Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/34352e372e3134342e302f32322d3234203d3e20323636363035.roa
File:                     34352e372e3134342e302f32322d3234203d3e20323636363035.roa (raw, json)
Hash identifier:          CoL2BQuOsfdF8Fal8UtCUZEdgW2sV2o/4PxxfXF9OUY=
Subject key identifier:   B8:18:21:B6:25:7C:5F:E4:8B:37:C5:7A:E6:84:C4:05:5F:56:49:B0
Certificate issuer:       /CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
Certificate serial:       41D1D5824362349B860AB8620CC5A6782D708F43
Authority key identifier: 57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/34352e372e3134342e302f32322d3234203d3e20323636363035.roa
Signing time:             Wed 05 Mar 2025 23:59:51 +0000
ROA not before:           Wed 05 Mar 2025 23:54:51 +0000
ROA not after:            Wed 04 Mar 2026 23:59:51 +0000
asID:                     266605
IP address blocks:        45.7.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.crl
                          rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 18:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:d5:82:43:62:34:9b:86:0a:b8:62:0c:c5:a6:78:2d:70:8f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
        Validity
            Not Before: Mar  5 23:54:51 2025 GMT
            Not After : Mar  4 23:59:51 2026 GMT
        Subject: CN=B81821B6257C5FE48B37C57AE684C4055F5649B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:f3:9e:37:aa:c4:11:50:c2:cb:f1:56:98:
                    29:2b:f3:7f:45:08:c7:10:a6:0b:4a:0e:a8:6a:d6:
                    09:4e:c3:38:c2:aa:ab:bc:a6:03:8d:82:a5:59:8c:
                    bf:65:00:c5:30:9f:ff:97:13:a2:b3:e7:e7:66:00:
                    79:c1:ac:f4:57:26:ef:73:22:8c:10:1f:ba:94:60:
                    d4:a4:11:d5:eb:c8:09:ed:d2:92:85:0e:f6:6f:f1:
                    db:cd:13:45:f4:08:27:aa:1b:5f:18:08:5e:c7:5a:
                    f7:92:42:c3:ea:23:a7:66:07:2d:20:bb:21:70:6b:
                    e8:4d:e6:dd:3e:26:00:7f:5c:ff:79:7e:7a:69:90:
                    b1:e3:b3:c5:c5:b6:58:29:7f:a5:23:41:d2:cb:6f:
                    2f:56:e5:6f:85:be:e9:24:7d:12:e5:e9:74:b3:1f:
                    4c:0a:8f:92:97:e1:15:59:ff:e1:54:78:29:fa:f2:
                    2d:af:7e:75:c4:b8:b8:f4:97:5b:7a:92:5b:59:2f:
                    fb:51:f8:f9:6d:f1:7b:f0:e8:b9:04:9f:8b:51:6b:
                    01:8e:fa:e1:7b:d4:cd:ca:de:1b:72:61:f2:32:55:
                    33:8a:07:e6:e7:78:2c:4f:ab:88:15:88:1e:f7:05:
                    55:20:ec:2d:0d:0b:45:cf:a6:74:12:a6:f3:f4:a7:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:18:21:B6:25:7C:5F:E4:8B:37:C5:7A:E6:84:C4:05:5F:56:49:B0
            X509v3 Authority Key Identifier:
                keyid:57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/34352e372e3134342e302f32322d3234203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:14:3d:10:e7:43:c6:0f:1e:b2:56:9b:a8:e2:85:6b:45:f6:
         c6:80:5c:5c:99:25:ce:d6:d3:36:c7:b4:fe:d1:07:73:37:e4:
         8f:3c:5d:69:9f:07:bc:e1:a2:38:6e:92:97:04:8c:0d:e1:e2:
         ff:df:4b:97:01:33:a9:e1:20:ed:56:1e:52:31:96:3d:e1:6e:
         b3:94:74:9a:4b:15:4e:29:9f:01:dd:a7:3e:b6:06:21:ea:71:
         76:2c:7a:11:f6:57:d9:62:15:d4:1a:47:e9:6c:42:f2:02:86:
         a2:63:54:69:d0:bc:ae:d8:50:48:f9:01:e7:84:3c:ff:ef:1d:
         f3:25:54:93:8f:6b:59:5e:8d:6f:48:9d:c1:ed:aa:7d:9d:cf:
         74:b2:8c:ba:5e:4a:51:bb:4b:47:04:83:5b:bd:5f:0b:81:8d:
         49:96:91:48:ad:f2:81:d6:01:28:94:bb:a9:12:33:1f:0d:6b:
         41:8b:b1:4c:a1:9f:4c:3d:05:2a:f0:91:4f:7b:30:b2:af:55:
         d4:d3:6a:87:ea:2d:e5:2c:49:98:4f:f3:20:08:75:e1:68:8a:
         6a:ee:ef:19:ba:87:46:46:9c:a2:2c:f1:14:89:ab:61:cd:b8:
         89:b1:28:fc:1d:36:ca:3e:2f:6d:e7:03:06:30:a3:72:fe:16:
         80:80:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:23:48 2025 by rpki-client