232203d3e20323638343132.roa (raw, json)
Hash identifier:          l/BlsMgnfa1bRI5NgM0G+32kjQVC/UYSH/5L+9atE3g=
Subject key identifier:   29:54:85:F2:DE:44:FB:9E:7B:29:58:D8:55:8B:EB:B7:99:48:0D:71
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       4D736A26916DF06CF966B60E2B5A44CEB0887A9E
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136342e302f32322d3232203d3e20323638343132.roa
Signing time:             Thu 06 Mar 2025 07:27:23 +0000
ROA not before:           Thu 06 Mar 2025 07:22:23 +0000
ROA not after:            Thu 05 Mar 2026 07:27:23 +0000
asID:                     268412
IP address blocks:        45.160.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:73:6a:26:91:6d:f0:6c:f9:66:b6:0e:2b:5a:44:ce:b0:88:7a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Mar  6 07:22:23 2025 GMT
            Not After : Mar  5 07:27:23 2026 GMT
        Subject: CN=295485F2DE44FB9E7B2958D8558BEBB799480D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:06:f8:ea:01:aa:f6:4b:34:1a:b9:a5:54:
                    46:13:19:dd:6d:ba:05:ad:8e:e4:cc:b9:80:2f:f5:
                    45:6d:ae:01:0b:ec:15:42:2c:2c:db:35:35:29:f9:
                    f1:b3:a3:9a:bc:aa:12:cf:e0:d9:6a:33:72:7e:c1:
                    0b:7b:e7:1a:cb:db:65:02:11:6d:78:91:10:bb:12:
                    81:30:4a:ce:4e:bf:a1:fb:68:64:58:05:51:b1:05:
                    5c:b8:27:92:ec:47:24:f2:81:6c:d2:b1:51:8b:4c:
                    f7:44:de:db:c2:e8:2a:51:e0:a8:4c:8b:86:a9:90:
                    df:82:13:2f:3f:88:0f:22:79:23:8e:74:eb:e6:79:
                    89:2c:7a:c9:da:b2:dd:d9:6a:fe:6a:43:f7:b6:52:
                    b9:52:93:bd:c6:27:43:92:b4:92:57:05:06:ac:c6:
                    d7:36:4e:61:68:f6:a2:b0:ca:86:e1:fc:8d:68:c0:
                    5f:b3:b3:8b:b6:56:0e:f7:9e:dc:00:8b:9a:cf:cc:
                    ef:38:26:e3:ec:c5:42:cd:6d:c9:2e:bd:50:bc:9e:
                    4f:a0:64:23:6a:e7:7a:bb:2d:a0:11:a7:24:c5:2a:
                    77:bc:92:7b:11:75:a0:3e:fa:ef:f1:34:2b:f2:c5:
                    5e:89:a8:b0:ce:77:f4:17:2f:56:4b:10:b7:e8:de:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:54:85:F2:DE:44:FB:9E:7B:29:58:D8:55:8B:EB:B7:99:48:0D:71
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136342e302f32322d3232203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:8f:4f:8a:26:98:ef:56:e8:74:87:32:6b:6e:66:13:ac:28:
         31:50:8e:dc:20:3f:2d:ae:58:b1:5d:b9:d3:c2:93:11:e8:78:
         85:a9:b9:ad:89:71:c7:f7:5e:aa:6f:25:ae:e5:21:2c:21:c3:
         27:95:12:fd:f3:dc:2e:0d:1c:fb:45:64:bd:e0:d0:39:ee:6f:
         6c:e2:87:a2:fc:00:35:d1:2e:a6:72:45:33:a3:c3:a8:31:19:
         f3:d5:2c:b0:83:f2:68:e2:ca:4b:10:38:ae:d0:f6:8e:08:90:
         06:c2:9b:ee:e5:63:4f:2c:69:e8:26:bc:4a:76:76:80:27:13:
         f1:23:ac:48:09:a7:a9:aa:2b:bd:c8:a3:58:89:4d:83:d3:00:
         95:d6:38:fe:76:30:d8:c1:26:4f:3d:91:1f:76:39:83:de:57:
         2f:a9:52:99:af:12:51:ef:fb:8c:a3:50:16:d0:7d:8c:cb:04:
         9f:97:ab:d4:f9:ff:f9:a1:fa:38:bf:b0:6b:2d:44:c2:85:e3:
         17:42:13:b7:7c:2d:75:b5:df:65:17:ae:a7:f6:b5:af:33:8c:
         a6:86:cd:89:d3:49:3e:46:6d:6c:4c:c4:93:af:60:d3:80:0b:
         59:85:c7:2c:28:6d:71:79:cd:cd:b1:9f:b0:3f:bb:7f:12:94:
         ec:47:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:25 2025 by rpki-client