Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa
File:                     34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa (raw, json)
Hash identifier:          uYN7DIjdrRXL6uD6QikTTaEZvsnywR2iUX+XTQJnB5U=
Subject key identifier:   B8:1C:9D:9D:73:CB:22:5A:EE:4F:A4:1E:48:A5:38:C0:B4:FB:D9:67
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       1E52A6EAC73A30F8DA4600E495524AC90E3C2CB0
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa
Signing time:             Fri 04 Apr 2025 15:20:25 +0000
ROA not before:           Fri 04 Apr 2025 15:15:25 +0000
ROA not after:            Fri 03 Apr 2026 15:20:25 +0000
asID:                     268172
IP address blocks:        45.170.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 20:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:52:a6:ea:c7:3a:30:f8:da:46:00:e4:95:52:4a:c9:0e:3c:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: Apr  4 15:15:25 2025 GMT
            Not After : Apr  3 15:20:25 2026 GMT
        Subject: CN=B81C9D9D73CB225AEE4FA41E48A538C0B4FBD967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:22:da:74:dc:08:f1:73:0c:3f:2b:85:7c:
                    18:39:d7:eb:51:86:05:ab:70:be:3c:8c:21:03:57:
                    24:5c:eb:8b:7e:10:23:89:06:09:8d:0d:8f:09:ef:
                    99:ce:74:de:79:a3:5b:d7:f9:78:ac:5c:4e:f9:0b:
                    34:af:69:f3:fd:01:91:cf:76:8c:b0:07:2a:c4:8e:
                    c1:57:c6:96:79:53:5f:fe:08:77:ef:92:07:76:eb:
                    8c:d9:59:1b:8a:14:ce:dd:e2:a9:2e:7c:5f:38:fc:
                    cd:f3:70:1b:a7:89:e4:82:4d:c0:70:31:0f:53:b7:
                    01:16:c8:17:c6:68:07:6d:bb:7b:e6:d0:31:ae:0f:
                    44:11:4a:31:56:f7:8a:1b:5f:38:00:30:bd:e0:d8:
                    f3:d3:3d:4a:9b:5e:69:d0:f1:28:85:dc:e2:38:60:
                    e9:e8:1c:99:bf:98:68:99:fb:eb:b3:4a:b0:61:6d:
                    b4:65:41:c7:cc:34:ed:cd:b6:07:94:ed:b1:8f:60:
                    d2:d9:b0:d3:e2:0c:29:3e:ec:ba:9b:19:36:5a:5b:
                    81:4e:a1:e9:db:e5:ef:f7:66:f4:46:98:c7:34:12:
                    a4:77:be:90:34:6e:7b:26:c4:63:30:27:2d:07:4b:
                    3c:7c:c6:f4:f5:43:ee:3f:2b:a4:49:b8:0d:04:7d:
                    dc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:9D:9D:73:CB:22:5A:EE:4F:A4:1E:48:A5:38:C0:B4:FB:D9:67
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:1a:73:08:d2:04:27:4a:ea:0f:d6:0f:d5:f1:ae:a2:10:
         df:d3:c5:2d:91:33:0a:59:3f:c3:71:56:2a:41:d2:69:a2:11:
         56:05:92:d3:45:ef:48:c0:47:ed:64:92:62:8c:86:bd:72:4e:
         92:8a:ad:99:31:35:f0:83:7d:52:f3:33:63:79:a5:89:07:b6:
         f3:7c:ad:92:e3:54:bd:8f:1e:93:ae:21:64:6f:78:56:01:3d:
         c3:2e:e7:b5:61:f2:55:51:e7:53:a1:19:38:74:70:75:e8:77:
         e5:7a:00:3d:13:67:d4:10:dc:88:17:68:a9:9b:81:15:77:e8:
         df:69:33:1c:50:ed:28:0b:70:8d:a8:e8:fd:9f:1c:b5:ed:c0:
         a2:7c:82:09:e1:64:de:b8:6b:89:03:f6:3e:89:34:ca:80:30:
         4a:56:28:fc:24:23:eb:03:d0:87:6e:da:a6:12:ae:62:fc:7d:
         9b:94:9d:66:36:ba:79:12:65:1a:8f:d4:5e:3e:b8:d6:ef:8e:
         a7:fc:dd:c7:80:14:62:b0:3f:c8:df:59:4e:b9:13:dd:0b:74:
         33:44:27:ec:f8:c5:18:9d:eb:04:9b:cc:a9:42:85:af:8c:e5:
         f8:54:aa:67:d2:bc:a1:06:10:96:30:ae:71:d0:6e:ec:a1:6b:
         26:b5:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:27:08 2025 by rpki-client