Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa
File:                     34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa (raw, json)
Hash identifier:          JXFNIC78T/6UsNqEvAZtb2RYl/jpSCRDkzU8UvMK0h8=
Subject key identifier:   D2:04:1B:F1:5E:A6:D1:68:E2:98:3D:26:AA:86:BB:29:A8:08:4A:19
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       7C40B0DB5A68A99BBDB43E9FAC7872452E2609A2
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa
Signing time:             Fri 04 Apr 2025 15:20:24 +0000
ROA not before:           Fri 04 Apr 2025 15:15:24 +0000
ROA not after:            Fri 03 Apr 2026 15:20:24 +0000
asID:                     268172
IP address blocks:        45.170.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 03:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:40:b0:db:5a:68:a9:9b:bd:b4:3e:9f:ac:78:72:45:2e:26:09:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: Apr  4 15:15:24 2025 GMT
            Not After : Apr  3 15:20:24 2026 GMT
        Subject: CN=D2041BF15EA6D168E2983D26AA86BB29A8084A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8a:c7:cf:ab:68:f2:4b:22:c8:82:01:6a:b7:
                    f7:cf:c6:fd:d4:c8:bc:1a:ca:8b:41:85:51:5d:47:
                    f4:d4:11:04:98:44:87:ef:29:cb:94:65:12:48:2c:
                    cb:e1:94:17:9c:d5:3b:09:c1:13:b9:65:60:16:28:
                    ff:9f:99:82:56:7b:6e:a0:c4:c0:42:43:8f:6f:e8:
                    3d:ae:2d:d4:da:1b:4c:24:0e:ed:5e:6a:20:59:de:
                    7a:f2:28:b7:cf:f8:f6:27:87:76:be:5d:1c:7d:7e:
                    b4:88:af:3a:9e:00:18:8e:aa:4a:7b:95:cb:33:72:
                    65:30:99:52:fa:05:5c:80:13:24:5e:47:cb:26:05:
                    57:01:e3:8c:14:cb:8d:d4:00:9f:c5:bd:c4:c2:ec:
                    e0:eb:4d:c3:7d:66:de:d1:05:d9:aa:47:eb:00:b0:
                    69:5b:09:ee:77:67:4d:1e:b3:f4:d8:98:a0:ea:fc:
                    45:a5:78:62:e0:86:f4:29:c5:1c:46:2b:67:fa:bc:
                    7d:c4:b0:a3:c7:d0:a4:8a:ed:aa:cd:70:36:9a:18:
                    c9:c3:4c:f5:0f:7b:44:79:01:18:bf:17:a9:ab:09:
                    c5:71:90:d3:5b:27:30:67:8e:bf:23:f6:7e:6f:f8:
                    8a:b6:73:b7:51:c9:f4:4d:5d:ca:4e:e7:9d:a7:4f:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:1B:F1:5E:A6:D1:68:E2:98:3D:26:AA:86:BB:29:A8:08:4A:19
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:32:3f:e1:42:64:ea:6a:60:b5:bd:58:c6:f2:3c:58:e1:77:
         1b:bc:2e:4b:a6:d5:e9:49:b9:d0:66:3e:a6:17:69:f0:33:fa:
         a2:ef:22:4b:da:1d:73:df:ba:e7:fd:99:54:c1:e6:73:89:c2:
         43:73:0c:5d:82:97:67:4e:aa:75:1d:e9:08:44:d7:60:96:ad:
         b3:e9:14:65:f7:7e:2c:a5:7f:ad:d0:11:5d:04:d2:cb:cd:6c:
         09:de:f0:8f:16:3b:a8:73:1d:9d:48:13:32:73:77:a7:eb:a2:
         9e:29:78:78:be:96:d6:1c:f1:7e:7b:8c:c5:39:f5:91:e5:99:
         b6:dd:87:39:cd:7e:08:a0:45:0e:03:9d:15:38:42:ac:ae:d7:
         fe:9a:cf:78:b8:8f:46:c4:b6:6b:cc:20:3b:76:a5:39:05:e2:
         e7:09:fb:54:94:dc:bc:17:b0:94:29:94:5e:cd:84:39:0a:91:
         3a:22:ce:4e:01:a6:a1:e7:8d:ad:0d:9b:07:40:92:30:69:97:
         56:27:50:df:46:c3:02:ce:e5:11:90:07:d2:2c:4e:14:09:b3:
         05:c3:2d:54:69:8f:74:5e:a2:49:97:48:41:af:9d:dd:fa:2f:
         f7:8a:4a:ed:d6:d9:4c:ac:4f:04:1f:ff:7c:6a:1c:b0:57:2f:
         96:a7:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:37:14 2025 by rpki-client